last executing test programs:

1m2.98790531s ago: executing program 1 (id=1171):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)

1m2.713465474s ago: executing program 1 (id=1175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c00178008000180040016"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)

1m2.712596891s ago: executing program 1 (id=1177):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x22, 0x2, 0x26, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xffffffffffffffff}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x1202, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x86c, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x14)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
mkdir(&(0x7f0000002880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8902, &(0x7f0000000080))
sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b3", 0x1}], 0x1}, 0x1011)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)

1m2.65446986s ago: executing program 2 (id=1179):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0xc, 0x0, 0x0)

1m2.584485603s ago: executing program 2 (id=1180):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000003600fb50e3d0f15185e981db175d3c4a", 0x14}], 0x1}, 0x0)

1m2.534491689s ago: executing program 2 (id=1181):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40001)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0xfff, 0xffff, 0xd, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040))

1m2.425869021s ago: executing program 2 (id=1182):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0xf, &(0x7f0000000d00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x50}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001114010027bd7000fcdbdf2508004b001300000008004f00000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x4801})
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m2.18265471s ago: executing program 1 (id=1184):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0xff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xc428, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}]}}]}, 0x8c}}, 0x8000)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)

1m2.101633122s ago: executing program 1 (id=1185):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0)

1m2.101432406s ago: executing program 2 (id=1186):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1], 0x48)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)

1m1.83461944s ago: executing program 2 (id=1187):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x58, &(0x7f00000000c0)}, 0x10)

1m1.730741194s ago: executing program 32 (id=1187):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040)
close(0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x58, &(0x7f00000000c0)}, 0x10)

1m1.679869583s ago: executing program 1 (id=1189):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89ff, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})

1m1.654992321s ago: executing program 33 (id=1189):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89ff, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"})

2.062570496s ago: executing program 0 (id=2027):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84)

2.062091334s ago: executing program 0 (id=2029):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0xc0045878, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000015036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.703494738s ago: executing program 4 (id=2036):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)

1.577579345s ago: executing program 4 (id=2037):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000001700003240000004000000000000000000000095000000000000009500000000000000950000000000000018400100feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)

1.577241346s ago: executing program 4 (id=2038):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket$kcm(0x2, 0x200000000000001, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000001000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)

1.347726766s ago: executing program 4 (id=2040):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x43}, 0x10)

1.2358582s ago: executing program 4 (id=2041):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080))
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cc000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb702, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r1, 0x0, r0}, 0x10)

1.122624604s ago: executing program 0 (id=2043):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d00"], 0xfe33)

1.039159649s ago: executing program 3 (id=2044):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r1, r1]}}], 0x20, 0x4}, 0x20004080)

964.108765ms ago: executing program 3 (id=2045):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{}, &(0x7f0000000040), 0x0}, 0x20)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002200)=""/254, 0xfe}, {&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f0000000f00)=""/4054, 0xfd6}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000001f00)=""/229, 0xe5}, {&(0x7f0000003340)=""/4082, 0xff2}, {&(0x7f0000000e00)=""/216, 0xd8}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000a40)=""/194, 0xc2}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f0000000640)=""/31, 0x1f}], 0xc}, 0x40012100)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

419.213457ms ago: executing program 0 (id=2046):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x88)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4)
setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4)

346.895325ms ago: executing program 3 (id=2047):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x4}, 0x29, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000200), 0x4)

312.303527ms ago: executing program 3 (id=2048):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

297.646664ms ago: executing program 3 (id=2049):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440d1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
getpid()
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2700], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

133.754852ms ago: executing program 0 (id=2050):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7c02d6f3ee3fb5230008000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410e00000010000000028000000000000000000000007000000019404000094040000820c3a047e2aae56"], 0x48}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

133.426557ms ago: executing program 0 (id=2051):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0xc520, 0x0, 0x0, 0x8, 0x3fc, 0x7fffffff}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x200}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.468892ms ago: executing program 3 (id=2052):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000070000006916300000000000bf07000000000000260507000fff0720670600001f000000470600000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

