last executing test programs:

2m30.796443321s ago: executing program 1 (id=760):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m30.796006139s ago: executing program 1 (id=762):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x0, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)

2m30.747473983s ago: executing program 1 (id=764):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

2m30.701900993s ago: executing program 1 (id=766):
r0 = socket$kcm(0x1e, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x80, 0x0}, 0x4040041)

2m30.593176298s ago: executing program 1 (id=769):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

2m30.592078617s ago: executing program 1 (id=771):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5411, &(0x7f0000000200)={r1})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000", @ANYBLOB="0000000000000000000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r4, 0x0, 0x4000}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xc, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1800}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xfffe, 0x0, 0x0, 0x100, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x5c}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100000000}, 0x114905, 0x99, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)

2m15.478283373s ago: executing program 32 (id=771):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5411, &(0x7f0000000200)={r1})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000", @ANYBLOB="0000000000000000000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r4, 0x0, 0x4000}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xc, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1800}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xfffe, 0x0, 0x0, 0x100, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x5c}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x100000000}, 0x114905, 0x99, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)

1m33.311667629s ago: executing program 0 (id=1458):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000400000000000000f782db44fd233c56170d12a0b9b545", 0x19}], 0x1}, 0x24018001)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r5})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000600000018d262e04ff6b93769b362fcad83456acdd10684aa9c21acef1dbd15645039258d9af2214432f89d8e2b7736c308000000cd9941ebcc6edd4fce52feeac5ca6e54ebe6df17419fd0041f17a4a56444488ba1c60c1c06fe86ecb5a492ed4232035a665a5f0584c55245e843276040b624468ff9d8830883081282d6f9880b528715320800000090d5f133565b7f855e5b335f690e08c7fce121922e41d56ee65cf0061fd13a27015b"], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r7, r8, 0x5}, 0x10)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={r7, &(0x7f0000001580), &(0x7f0000001640)=@udp6=r9, 0x2}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000d24c872e796e7432e7bcb39239cb9800000100009783e674aa69beb38eb85195c22aacae0000000200000028402ea9792ef5b4819794e64637d15cf5f7187ee0", @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1m33.31112567s ago: executing program 0 (id=1459):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x124}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m32.371166163s ago: executing program 0 (id=1469):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400)

1m32.313474252s ago: executing program 0 (id=1470):
r0 = socket$kcm(0x2, 0x1, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x1b, 0x0, 0x0)

1m32.23974302s ago: executing program 0 (id=1472):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m31.023616954s ago: executing program 0 (id=1492):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x5, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r5, 0x62)

1m15.635246659s ago: executing program 33 (id=1492):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
r4 = socket$kcm(0x2, 0x5, 0x84)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r5, 0x62)

1m5.264013064s ago: executing program 4 (id=1682):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1100, 0xc8, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\a', 0x3, 0x0, 0x25e}, 0x50)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef)

1m5.251993952s ago: executing program 4 (id=1684):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40200000000000061174c00000000008500000027000900950000000000000092de0627cacd67d7c5300ed52c55c0c44a6b88d472aa6fc3b7745a926d1d1c23e3fbd741b11656e7e8"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x8800)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f"], 0xfe33)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000003100000000000000000000000000180000000000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a0000000500000065000100e0ff000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x15, &(0x7f0000000900)=ANY=[@ANYRESOCT=r6, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000340)={0x0, 0x0})
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x1ff)

1m4.189893497s ago: executing program 4 (id=1691):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', &(0x7f0000011c40), 0x15, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x201020, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a03000000000200010000000000000002161600003f030006000000000002004e21000000800000000000000000010005"], 0x70}, 0x1, 0x7}, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000140)="c71bbc98f6d59dc92a8a3fa3cf3944f2394949c1bbd05b26a70a19d72f", &(0x7f0000000180)=""/245, &(0x7f0000000280)="2fba0e30fb6ef81aa0bfde0d4c07120cb9fb3c3d6f0ed234c6fbfef1ef1028fe511a130670e39c8cc90da19cf988945aa3f7f511b8acc1f7885402", &(0x7f00000002c0)="8e605f1ed4db0e5117a406edabc677bd549808", 0x8, 0x1}, 0x38)

1m3.975585374s ago: executing program 4 (id=1698):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0x129)

1m3.902345524s ago: executing program 4 (id=1700):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x1, 0x8000}, 0x50)

1m3.511480287s ago: executing program 4 (id=1701):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x300, &(0x7f0000000280)}, 0x0)

1m3.328576341s ago: executing program 34 (id=1701):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x300, &(0x7f0000000280)}, 0x0)

1.183852879s ago: executing program 5 (id=2559):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e9bf000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x100800, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x10000)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x15)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2ec}, {0x0}], 0x2}, 0x8400)
sendmsg$inet(r0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x5}, 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x100)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x221020, 0x0)

1.11703563s ago: executing program 2 (id=2561):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)

1.116852618s ago: executing program 3 (id=2562):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.116314887s ago: executing program 3 (id=2563):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x74c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x4}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1, 0xfefffffffffffffe, 0x2, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
r4 = socket$kcm(0xf, 0x3, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000000), 0x4)
recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffec7, 0x0}, 0x0)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0)

1.036522148s ago: executing program 2 (id=2564):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c000280050001000400"], 0x70}}, 0x0)