0s ago: executing program 4 (id=2053):
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x5, 0x5811c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43780' (ED25519) to the list of known hosts.
syzkaller login: [   48.001048][ T5772] cgroup: Unknown subsys name 'net'
[   48.110921][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.116486][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.481118][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.867367][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.271421][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.277578][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.282657][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.292187][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.295736][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.324930][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.328149][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.330944][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.334268][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.337378][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.443697][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.452693][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.458547][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.463016][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.466727][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.630266][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   58.718910][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   58.791910][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.794671][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.797217][ T5871] bridge_slave_0: entered allmulticast mode
[   58.800695][ T5871] bridge_slave_0: entered promiscuous mode
[   58.805737][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.809321][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.812390][ T5871] bridge_slave_1: entered allmulticast mode
[   58.816330][ T5871] bridge_slave_1: entered promiscuous mode
[   58.877029][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.881278][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.884173][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.886942][ T5874] bridge_slave_0: entered allmulticast mode
[   58.890093][ T5874] bridge_slave_0: entered promiscuous mode
[   58.893192][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.895530][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.898696][ T5874] bridge_slave_1: entered allmulticast mode
[   58.901554][ T5874] bridge_slave_1: entered promiscuous mode
[   58.925647][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.974260][ T5871] team0: Port device team_slave_0 added
[   58.978032][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.982244][ T5871] team0: Port device team_slave_1 added
[   58.986806][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   58.993721][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.032228][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.034841][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.045601][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.059351][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.061763][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.070773][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.104305][ T5874] team0: Port device team_slave_0 added
[   59.116006][ T5874] team0: Port device team_slave_1 added
[   59.157441][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.160644][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.170850][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.193852][ T5871] hsr_slave_0: entered promiscuous mode
[   59.197079][ T5871] hsr_slave_1: entered promiscuous mode
[   59.214965][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.217580][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.227686][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.245335][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.248677][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.251757][ T5877] bridge_slave_0: entered allmulticast mode
[   59.255376][ T5877] bridge_slave_0: entered promiscuous mode
[   59.271773][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.274643][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.277805][ T5877] bridge_slave_1: entered allmulticast mode
[   59.281768][ T5877] bridge_slave_1: entered promiscuous mode
[   59.317039][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.322369][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.387527][ T5874] hsr_slave_0: entered promiscuous mode
[   59.391831][ T5874] hsr_slave_1: entered promiscuous mode
[   59.394931][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   59.397003][ T5874] Cannot create hsr debugfs directory
[   59.400836][ T5877] team0: Port device team_slave_0 added
[   59.423679][ T5877] team0: Port device team_slave_1 added
[   59.472479][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.475193][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.486562][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.520104][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.522494][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.531893][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.580566][ T5877] hsr_slave_0: entered promiscuous mode
[   59.583384][ T5877] hsr_slave_1: entered promiscuous mode
[   59.585939][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   59.589983][ T5877] Cannot create hsr debugfs directory
[   59.687285][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.704798][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.714949][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.720820][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.812549][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.824609][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.830125][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.837206][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.902845][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.910906][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.932977][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.942793][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.987387][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.010693][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.021864][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   60.037815][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.041004][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.064985][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   60.071532][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.074550][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.105604][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.108850][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.134555][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.137677][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.171622][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.187469][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.226882][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   60.233128][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.235847][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.247080][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.249700][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.320080][   T55] Bluetooth: hci0: command tx timeout
[   60.336966][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.387761][ T5871] veth0_vlan: entered promiscuous mode
[   60.399239][   T55] Bluetooth: hci1: command tx timeout
[   60.407509][ T5871] veth1_vlan: entered promiscuous mode
[   60.412285][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.435714][ T5871] veth0_macvtap: entered promiscuous mode
[   60.454616][ T5871] veth1_macvtap: entered promiscuous mode
[   60.463015][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.478862][   T55] Bluetooth: hci2: command tx timeout
[   60.483578][ T5874] veth0_vlan: entered promiscuous mode
[   60.495166][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.503001][ T5874] veth1_vlan: entered promiscuous mode
[   60.517627][ T5877] veth0_vlan: entered promiscuous mode
[   60.526355][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.532200][ T5877] veth1_vlan: entered promiscuous mode
[   60.541418][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.545418][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.556203][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.573009][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.599660][ T5874] veth0_macvtap: entered promiscuous mode
[   60.602944][ T5877] veth0_macvtap: entered promiscuous mode
[   60.607825][ T5874] veth1_macvtap: entered promiscuous mode
[   60.616908][ T5877] veth1_macvtap: entered promiscuous mode
[   60.653419][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.670919][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.677396][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.690245][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.702315][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.710535][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.713376][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.724490][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.727178][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.737179][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.762848][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.766350][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.792791][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.797372][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.810181][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.818714][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.856596][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.862290][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.895888][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.901762][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.905280][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.915258][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.954379][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.957550][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.107302][ T5938] netlink: 'syz.2.15': attribute type 210 has an invalid length.
[   61.464401][ T5961] Illegal XDP return value 4294967274 on prog  (id 4) dev N/A, expect packet loss!
[   61.597914][    C1] hrtimer: interrupt took 30297 ns
[   61.828472][ T5976] raw_sendmsg: syz.1.28 forgot to set AF_INET. Fix it!
[   61.876068][ T5979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34'.
[   62.302538][ T5988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'.
[   62.305335][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'.
[   62.398457][   T55] Bluetooth: hci0: command tx timeout
[   62.478236][   T55] Bluetooth: hci1: command tx timeout
[   62.558232][   T55] Bluetooth: hci2: command tx timeout
[   62.785712][ T6014] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[   63.253291][ T6025] netlink: 'syz.1.56': attribute type 2 has an invalid length.
[   63.257767][ T6025] netlink: 'syz.1.56': attribute type 7 has an invalid length.
[   63.262180][ T6025] netlink: 85 bytes leftover after parsing attributes in process `syz.1.56'.
[   63.266318][ T6025] netlink: 130140 bytes leftover after parsing attributes in process `syz.1.56'.
[   63.271054][ T6025] netlink: 'syz.1.56': attribute type 2 has an invalid length.
[   63.273967][ T6025] netlink: 'syz.1.56': attribute type 7 has an invalid length.
[   63.277119][ T6025] netlink: 85 bytes leftover after parsing attributes in process `syz.1.56'.
[   63.344866][ T6027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.725825][ T6035] infiniband syz2: set down
[   63.727628][ T6035] infiniband syz2: added syzkaller0
[   63.750940][ T6035] RDS/IB: syz2: added
[   63.752698][ T6035] smc: adding ib device syz2 with port count 1
[   63.755108][ T6035] smc:    ib device syz2 port 1 has pnetid 
[   64.467543][ T1089] smc: removing ib device syz2
[   64.479917][   T55] Bluetooth: hci0: command tx timeout
[   64.559271][   T55] Bluetooth: hci1: command tx timeout
[   64.638389][   T55] Bluetooth: hci2: command tx timeout
[   65.197786][ T6076] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[   65.217479][ T6076] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   65.223762][ T6076] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.79'.
[   65.936042][ T6114] syz.0.98 uses obsolete (PF_INET,SOCK_PACKET)
[   66.560795][   T55] Bluetooth: hci0: command tx timeout
[   66.614103][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   66.638521][   T55] Bluetooth: hci1: command tx timeout
[   66.674046][   T55] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8
[   66.719715][   T55] Bluetooth: hci2: command tx timeout
[   66.794622][ T6149] netlink: 172 bytes leftover after parsing attributes in process `syz.1.112'.
[   66.797846][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'.
[   66.922140][ T6159] Zero length message leads to an empty skb
[   67.079802][ T6170] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'.
[   67.505610][ T6179] can: request_module (can-proto-0) failed.
[   67.669928][ T6186] netlink: 'syz.1.127': attribute type 29 has an invalid length.
[   67.674604][ T6186] netlink: 'syz.1.127': attribute type 29 has an invalid length.
[   67.678156][ T6186] netlink: 'syz.1.127': attribute type 29 has an invalid length.
[   68.220480][   T55] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[   68.220500][   T55] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[   68.289507][ T6209] netlink: 'syz.2.138': attribute type 46 has an invalid length.
[   68.292919][ T6209] netlink: 55 bytes leftover after parsing attributes in process `syz.2.138'.
[   68.534985][ T6221] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   68.549668][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.922960][ T6243] netlink: 'syz.2.152': attribute type 29 has an invalid length.
[   68.926582][ T6243] netlink: 'syz.2.152': attribute type 29 has an invalid length.
[   68.930613][ T6243] netlink: 'syz.2.152': attribute type 29 has an invalid length.
[   68.934385][ T6243] netlink: 'syz.2.152': attribute type 29 has an invalid length.
[   69.057014][ T6251] netlink: 'syz.1.155': attribute type 10 has an invalid length.
[   69.136666][ T6251] team0: Device ipvlan1 failed to register rx_handler
[   70.224385][ T6292] blkio.reset_stats is deprecated
[   70.329456][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'.
[   70.481024][ T6297] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   71.151945][ T6322] netlink: 172 bytes leftover after parsing attributes in process `syz.0.184'.
[   71.288527][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.291578][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.349378][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.187'.
[   71.353181][ T6338] dummy0: entered promiscuous mode
[   71.356652][ T6338] bridge0: port 3(dummy0) entered blocking state
[   71.362455][ T6338] bridge0: port 3(dummy0) entered disabled state
[   71.365261][ T6338] dummy0: entered allmulticast mode
[   71.369948][ T6338] bridge0: port 3(dummy0) entered blocking state
[   71.372758][ T6338] bridge0: port 3(dummy0) entered forwarding state
[   71.895181][ T6361] netlink: 52 bytes leftover after parsing attributes in process `syz.1.202'.
[   72.660791][ T6404] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.219'.
[   72.690575][ T6406] C: renamed from team_slave_0 (while UP)
[   72.706598][ T6406] validate_nla: 4 callbacks suppressed
[   72.706607][ T6406] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   72.711410][ T6406] netlink: 152 bytes leftover after parsing attributes in process `syz.2.223'.
[   72.714631][ T6406] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   72.723098][ T6400] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.219'.
[   73.081264][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   73.277433][ T6434] netlink: 'syz.2.236': attribute type 3 has an invalid length.
[   73.330420][ T6436] netlink: 830 bytes leftover after parsing attributes in process `syz.0.237'.
[   73.494139][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[   73.557567][ T6452] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   73.584403][ T6452] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   73.677370][ T6458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.246'.
[   76.006659][ T6544] netlink: 'syz.0.284': attribute type 11 has an invalid length.
[   76.014235][ T6544] netlink: 148 bytes leftover after parsing attributes in process `syz.0.284'.
[   76.251530][ T6554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.289'.
[   77.105339][ T6593] netlink: 'syz.0.304': attribute type 9 has an invalid length.
[   77.110246][ T6593] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.304'.
[   77.341662][ T6598] sctp: [Deprecated]: syz.2.307 (pid 6598) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.341662][ T6598] Use struct sctp_sack_info instead
[   77.412431][   T24] cfg80211: failed to load regulatory.db
[   79.061159][ T6674] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.333'.
[   79.173233][ T6683] warning: `syz.1.335' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.201722][ T6689] netlink: 'syz.2.339': attribute type 46 has an invalid length.
[   79.205096][ T6689] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.339'.
[   79.307812][ T6695] IPv6: Can't replace route, no match found
[   79.508389][ T6716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'.
[   80.005087][ T6743] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[   81.085140][ T6770] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[   81.215240][ T6771] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.370'.
[   81.221920][ T6771] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.370'.
[   81.225229][ T6771] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.370'.
[   82.173264][ T6782] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.376'.
[   82.390148][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'.
[   83.080745][ T6814] netlink: 830 bytes leftover after parsing attributes in process `syz.2.389'.
[   83.221246][ T6831] netlink: 'syz.2.398': attribute type 26 has an invalid length.
[   83.465418][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'.
[   83.716408][ T6866] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   83.723437][ T6866] netlink: 'syz.1.410': attribute type 17 has an invalid length.
[   83.862017][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.881365][ T6877] bridge_slave_0 (unregistering): left allmulticast mode
[   83.883793][ T6877] bridge_slave_0 (unregistering): left promiscuous mode
[   83.886892][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.736638][ T6906] __nla_validate_parse: 2 callbacks suppressed
[   84.736652][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.428'.
[   85.434583][ T6913] syzkaller0: entered promiscuous mode
[   85.437205][ T6913] syzkaller0: entered allmulticast mode
[   85.946037][ T6926] netlink: 'syz.2.436': attribute type 10 has an invalid length.
[   86.451512][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.461687][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.469910][ T6926] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   86.697088][ T6938] netlink: 'syz.1.441': attribute type 10 has an invalid length.
[   86.701209][ T6938] netlink: 152 bytes leftover after parsing attributes in process `syz.1.441'.
[   86.706703][ T6938] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   87.281763][   T55] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[   87.802242][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'.
[   88.493591][ T7037] openvswitch: netlink: Flow actions attr not present in new flow.
[   88.714657][   T55] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   89.544023][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'.
[   89.604889][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'.
[   89.780997][ T7067] syzkaller0: entered promiscuous mode
[   89.783053][ T7067] syzkaller0: entered allmulticast mode
[   90.728066][   T55] Bluetooth: hci0: command tx timeout
[   91.434055][ T7091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.510'.
[   91.439772][ T7091] netlink: 46 bytes leftover after parsing attributes in process `syz.1.510'.
[   91.443506][ T7091] netlink: 46 bytes leftover after parsing attributes in process `syz.1.510'.
[   92.496839][ T7120] netlink: 60 bytes leftover after parsing attributes in process `syz.0.521'.
[   92.862139][ T7135] netlink: 'syz.0.527': attribute type 10 has an invalid length.
[   92.876469][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.882630][ T7135] team0: Port device bond0 added
[   95.710214][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'.
[   95.975020][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.533'.
[   96.009304][ T7148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.032841][ T7177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.119159][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[   97.123045][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'.
[   97.126815][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'.
[   97.255460][ T7193] netlink: 'syz.1.552': attribute type 21 has an invalid length.
[   97.260483][ T7193] netlink: 156 bytes leftover after parsing attributes in process `syz.1.552'.
[   97.327566][ T7195] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   97.330571][ T7195] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   98.791118][ T7242] netlink: 5 bytes leftover after parsing attributes in process `syz.1.572'.
[   99.253331][ T7250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.331600][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.578'.
[   99.357558][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'.
[  100.352930][ T7256] infiniband syz1: set active
[  100.355841][ T7256] infiniband syz1: added bond0
[  100.359072][ T7256] syz1: rxe_create_cq: returned err = -12
[  100.363091][ T7256] infiniband syz1: Couldn't create ib_mad CQ
[  100.368300][ T7256] infiniband syz1: Couldn't open port 1
[  100.411020][ T7256] RDS/IB: syz1: added
[  100.412903][ T7256] smc: adding ib device syz1 with port count 1
[  100.418030][ T7256] smc:    ib device syz1 port 1 has pnetid 
[  100.454605][ T7296] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.596'.
[  100.511423][ T7301] netlink: 'syz.2.598': attribute type 1 has an invalid length.
[  100.541907][ T7304] netlink: 'syz.2.599': attribute type 10 has an invalid length.
[  100.678869][ T7299] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.684711][ T7299] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.042795][ T7318] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.604'.
[  102.204482][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.611'.
[  102.208196][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.611'.
[  102.740479][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'.
[  102.855716][ T7363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.621'.
[  102.893975][ T7365] netlink: 68 bytes leftover after parsing attributes in process `syz.1.622'.
[  103.080977][ T7375] netlink: 'syz.1.627': attribute type 10 has an invalid length.
[  103.083945][ T7375] netlink: 55 bytes leftover after parsing attributes in process `syz.1.627'.
[  103.521786][ T7389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.633'.
[  103.526621][ T7389] netlink: 10 bytes leftover after parsing attributes in process `syz.2.633'.
[  103.751577][ T7393] -1: renamed from syzkaller0
[  103.847159][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'.
[  104.017092][ T7415] netlink: 'syz.0.645': attribute type 29 has an invalid length.
[  104.027083][ T7415] netlink: 'syz.0.645': attribute type 29 has an invalid length.
[  104.031021][ T7415] netlink: 'syz.0.645': attribute type 29 has an invalid length.
[  104.034466][ T7415] netlink: 'syz.0.645': attribute type 29 has an invalid length.
[  104.131429][ T7419] netlink: 'syz.0.647': attribute type 10 has an invalid length.
[  104.162329][ T7409] delete_channel: no stack
[  104.221618][ T7422] netlink: 'syz.0.647': attribute type 29 has an invalid length.
[  104.225017][ T7422] netlink: 'syz.0.647': attribute type 3 has an invalid length.
[  104.230554][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.647'.
[  104.381795][ T7419] team0: Device ipvlan1 failed to register rx_handler
[  106.978127][ T7444] netlink: 'syz.1.658': attribute type 21 has an invalid length.
[  107.121181][ T7425] Set syz1 is full, maxelem 65536 reached
[  107.220429][ T7461] lo speed is unknown, defaulting to 1000
[  107.223430][ T7461] lo speed is unknown, defaulting to 1000
[  107.253997][ T7461] lo speed is unknown, defaulting to 1000
[  107.283922][ T7461] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  107.364441][ T7461] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  107.501771][ T7461] lo speed is unknown, defaulting to 1000
[  107.522651][ T7461] lo speed is unknown, defaulting to 1000
[  107.534819][ T7461] lo speed is unknown, defaulting to 1000
[  107.587459][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[  107.592619][ T7488] netlink: 6 bytes leftover after parsing attributes in process `syz.0.678'.
[  107.683337][ T7496] netlink: 65019 bytes leftover after parsing attributes in process `syz.1.682'.
[  107.726081][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'.
[  107.731869][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'.
[  109.213078][ T7590] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.726'.
[  109.216787][ T7589] netlink: 'syz.1.725': attribute type 1 has an invalid length.
[  109.220565][ T7589] netlink: 'syz.1.725': attribute type 2 has an invalid length.
[  109.403867][ T7605] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.733'.
[  109.443746][ T7606] veth0_vlan: entered allmulticast mode
[  110.109432][ T7614] netlink: 14 bytes leftover after parsing attributes in process `syz.1.735'.
[  110.116620][ T7614] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.735'.
[  110.134363][ T7614] netlink: 10 bytes leftover after parsing attributes in process `syz.1.735'.
[  110.983559][ T7669] Q6\bY4: renamed from lo (while UP)
[  111.317748][ T7691] netlink: 'syz.0.771': attribute type 10 has an invalid length.
[  111.328564][ T7691] netlink: 'syz.0.771': attribute type 16 has an invalid length.
[  111.366781][ T7695] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  111.404307][ T7697] : renamed from team_slave_1 (while UP)
[  112.582538][ T7731] netlink: 'syz.1.789': attribute type 3 has an invalid length.
[  112.958675][ T7762] __nla_validate_parse: 6 callbacks suppressed
[  112.958685][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[  113.035844][ T7772] delete_channel: no stack
[  114.346767][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'.
[  114.777221][ T7816] veth1_macvtap: left promiscuous mode
[  114.779119][ T7816] macsec0: entered allmulticast mode
[  115.207124][   T55] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  115.665429][ T7846] netlink: 'syz.0.840': attribute type 10 has an invalid length.
[  115.670368][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'.
[  115.674446][ T7846] vcan0: entered promiscuous mode
[  115.677865][ T7846] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  116.018829][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.849'.
[  116.023767][ T7869] netlink: 'syz.0.849': attribute type 10 has an invalid length.
[  116.027174][ T7869] netlink: 2 bytes leftover after parsing attributes in process `syz.0.849'.
[  116.031459][ T7869] bond0: entered promiscuous mode
[  116.033730][ T7869] bond_slave_0: entered promiscuous mode
[  116.036380][ T7869] bond_slave_1: entered promiscuous mode
[  116.044991][ T7869] team0: Port device bond0 removed
[  116.052899][ T7869] bridge0: port 3(bond0) entered blocking state
[  116.055764][ T7869] bridge0: port 3(bond0) entered disabled state
[  116.058923][ T7869] bond0: entered allmulticast mode
[  116.061970][ T7869] bond_slave_0: entered allmulticast mode
[  116.064482][ T7869] bond_slave_1: entered allmulticast mode
[  116.081439][ T7869] netlink: 'syz.0.849': attribute type 4 has an invalid length.
[  116.084839][ T7869] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.849'.
[  116.326985][ T7881] netlink: 104 bytes leftover after parsing attributes in process `syz.2.855'.
[  116.617709][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'.
[  116.623885][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'.
[  116.720715][ T7902] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  116.723935][ T7902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.787433][ T7910] netlink: 332 bytes leftover after parsing attributes in process `syz.0.869'.
[  118.128689][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'.
[  118.144111][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'.
[  118.264910][ T7962] tap0: tun_chr_ioctl cmd 1074025677
[  118.267268][ T7962] tap0: linktype set to 825
[  118.521480][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.902'.
[  118.842870][   T55] Bluetooth: hci2: Malformed HCI Event: 0x22
[  119.057863][ T8028] tap0: tun_chr_ioctl cmd 1074025675
[  119.060088][ T8028] tap0: persist enabled
[  119.062053][ T8028] tap0: tun_chr_ioctl cmd 1074025675
[  119.065316][ T8028] tap0: persist enabled
[  119.204042][   T55] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  119.489178][ T8057] netlink: 180 bytes leftover after parsing attributes in process `syz.2.937'.
[  119.665982][ T8072] netlink: 'syz.1.944': attribute type 6 has an invalid length.
[  119.670816][ T8072] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  119.679297][ T8072] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.944'.
[  120.430768][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'.
[  120.528338][ T8128] netlink: 'syz.0.963': attribute type 2 has an invalid length.
[  120.530966][ T8128] netlink: 'syz.0.963': attribute type 3 has an invalid length.
[  120.534441][ T8128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.963'.
[  120.743021][ T8131] netlink: 'syz.2.964': attribute type 1 has an invalid length.
[  120.746430][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  121.290052][ T8147] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  121.333337][ T8149] netlink: 56 bytes leftover after parsing attributes in process `syz.1.972'.
[  121.337373][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'.
[  122.233119][ T8181] netlink: 'syz.1.982': attribute type 11 has an invalid length.
[  123.727704][ T8215] syzkaller0: entered promiscuous mode
[  123.730194][ T8215] syzkaller0: entered allmulticast mode
[  124.874207][ T8178] syz.0.984: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  124.882476][ T8178] CPU: 0 UID: 0 PID: 8178 Comm: syz.0.984 Not tainted syzkaller #0 PREEMPT(full) 
[  124.882492][ T8178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.882499][ T8178] Call Trace:
[  124.882505][ T8178]  <TASK>
[  124.882510][ T8178]  dump_stack_lvl+0x189/0x250
[  124.882531][ T8178]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.882546][ T8178]  ? __pfx__printk+0x10/0x10
[  124.882563][ T8178]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.882578][ T8178]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.882593][ T8178]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  124.882609][ T8178]  warn_alloc+0x214/0x310
[  124.882633][ T8178]  ? __pfx_warn_alloc+0x10/0x10
[  124.882657][ T8178]  ? __get_vm_area_node+0x28f/0x300
[  124.882675][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882696][ T8178]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  124.882735][ T8178]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.882752][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882771][ T8178]  ? __get_vm_area_node+0x28f/0x300
[  124.882787][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882806][ T8178]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  124.882824][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882862][ T8178]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.882883][ T8178]  ? rcu_is_watching+0x15/0xb0
[  124.882897][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882914][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882929][ T8178]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  124.882946][ T8178]  ? hash_netportnet_create+0x354/0xf90
[  124.882964][ T8178]  ? hash_netportnet_create+0x2fa/0xf90
[  124.882985][ T8178]  hash_netportnet_create+0x354/0xf90
[  124.883009][ T8178]  ? __nla_parse+0x40/0x60
[  124.883027][ T8178]  ? __pfx_hash_netportnet_create+0x10/0x10
[  124.883047][ T8178]  ip_set_create+0xa97/0x1940
[  124.883061][ T8178]  ? ip_set_create+0x4a2/0x1940
[  124.883084][ T8178]  ? __pfx_ip_set_create+0x10/0x10
[  124.883150][ T8178]  nfnetlink_rcv_msg+0xb4d/0x1130
[  124.883168][ T8178]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  124.883197][ T8178]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  124.883210][ T8178]  ? kasan_save_free_info+0x46/0x50
[  124.883259][ T8178]  netlink_rcv_skb+0x208/0x470
[  124.883283][ T8178]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  124.883300][ T8178]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.883325][ T8178]  ? bpf_lsm_capable+0x9/0x20
[  124.883341][ T8178]  ? security_capable+0x7e/0x2e0
[  124.883364][ T8178]  nfnetlink_rcv+0x26a/0x2520
[  124.883382][ T8178]  ? __dev_queue_xmit+0x1d79/0x3b50
[  124.883404][ T8178]  ? __dev_queue_xmit+0x27b/0x3b50
[  124.883425][ T8178]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  124.883439][ T8178]  ? __pfx___dev_queue_xmit+0x10/0x10
[  124.883462][ T8178]  ? ref_tracker_free+0x63a/0x7d0
[  124.883478][ T8178]  ? __asan_memcpy+0x40/0x70
[  124.883491][ T8178]  ? __pfx_ref_tracker_free+0x10/0x10
[  124.883505][ T8178]  ? __skb_clone+0x63/0x7a0
[  124.883519][ T8178]  ? __skb_clone+0x483/0x7a0
[  124.883536][ T8178]  ? skb_clone+0x246/0x3a0
[  124.883551][ T8178]  ? __netlink_deliver_tap+0x807/0x850
[  124.883568][ T8178]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.883589][ T8178]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.883611][ T8178]  netlink_unicast+0x82f/0x9e0
[  124.883633][ T8178]  ? __pfx_netlink_unicast+0x10/0x10
[  124.883650][ T8178]  ? netlink_sendmsg+0x642/0xb30
[  124.883665][ T8178]  ? skb_put+0x11b/0x210
[  124.883686][ T8178]  netlink_sendmsg+0x805/0xb30
[  124.883710][ T8178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.883729][ T8178]  ? aa_sock_msg_perm+0xf1/0x1d0
[  124.883749][ T8178]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.883762][ T8178]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.883779][ T8178]  __sock_sendmsg+0x21c/0x270
[  124.883798][ T8178]  ____sys_sendmsg+0x505/0x830
[  124.883814][ T8178]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.883832][ T8178]  ? import_iovec+0x74/0xa0
[  124.883847][ T8178]  ___sys_sendmsg+0x21f/0x2a0
[  124.883860][ T8178]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.883897][ T8178]  ? __fget_files+0x2a/0x420
[  124.883906][ T8178]  ? __fget_files+0x3a0/0x420
[  124.883923][ T8178]  __x64_sys_sendmsg+0x19b/0x260
[  124.883936][ T8178]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.883955][ T8178]  ? rcu_is_watching+0x15/0xb0
[  124.883969][ T8178]  ? do_syscall_64+0xbe/0x3b0
[  124.883988][ T8178]  do_syscall_64+0xfa/0x3b0
[  124.884002][ T8178]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.884017][ T8178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.884028][ T8178]  ? exc_page_fault+0x9f/0xf0
[  124.884044][ T8178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.884054][ T8178] RIP: 0033:0x7fcca8b8ebe9
[  124.884065][ T8178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.884074][ T8178] RSP: 002b:00007fcca99d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.884087][ T8178] RAX: ffffffffffffffda RBX: 00007fcca8db5fa0 RCX: 00007fcca8b8ebe9
[  124.884095][ T8178] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  124.884101][ T8178] RBP: 00007fcca8c11e19 R08: 0000000000000000 R09: 0000000000000000
[  124.884134][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.884140][ T8178] R13: 00007fcca8db6038 R14: 00007fcca8db5fa0 R15: 00007ffe0ed79d08
[  124.884159][ T8178]  </TASK>
[  124.884164][ T8178] Mem-Info:
[  125.087006][ T8178] active_anon:4813 inactive_anon:1 isolated_anon:0
[  125.087006][ T8178]  active_file:10849 inactive_file:38241 isolated_file:0
[  125.087006][ T8178]  unevictable:1768 dirty:124 writeback:0
[  125.087006][ T8178]  slab_reclaimable:9584 slab_unreclaimable:55099
[  125.087006][ T8178]  mapped:18004 shmem:2438 pagetables:953
[  125.087006][ T8178]  sec_pagetables:0 bounce:0
[  125.087006][ T8178]  kernel_misc_reclaimable:0
[  125.087006][ T8178]  free:257641 free_pcp:18692 free_cma:0
[  125.106638][ T8178] Node 0 active_anon:12568kB inactive_anon:0kB active_file:10076kB inactive_file:23196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40656kB dirty:272kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5232kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.119776][ T8178] Node 1 active_anon:6684kB inactive_anon:4kB active_file:33320kB inactive_file:129768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31360kB dirty:224kB writeback:0kB shmem:4696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5916kB pagetables:1716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.131615][ T8178] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.141790][ T8178] lowmem_reserve[]: 0 811 811 811 811
[  125.144086][ T8178] Node 0 DMA32 free:283888kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12568kB inactive_anon:0kB active_file:10076kB inactive_file:23196kB unevictable:3536kB writepending:272kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:17996kB local_pcp:4684kB free_cma:0kB
[  125.150257][ T8221] __nla_validate_parse: 8 callbacks suppressed
[  125.150272][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  125.155677][ T8178] lowmem_reserve[]: 0 0 0 0 0
[  125.164829][ T8178] Node 1 DMA32 free:448128kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:10128kB local_pcp:9984kB free_cma:0kB
[  125.177395][ T8178] lowmem_reserve[]: 0 0 854 854 854
[  125.180906][ T8178] Node 1 Normal free:291288kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6752kB inactive_anon:4kB active_file:33320kB inactive_file:129768kB unevictable:3536kB writepending:224kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38840kB local_pcp:16536kB free_cma:0kB
[  125.194315][ T8178] lowmem_reserve[]: 0 0 0 0 0
[  125.195978][ T8178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  125.201619][ T8178] Node 0 DMA32: 160*4kB (UE) 133*8kB (U) 138*16kB (UE) 131*32kB (UME) 27*64kB (UME) 19*128kB (ME) 3*256kB (UME) 3*512kB (UME) 1*1024kB (E) 3*2048kB (UME) 64*4096kB (M) = 283880kB
[  125.209432][ T8178] Node 1 DMA32: 2*4kB (M) 3*8kB (UM) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 106*4096kB (UM) = 448128kB
[  125.215041][ T8178] Node 1 Normal: 2152*4kB (UME) 929*8kB (UM) 513*16kB (UM) 153*32kB (UME) 276*64kB (UME) 128*128kB (UM) 35*256kB (UME) 16*512kB (UME) 6*1024kB (UM) 6*2048kB (UM) 47*4096kB (UM) = 291288kB
[  125.223579][ T8178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.226687][ T8178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.229921][ T8178] 51556 total pagecache pages
[  125.231569][ T8178] 28 pages in swap cache
[  125.233144][ T8178] Free swap  = 124816kB
[  125.234559][ T8178] Total swap = 124996kB
[  125.235965][ T8178] 786301 pages RAM
[  125.237409][ T8178] 0 pages HighMem/MovableOnly
[  125.240312][ T8178] 241330 pages reserved
[  125.242007][ T8178] 0 pages cma reserved
[  125.366664][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1001'.
[  125.386000][ T8178] syz.0.984 (8178) used greatest stack depth: 15824 bytes left
[  125.715200][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'.
[  125.722841][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'.
[  125.774618][ T8304] netlink: 'syz.2.1016': attribute type 10 has an invalid length.
[  125.782882][ T8304] bridge0: port 3(dummy0) entered disabled state
[  125.787384][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.796729][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.846291][ T8304] bridge0: port 3(dummy0) entered blocking state
[  125.849204][ T8304] bridge0: port 3(dummy0) entered forwarding state
[  125.852201][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.855241][ T8304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.858629][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.861504][ T8304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.874090][ T8304] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  126.101599][ T8363] netlink: 'syz.2.1024': attribute type 64 has an invalid length.
[  126.150421][ T8368] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1027'.
[  126.156564][ T8370] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1026'.
[  126.274687][ T8380] netlink: 'syz.2.1032': attribute type 25 has an invalid length.
[  126.283576][ T8380] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1032'.
[  126.291190][ T8378] netlink: 'syz.1.1031': attribute type 6 has an invalid length.
[  126.305632][ T8380] netlink: 'syz.2.1032': attribute type 21 has an invalid length.
[  126.310077][ T8380] netlink: 14045 bytes leftover after parsing attributes in process `syz.2.1032'.
[  126.425378][ T8382] : port 1(vlan0) entered blocking state
[  126.441868][ T8382] : port 1(vlan0) entered disabled state
[  126.450207][ T8382] vlan0: entered allmulticast mode
[  126.454761][ T8382] veth0_vlan: entered allmulticast mode
[  126.463645][ T8382] vlan0: entered promiscuous mode
[  126.525922][ T8387] netlink: 'syz.1.1034': attribute type 10 has an invalid length.
[  126.537398][ T8387] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1034'.
[  126.888986][ T8395] Q6\bY4 speed is unknown, defaulting to 1000
[  127.016613][ T8411] netlink: 'syz.2.1041': attribute type 7 has an invalid length.
[  127.330560][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1047'.
[  127.409021][ T8429] netlink: 'syz.0.1049': attribute type 4 has an invalid length.
[  127.551577][   T55] Bluetooth: hci0: Malformed LE Event: 0x0d
[  128.782989][ T8462] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  128.855525][ T8464] openvswitch: netlink: Duplicate or invalid key (type 0).
[  128.860190][ T8464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.692118][ T8530] __nla_validate_parse: 2 callbacks suppressed
[  130.692259][ T8530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1090'.
[  130.709785][ T8534] openvswitch: netlink: Message has 4 unknown bytes.
[  130.877507][   T55] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  130.877534][   T55] Bluetooth: unknown link type 8
[  130.887425][   T55] Bluetooth: hci1: connection err: -111
[  131.232288][ T8548] netlink: 'syz.1.1099': attribute type 5 has an invalid length.
[  131.243492][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[  131.307397][ T8555] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1102'.
[  131.565135][ T8580] netlink: 'syz.1.1114': attribute type 2 has an invalid length.
[  131.571408][ T8580] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1114'.
[  131.955348][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1124'.
[  132.065397][ T8608] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  132.259915][ T8616] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1127'.
[  132.268797][ T8616] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  132.736525][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.739032][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  134.152611][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[  134.156621][ T8629] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1133'.
[  134.700706][ T8648] netlink: 'syz.2.1142': attribute type 4 has an invalid length.
[  134.704244][ T8648] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1142'.
[  134.806430][ T8648] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  134.948326][ T8653] delete_channel: no stack
[  135.497819][ T8662] sit0: entered allmulticast mode
[  135.542645][ T8662] sit0: entered promiscuous mode
[  136.334439][ T8675] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1155'.
[  136.348757][ T8674] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1155'.
[  136.356614][ T8676] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1155'.
[  136.868659][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'.
[  136.876439][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'.
[  136.916999][ T8707] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1167'.
[  136.920673][ T8707] tc_dump_action: action bad kind
[  136.983157][ T8711] IPv6: NLM_F_CREATE should be specified when creating new route
[  137.352250][ T8725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.719707][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'.
[  137.723201][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'.
[  138.353306][ T5929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.437525][ T5929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.496220][ T5929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.538154][ T5929] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.646162][ T5929] bridge_slave_1: left allmulticast mode
[  138.648817][ T5929] bridge_slave_1: left promiscuous mode
[  138.651936][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.965852][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.971359][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.975729][ T5929] bond0 (unregistering): Released all slaves
[  139.292003][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  139.296106][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  139.300688][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  139.305767][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  139.325572][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  139.442060][ T5929] hsr_slave_0: left promiscuous mode
[  139.454069][ T5929] hsr_slave_1: left promiscuous mode
[  139.462087][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.469678][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.475265][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.488345][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.516821][ T5929] veth1_macvtap: left promiscuous mode
[  139.525369][ T5929] veth0_macvtap: left promiscuous mode
[  139.530816][ T5929] veth1_vlan: left promiscuous mode
[  139.533240][ T5929] veth0_vlan: left promiscuous mode
[  139.719987][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'.
[  139.751919][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.756022][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.761702][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.764962][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.775375][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.804981][ T8792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.807849][ T8792] IPv6: NLM_F_CREATE should be set when creating new route
[  139.810441][ T8792] IPv6: NLM_F_CREATE should be set when creating new route
[  139.813229][ T8792] IPv6: NLM_F_CREATE should be set when creating new route
[  139.991629][ T5929] team0 (unregistering): Port device team_slave_1 removed
[  140.021689][ T5929] team0 (unregistering): Port device team_slave_0 removed
[  140.243431][ T8773] Q6\bY4 speed is unknown, defaulting to 1000
[  140.270770][  T791] Q6\bY4 speed is unknown, defaulting to 1000
[  140.275727][  T791] infiniband syz2: ib_query_port failed (-19)
[  140.466931][ T8809] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[  140.535348][ T8773] chnl_net:caif_netlink_parms(): no params data found
[  140.642272][ T8814] netlink: 'syz.0.1200': attribute type 39 has an invalid length.
[  140.757310][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.760300][ T8773] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.762848][ T8773] bridge_slave_0: entered allmulticast mode
[  140.766413][ T8773] bridge_slave_0: entered promiscuous mode
[  140.782151][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.784963][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.788474][ T8773] bridge_slave_1: entered allmulticast mode
[  140.792577][ T8773] bridge_slave_1: entered promiscuous mode
[  140.838081][ T8773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.844798][ T8773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.891904][ T8773] team0: Port device team_slave_0 added
[  140.899902][ T8773] team0: Port device team_slave_1 added
[  140.903102][ T8788] chnl_net:caif_netlink_parms(): no params data found
[  140.975123][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.989208][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.002236][ T8773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.009449][ T8773] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.012372][ T8773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.027592][ T8773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.053236][ T8825] netlink: 'syz.0.1201': attribute type 2 has an invalid length.
[  141.305065][ T8773] hsr_slave_0: entered promiscuous mode
[  141.308716][ T8773] hsr_slave_1: entered promiscuous mode
[  141.338145][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.341250][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.347605][ T8788] bridge_slave_0: entered allmulticast mode
[  141.353381][ T8788] bridge_slave_0: entered promiscuous mode
[  141.358212][   T55] Bluetooth: hci0: command tx timeout
[  141.389264][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.392522][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.395897][ T8788] bridge_slave_1: entered allmulticast mode
[  141.411065][ T8788] bridge_slave_1: entered promiscuous mode
[  141.461364][ T8842] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1204'.
[  141.503221][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.528798][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.620988][ T8788] team0: Port device team_slave_0 added
[  141.658801][ T8788] team0: Port device team_slave_1 added
[  141.719167][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.722290][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.742249][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.765156][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.769999][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.783122][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.868142][   T55] Bluetooth: hci2: command tx timeout
[  141.871325][ T8788] hsr_slave_0: entered promiscuous mode
[  141.874657][ T8788] hsr_slave_1: entered promiscuous mode
[  141.877745][ T8788] debugfs: 'hsr0' already exists in 'hsr'
[  141.880558][ T8788] Cannot create hsr debugfs directory
[  141.892178][ T8773] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  141.941083][ T8773] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  142.015926][ T8773] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  142.041276][ T8773] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  142.301240][ T8788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  142.311628][ T8788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  142.329169][ T8788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  142.336454][ T8788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  142.355589][ T8773] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.402516][ T8773] 8021q: adding VLAN 0 to HW filter on device team0
[  142.420800][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.423887][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.428486][ T8877] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  142.433849][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.436663][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.444213][ T8877] macvlan0: entered promiscuous mode
[  142.446709][ T8877] macvlan0: entered allmulticast mode
[  142.456716][ T8877] veth1_vlan: entered allmulticast mode
[  142.464467][ T8877] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  142.589732][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.645491][ T8788] 8021q: adding VLAN 0 to HW filter on device team0
[  142.685064][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.688353][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.721453][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.724745][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.885751][ T8773] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.141360][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.265852][ T8788] veth0_vlan: entered promiscuous mode
[  143.299189][ T8788] veth1_vlan: entered promiscuous mode
[  143.365561][ T8773] veth0_vlan: entered promiscuous mode
[  143.383794][ T8773] veth1_vlan: entered promiscuous mode
[  143.395871][ T8788] veth0_macvtap: entered promiscuous mode
[  143.407647][ T8788] veth1_macvtap: entered promiscuous mode
[  143.440637][   T55] Bluetooth: hci0: command tx timeout
[  143.463096][ T8773] veth0_macvtap: entered promiscuous mode
[  143.484486][ T8773] veth1_macvtap: entered promiscuous mode
[  143.499054][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.499541][ T8916] bpf: Bad value for 'mode'
[  143.525173][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.547768][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.566795][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.576710][ T8773] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.595000][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.609411][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.613409][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.620534][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.624949][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.661600][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.695499][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.767000][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.776354][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.825830][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.829534][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.883286][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.893091][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.923697][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.929466][   T55] Bluetooth: hci2: command tx timeout
[  143.944840][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.113068][ T8941] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  144.862061][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'.
[  145.518084][   T55] Bluetooth: hci0: command tx timeout
[  145.525205][ T8988] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  145.634309][ T8996] team0: Port device team_slave_0 removed
[  145.650735][ T8996] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  145.791977][ T9009] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1245'.
[  145.967725][ T9023] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1252'.
[  145.998132][   T55] Bluetooth: hci2: command tx timeout
[  146.371736][ T9041] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1259'.
[  146.515781][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'.
[  147.602575][   T55] Bluetooth: hci0: command tx timeout
[  147.759783][   T26] wlan1: Trigger new scan to find an IBSS to join
[  147.994771][ T9055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.034439][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'.
[  148.079743][   T55] Bluetooth: hci2: command tx timeout
[  148.820037][ T9063] netlink: del zone limit has 4 unknown bytes
[  148.943040][ T9075] bpf: Bad value for 'gid'
[  149.003318][ T9079] netlink: 'syz.3.1277': attribute type 1 has an invalid length.
[  149.006099][ T9079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.165503][ T9087] netlink: 'syz.0.1281': attribute type 12 has an invalid length.
[  149.178838][ T9087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1281'.
[  149.354579][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1287'.
[  149.414505][ T9102] debugfs: '!' already exists in 'ieee80211'
[  149.537016][ T9110] netlink: 'syz.0.1292': attribute type 11 has an invalid length.
[  149.540806][ T9110] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1292'.
[  149.546066][ T9109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.820312][ T9123] : renamed from vlan0 (while UP)
[  149.826915][ T9126] netlink: 'syz.0.1298': attribute type 2 has an invalid length.
[  149.927218][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'.
[  150.025844][ T9137] netlink: 'syz.0.1303': attribute type 10 has an invalid length.
[  150.278479][ T9155] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1312'.
[  150.776697][ T9172] netlink: 'syz.0.1318': attribute type 10 has an invalid length.
[  150.782106][ T9172] veth1_macvtap: entered promiscuous mode
[  150.787439][ T9172] veth1_macvtap: entered allmulticast mode
[  150.821240][ T9172] macsec0: left allmulticast mode
[  150.823402][ T9172] veth1_macvtap: left allmulticast mode
[  150.835431][ T9172] bridge0: port 4(macsec0) entered blocking state
[  150.840874][ T9172] bridge0: port 4(macsec0) entered disabled state
[  150.845260][ T9172] macsec0: entered allmulticast mode
[  150.847651][ T9172] veth1_macvtap: entered allmulticast mode
[  150.920916][ T9172] macsec0: entered promiscuous mode
[  150.931746][   T36] bridge0: port 4(macsec0) entered blocking state
[  150.934014][   T36] bridge0: port 4(macsec0) entered forwarding state
[  151.171140][ T9180] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1321'.
[  151.216879][ T9182] netlink: 'syz.4.1322': attribute type 21 has an invalid length.
[  151.222389][ T9182] netlink: 'syz.4.1322': attribute type 4 has an invalid length.
[  151.226002][ T9182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1322'.
[  151.758179][   T26] wlan1: Trigger new scan to find an IBSS to join
[  152.304068][ T9191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.337254][ T9193] netlink: 'syz.0.1327': attribute type 3 has an invalid length.
[  152.340885][ T9193] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.1327'.
[  152.389825][ T9195] openvswitch: netlink: nsh attribute has 8 unknown bytes.
[  152.517609][ T9207] netlink: 'syz.0.1333': attribute type 19 has an invalid length.
[  152.520506][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1333'.
[  152.565214][ T9211] netlink: 8153 bytes leftover after parsing attributes in process `syz.0.1335'.
[  152.575692][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.819113][ T9228] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  152.894323][ T9236] netlink: 'syz.4.1345': attribute type 1 has an invalid length.
[  152.897357][ T9236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1345'.
[  153.446275][   T55] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  154.241188][ T9290] netlink: 202232 bytes leftover after parsing attributes in process `syz.3.1366'.
[  154.247018][ T9290] netlink: zone id is out of range
[  154.258471][ T9296] sit0: entered allmulticast mode
[  154.264289][ T9296] sit0: entered promiscuous mode
[  154.276989][ T9294] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1368'.
[  154.281009][ T9290] netlink: zone id is out of range
[  154.471249][ T9308] validate_nla: 1 callbacks suppressed
[  154.471258][ T9308] netlink: 'syz.0.1372': attribute type 10 has an invalid length.
[  154.497570][ T9308] team0: Device ipvlan1 failed to register rx_handler
[  154.798071][ T1016] wlan1: Trigger new scan to find an IBSS to join
[  154.880563][ T1016] wlan1: Creating new IBSS network, BSSID 06:35:00:7a:49:0a
[  155.519061][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  157.854005][ T9423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  158.034369][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.038114][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.044809][ T9435] bridge0: entered allmulticast mode
[  158.057777][ T9435] bridge_slave_1: left allmulticast mode
[  158.062994][ T9435] bridge_slave_1: left promiscuous mode
[  158.065724][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.084629][ T9435] bridge_slave_0: left allmulticast mode
[  158.086574][ T9435] bridge_slave_0: left promiscuous mode
[  158.095223][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.206819][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'.
[  158.255122][ T9441] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  158.262824][ T9441] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1414'.
[  158.278326][ T9443] netlink: 'syz.4.1415': attribute type 10 has an invalid length.
[  158.284121][ T9443] syz_tun: entered promiscuous mode
[  158.294141][ T9443] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  158.567149][ T9454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1419'.
[  159.645389][ T9472] delete_channel: no stack
[  159.726558][ T9492] netlink: 'syz.3.1436': attribute type 39 has an invalid length.
[  159.784531][ T9493] bridge_slave_1: left allmulticast mode
[  159.787164][ T9493] bridge_slave_1: left promiscuous mode
[  159.793026][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.827873][ T9493] bridge_slave_0: left allmulticast mode
[  159.859468][ T9493] bridge_slave_0: left promiscuous mode
[  159.861743][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.996144][ T9513] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1446'.
[  161.259849][ T9527] netlink: 'syz.0.1451': attribute type 2 has an invalid length.
[  161.262877][ T9527] netlink: 'syz.0.1451': attribute type 8 has an invalid length.
[  161.265969][ T9527] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1451'.
[  161.400705][ T9528] netlink: 'syz.3.1450': attribute type 10 has an invalid length.
[  162.892861][ T9528] geneve0: entered promiscuous mode
[  162.900120][ T9528] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  164.068230][ T9547] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1456'.
[  164.072113][ T9545] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1456'.
[  164.085710][ T9549] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1457'.
[  164.090299][ T9545] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1456'.
[  164.346187][ T9567] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1465'.
[  164.820018][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'.
[  164.823942][ T9584] netlink: 'syz.4.1473': attribute type 1 has an invalid length.
[  165.386481][ T9622] netlink: 'syz.0.1482': attribute type 27 has an invalid length.
[  165.389559][ T9622] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1482'.
[  165.614488][ T9638] netlink: 'syz.0.1489': attribute type 7 has an invalid length.
[  165.883027][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'.
[  166.596149][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1511'.
[  166.604937][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'.
[  166.945414][ T9703] netlink: 'syz.4.1520': attribute type 10 has an invalid length.
[  166.961922][ T9703] geneve0: entered promiscuous mode
[  166.982119][ T9703] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  168.119267][ T9730] netlink: 'syz.3.1531': attribute type 29 has an invalid length.
[  168.123045][ T9730] netlink: 'syz.3.1531': attribute type 29 has an invalid length.
[  168.268774][ T9740] netlink: 'syz.4.1537': attribute type 10 has an invalid length.
[  168.298362][ T9740] veth0_vlan: left promiscuous mode
[  168.307317][ T9740] veth0_vlan: entered promiscuous mode
[  168.315968][ T9740] team0: Device veth0_vlan failed to register rx_handler
[  169.305218][ T9791] __nla_validate_parse: 7 callbacks suppressed
[  169.305356][ T9791] netlink: 146936 bytes leftover after parsing attributes in process `syz.4.1558'.
[  169.322084][ T9791] openvswitch: netlink: Message has 6 unknown bytes.
[  169.412639][ T9793] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  169.447545][ T9793] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.550084][ T9843] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1580'.
[  172.676210][ T9853] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1585'.
[  173.810832][ T9890] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1599'.
[  175.324652][ T9917] netlink: 'syz.0.1609': attribute type 10 has an invalid length.
[  175.343192][ T9917] team0: Device ipvlan1 failed to register rx_handler
[  175.434308][ T9927] netlink: 'syz.4.1614': attribute type 5 has an invalid length.
[  175.555343][   T55] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  175.555487][   T55] Bluetooth: hci0: connection err: -111
[  175.563503][ T9938] @: renamed from bond_slave_0 (while UP)
[  175.737026][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'.
[  175.747191][ T9958] netlink: 'syz.4.1629': attribute type 1 has an invalid length.
[  176.740591][ T9979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1637'.
[  177.003151][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'.
[  177.300576][T10014] sctp: [Deprecated]: syz.0.1654 (pid 10014) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.300576][T10014] Use struct sctp_sack_info instead
[  177.494251][T10021] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1658'.
[  178.124193][T10082] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1684'.
[  178.183441][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'.
[  178.279608][T10103] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1693'.
[  178.320759][T10109] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1696'.
[  178.396624][T10120] netlink: 'syz.4.1703': attribute type 3 has an invalid length.
[  178.404696][T10120] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1703'.
[  178.419787][T10120] netlink: 'syz.4.1703': attribute type 10 has an invalid length.
[  178.432395][   T32] wlan1: Selected IBSS BSSID 06:35:00:7a:49:0a based on configured SSID
[  178.440196][T10120] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  180.069955][T10193] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.1731'.
[  180.780485][T10246] netlink: 'syz.0.1756': attribute type 39 has an invalid length.
[  180.879590][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  180.902424][T10256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  181.149764][T10274] __nla_validate_parse: 2 callbacks suppressed
[  181.149775][T10274] netlink: 492 bytes leftover after parsing attributes in process `syz.4.1769'.
[  181.499215][T10287] C: renamed from team_slave_0 (while UP)
[  181.502974][T10287] netlink: 'syz.4.1774': attribute type 8 has an invalid length.
[  181.508602][T10287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  181.860223][T10303] netlink: 'syz.4.1781': attribute type 1 has an invalid length.
[  182.221442][T10337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.400702][T10351] netlink: 'syz.3.1803': attribute type 10 has an invalid length.
[  182.410689][T10351] team0: Port device geneve1 added
[  182.417372][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'.
[  182.422634][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'.
[  182.477729][T10357] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1806'.
[  182.508300][T10357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1806'.
[  182.621888][T10368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.813610][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1814'.
[  183.420260][ T5237] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4
[  183.420282][ T5237] Bluetooth: hci1: unexpected event for opcode 0x6c6c
[  183.632502][ T5237] Bluetooth: hci1: adv larger than maximum supported
[  184.321265][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.327687][T10422] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.341691][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.355634][T10422] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.603768][ T5237] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  184.607263][T10438] sit0: left promiscuous mode
[  184.607349][ T5237] Bluetooth: hci1: unexpected event for opcode 0x1004
[  184.688877][T10438] sit0: entered promiscuous mode
[  185.047126][T10451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'.
[  185.803627][T10491] veth1_macvtap: left promiscuous mode
[  185.880813][T10491] veth1_macvtap: entered promiscuous mode
[  185.883378][T10491] macsec0: entered promiscuous mode
[  185.898240][T10491] macsec0: entered allmulticast mode
[  185.904010][T10491] veth1_macvtap: entered allmulticast mode
[  185.957678][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'.
[  186.104140][T10505] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1869'.
[  186.195880][T10517] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1874'.
[  186.713895][T10527] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1878'.
[  187.312413][T10542] netlink: 'syz.4.1884': attribute type 29 has an invalid length.
[  187.315999][T10542] netlink: 'syz.4.1884': attribute type 29 has an invalid length.
[  187.320990][T10542] netlink: 'syz.4.1884': attribute type 29 has an invalid length.
[  187.324522][T10542] netlink: 'syz.4.1884': attribute type 29 has an invalid length.
[  188.639460][ T5237] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  188.643205][ T5237] Bluetooth: hci1: Injecting HCI hardware error event
[  188.646027][ T5237] Bluetooth: hci1: hardware error 0x00
[  188.937224][T10600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1907'.
[  188.940988][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'.
[  188.944657][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'.
[  189.045587][T10606] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1909'.
[  189.049884][T10606] batadv_slave_1: entered promiscuous mode
[  189.390625][T10625] bridge0: port 5(veth1_to_team) entered blocking state
[  189.397018][T10625] bridge0: port 5(veth1_to_team) entered disabled state
[  189.419124][T10625] veth1_to_team: entered allmulticast mode
[  189.432186][T10625] veth1_to_team: entered promiscuous mode
[  189.438144][T10625] bridge0: port 5(veth1_to_team) entered blocking state
[  189.441559][T10625] bridge0: port 5(veth1_to_team) entered forwarding state
[  189.502907][   T55] Bluetooth: hci2: ACL packet too small
[  189.913613][T10654] netlink: 'syz.3.1931': attribute type 21 has an invalid length.
[  189.938942][T10654] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1931'.
[  189.951193][T10654] netlink: 'syz.3.1931': attribute type 4 has an invalid length.
[  189.954172][T10654] netlink: 'syz.3.1931': attribute type 5 has an invalid length.
[  189.965295][T10654] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1931'.
[  190.051448][T10663] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1935'.
[  190.462147][T10694] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1948'.
[  190.535828][T10694] hsr_slave_0: left promiscuous mode
[  190.543233][T10694] hsr_slave_1: left promiscuous mode
[  190.734565][ T5237] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  191.320795][T10712] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1956'.
[  191.743485][T10738] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1968'.
[  192.171954][T10752] : renamed from gre0 (while UP)
[  192.323923][T10758] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1977'.
[  192.327575][T10758] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  192.331131][T10758] openvswitch: netlink: Duplicate key (type 0).
[  192.535513][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'.
[  192.539771][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1983'.
[  192.593428][T10772] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1984'.
[  193.052389][T10796] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1995'.
[  194.210922][T10829] netlink: 'syz.3.2008': attribute type 21 has an invalid length.
[  194.214277][T10829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2008'.
[  194.816596][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.819186][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  197.210972][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.268164][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.347103][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.389945][T10845] netlink: 'syz.3.2014': attribute type 6 has an invalid length.
[  197.393312][T10845] netlink: 'syz.3.2014': attribute type 1 has an invalid length.
[  197.396650][T10845] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2014'.
[  197.422432][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.622108][   T13] dummy0: left allmulticast mode
[  197.625318][   T13] bridge0: port 3(dummy0) entered disabled state
[  197.635284][   T13] bridge_slave_1: left allmulticast mode
[  197.637556][   T13] bridge_slave_1: left promiscuous mode
[  197.645483][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.663104][   T13] bridge_slave_0: left promiscuous mode
[  197.665611][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.693647][   T13] vlan0: left allmulticast mode
[  197.695903][   T13] veth0_vlan: left allmulticast mode
[  197.726575][   T13] vlan0: left promiscuous mode
[  197.731295][   T13] : port 1(vlan0) entered disabled state
[  197.980942][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  198.142446][T10881] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2029'.
[  198.299218][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.306140][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.313371][   T13] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  198.322514][   T13] bond0 (unregistering): Released all slaves
[  198.334831][T10858] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2019'.
[  198.341089][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'.
[  198.345223][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'.
[  198.742804][T10900] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2039'.
[  198.961310][   T13] hsr_slave_0: left promiscuous mode
[  198.987147][   T13] hsr_slave_1: left promiscuous mode
[  198.990179][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.993477][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.010695][   T13] veth1_macvtap: left promiscuous mode
[  199.012814][   T13] veth0_macvtap: left promiscuous mode
[  199.015126][   T13] veth1_vlan: left promiscuous mode
[  199.016963][   T13] veth0_vlan: left promiscuous mode
[  199.324832][   T13] team0 (unregistering): Port device team_slave_1 removed
[  199.347008][   T13] team0 (unregistering): Port device C removed
[  199.573651][T10908] netlink: 'syz.0.2043': attribute type 10 has an invalid length.
[  199.577502][T10913] netlink: 'syz.3.2045': attribute type 29 has an invalid length.
[  199.581385][T10914] netlink: 'syz.3.2045': attribute type 29 has an invalid length.
[  199.619261][T10915] netlink: 'syz.3.2045': attribute type 29 has an invalid length.
[  199.622812][T10916] netlink: 'syz.3.2045': attribute type 29 has an invalid length.
[  200.175936][   T13] ------------[ cut here ]------------
[  200.178934][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  200.182862][   T13] Modules linked in:
[  200.186257][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  200.191052][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.195364][   T13] Workqueue: netns cleanup_net
[  200.197368][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  200.200731][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 fa e1 f7 e8 81 c7 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 c7 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  200.209397][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  200.211932][   T13] RAX: ffffffff8a21e4cf RBX: ffff888111042440 RCX: ffff88801c688000
[  200.215426][   T13] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff88801c688000
[  200.219755][   T13] RBP: ffffc900001079b0 R08: ffffc9000010748f R09: 0000000000000000
[  200.223231][   T13] R10: ffffc90000107480 R11: ffffffffa0000818 R12: ffffffff8f630c20
[  200.226687][   T13] R13: 1ffff92000020f40 R14: ffff8881110438c0 R15: dffffc0000000000
[  200.230243][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  200.234171][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  200.237023][   T13] CR2: 0000200000001000 CR3: 000000002f45c000 CR4: 00000000000006f0
[  200.241942][   T13] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  200.245324][   T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  200.248975][   T13] Call Trace:
[  200.250415][   T13]  <TASK>
[  200.251754][   T13]  xfrm_net_exit+0x2d/0x70
[  200.253773][   T13]  ops_undo_list+0x49a/0x990
[  200.255762][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  200.258130][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  200.260408][   T13]  cleanup_net+0x4c5/0x800
[  200.262416][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  200.264695][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.268332][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  200.270865][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  200.273296][   T13]  process_scheduled_works+0xae1/0x17b0
[  200.275836][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  200.279492][   T13]  worker_thread+0x8a0/0xda0
[  200.281575][   T13]  kthread+0x711/0x8a0
[  200.283373][   T13]  ? __pfx_worker_thread+0x10/0x10
[  200.285555][   T13]  ? __pfx_kthread+0x10/0x10
[  200.287583][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.289939][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.291890][   T13]  ? __pfx_kthread+0x10/0x10
[  200.293501][   T13]  ret_from_fork+0x3fc/0x770
[  200.295445][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  200.297675][   T13]  ? __switch_to_asm+0x39/0x70
[  200.299998][   T13]  ? __switch_to_asm+0x33/0x70
[  200.302057][   T13]  ? __pfx_kthread+0x10/0x10
[  200.304170][   T13]  ret_from_fork_asm+0x1a/0x30
[  200.306401][   T13]  </TASK>
[  200.307822][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  200.310983][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  200.314917][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.319235][   T13] Workqueue: netns cleanup_net
[  200.321304][   T13] Call Trace:
[  200.322788][   T13]  <TASK>
[  200.324053][   T13]  dump_stack_lvl+0x99/0x250
[  200.326120][   T13]  ? __asan_memcpy+0x40/0x70
[  200.328149][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.330478][   T13]  ? __pfx__printk+0x10/0x10
[  200.332606][   T13]  vpanic+0x281/0x750
[  200.334388][   T13]  ? __pfx__printk+0x10/0x10
[  200.336456][   T13]  ? __pfx_vpanic+0x10/0x10
[  200.338504][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  200.340856][   T13]  panic+0xb9/0xc0
[  200.342456][   T13]  ? __pfx_panic+0x10/0x10
[  200.344500][   T13]  __warn+0x31b/0x4b0
[  200.346229][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  200.348401][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  200.350638][   T13]  report_bug+0x2be/0x4f0
[  200.352573][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  200.354725][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  200.356862][   T13]  ? xfrm_state_fini+0x272/0x2f0
[  200.359066][   T13]  handle_bug+0x84/0x160
[  200.360919][   T13]  exc_invalid_op+0x1a/0x50
[  200.362869][   T13]  asm_exc_invalid_op+0x1a/0x20
[  200.365013][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  200.367327][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 fa e1 f7 e8 81 c7 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 c7 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  200.375214][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  200.377764][   T13] RAX: ffffffff8a21e4cf RBX: ffff888111042440 RCX: ffff88801c688000
[  200.381173][   T13] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff88801c688000
[  200.384420][   T13] RBP: ffffc900001079b0 R08: ffffc9000010748f R09: 0000000000000000
[  200.387831][   T13] R10: ffffc90000107480 R11: ffffffffa0000818 R12: ffffffff8f630c20
[  200.391300][   T13] R13: 1ffff92000020f40 R14: ffff8881110438c0 R15: dffffc0000000000
[  200.394681][   T13]  ? 0xffffffffa0000818
[  200.396483][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  200.398637][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  200.400752][   T13]  xfrm_net_exit+0x2d/0x70
[  200.402767][   T13]  ops_undo_list+0x49a/0x990
[  200.404894][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  200.407178][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  200.409473][   T13]  cleanup_net+0x4c5/0x800
[  200.411516][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  200.413788][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.416114][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  200.418581][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  200.421051][   T13]  process_scheduled_works+0xae1/0x17b0
[  200.423508][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  200.426290][   T13]  worker_thread+0x8a0/0xda0
[  200.428490][   T13]  kthread+0x711/0x8a0
[  200.430264][   T13]  ? __pfx_worker_thread+0x10/0x10
[  200.432544][   T13]  ? __pfx_kthread+0x10/0x10
[  200.434612][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.436885][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.439199][   T13]  ? __pfx_kthread+0x10/0x10
[  200.441261][   T13]  ret_from_fork+0x3fc/0x770
[  200.443295][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  200.445565][   T13]  ? __switch_to_asm+0x39/0x70
[  200.447635][   T13]  ? __switch_to_asm+0x33/0x70
[  200.449767][   T13]  ? __pfx_kthread+0x10/0x10
[  200.451843][   T13]  ret_from_fork_asm+0x1a/0x30
[  200.453992][   T13]  </TASK>
[  200.456186][   T13] Kernel Offset: disabled
[  200.458146][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:59:27  Registers:
info registers vcpu 0

CPU#0
RAX=000000000002647f RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000002647f RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc900066b69b8
R8 =ffffc900066b66af R9 =0000000000000000 R10=ffffc900066b66a0 R11=ffffffff81703490
R12=000000001000192a R13=dffffc0000000000 R14=000000000002647f R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa26036b6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3101fff8 CR3=0000000027446000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa25f612e53
XMM06=0000000000000000 00007fa25f612e4d XMM07=0000000000000000 00007fa25f612e61
XMM08=0000000000000000 00007fa25f612ee7 XMM09=0000000000000000 00007fa25f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b756ee4 RBX=dffffc0000000000 RCX=0000000000000000 RDX=ffff88801c688000
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff8cbac619 RSP=ffffc90000107118
R8 =ffff88801c688000 R9 =0000000000000008 R10=0000000000000007 R11=0000000000000000
R12=0000000000000000 R13=ffffffff99af1d3b R14=ffffffffffff0a01 R15=000000000000000d
RIP=ffffffff8b7c2be0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=000000002f45c000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc431d87498 00007fc431d87470 XMM03=00007fc431d874a8 00007fc431d874a0
XMM04=00007fc4328ed100 00007fc431d87460 XMM05=00007fc431d87478 00007fc431d874c0
XMM06=00007fc431d874b8 00007fc431d874b0 XMM07=00007fc431d874a8 00007fc431d874a0
XMM08=0000000000000000 00007fc431c12ee7 XMM09=0000000000000000 00007fc431c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