1.036120008s ago: executing program 2 (id=2565):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$netlink(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000000015004d"], 0x10}], 0x1, 0x0, 0x0, 0x74000000}, 0xc0)

927.741113ms ago: executing program 2 (id=2566):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
setsockopt$sock_attach_bpf(r1, 0x107, 0x16, 0x0, 0x0)

927.511407ms ago: executing program 2 (id=2567):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="2703a2fd160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4)

647.115923ms ago: executing program 2 (id=2568):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc01, 0x3, 0x2, 0x200000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x15)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1a)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5)
sendmsg$inet(r2, 0x0, 0x20000081)

632.94966ms ago: executing program 3 (id=2569):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x5, 0x4b, 0x7, 0x1, 0x0, 0x7, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xba93, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x8069, 0xffffffffffffff00, 0x7fff, 0x2, 0x9, 0x81, 0x8, 0x0, 0x6, 0x0, 0xd}, 0x0, 0x7e0, r1, 0x9)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x337)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="0002181100000000000064b9000000ffe3000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400ecffffffffff7100000000000000"], 0x18}, 0x41)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6_vti0\x00', 0x20})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x209, 0x70bd22, 0x25dfdbff, {{{@in6=@empty, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x20, 0xa0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4d5, 0x32}, @in=@empty, {0x1, 0xf, 0x4, 0x8001, 0x8, 0x7f9, 0xaaec, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc90a, 0x1, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x4, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x2}, 0x48000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@flushpolicy={0x5c, 0x1d, 0x301, 0x70bd2b, 0x25dfdbfc, "", [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd28, 0x70bd2a, 0x70bd2a}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010101}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e20, 0x4e21, @in=@loopback}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

345.448588ms ago: executing program 3 (id=2570):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001000000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

344.199902ms ago: executing program 3 (id=2571):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f00fe805e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800370000000000020000fbffffff0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8941, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r3}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r7}, 0x18)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r8 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.dequeue\x00', 0x0, 0x0)

232.164337ms ago: executing program 5 (id=2572):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x9, 0x0, 0x6d, 0x81}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600})

46.949976ms ago: executing program 5 (id=2573):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0)

46.778068ms ago: executing program 5 (id=2574):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

46.613947ms ago: executing program 5 (id=2575):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@remote, @in6=@empty, 0x2, 0xfffc, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}, 0xb}}]}, 0x138}}, 0x0)

5.732613ms ago: executing program 5 (id=2576):
r0 = syz_clone(0x80, &(0x7f0000000540)="8596750c6494cf3c192cd50bbbb7587851b20363cc0fc4c4cde4ddd44fdeee9b427a491c2f4b4dc2bf25891fcc5249f14720ac507942c9dafef6d7d081fbdfab7c8a06818e097a18718c30b9b4ec96be8dac3e0702196ef82032f19d6ae1e4720f866efa1f99ceec4eb784ae1cf7fddbe5b8f22c7174ced53ed779455a92aab8006ed735a6a922fd5ca76478f3c68c4450f1395304fe374f12837459ac5faa3acb1587c78fb7593aaf9acc9dcf35d69ca9b466af6e8ceeaf3858554c21c15d4b54", 0xc1, &(0x7f0000000100), 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r0, r1, 0x0, 0x0, 0x0}, 0x30)

0s ago: executing program 3 (id=2577):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="7c003307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20198' (ED25519) to the list of known hosts.
syzkaller login: [   56.262131][ T5798] cgroup: Unknown subsys name 'net'
[   56.374658][ T5798] cgroup: Unknown subsys name 'cpuset'
[   56.382349][ T5798] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.262904][ T5798] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.195930][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.200461][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.204190][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.211395][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.215125][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.296911][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.301482][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.309240][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.351056][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.355375][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.359441][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.359625][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.369507][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.373067][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.377331][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.483368][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.678710][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.683277][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.686427][ T5846] bridge_slave_0: entered allmulticast mode
[   63.691455][ T5846] bridge_slave_0: entered promiscuous mode
[   63.698655][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.701788][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.704866][ T5846] bridge_slave_1: entered allmulticast mode
[   63.708750][ T5846] bridge_slave_1: entered promiscuous mode
[   63.772966][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.779961][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.819806][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.865463][ T5846] team0: Port device team_slave_0 added
[   63.904336][ T5846] team0: Port device team_slave_1 added
[   63.969705][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.972604][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.983422][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.007248][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   64.013984][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.016248][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.025530][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.037307][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.040199][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.043072][ T5851] bridge_slave_0: entered allmulticast mode
[   64.046197][ T5851] bridge_slave_0: entered promiscuous mode
[   64.061412][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.064560][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.067470][ T5851] bridge_slave_1: entered allmulticast mode
[   64.073571][ T5851] bridge_slave_1: entered promiscuous mode
[   64.135466][ T5846] hsr_slave_0: entered promiscuous mode
[   64.138419][ T5846] hsr_slave_1: entered promiscuous mode
[   64.148671][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.155027][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.202381][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.204945][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.207439][ T5854] bridge_slave_0: entered allmulticast mode
[   64.210546][ T5854] bridge_slave_0: entered promiscuous mode
[   64.214700][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.217587][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.220367][ T5854] bridge_slave_1: entered allmulticast mode
[   64.223172][ T5854] bridge_slave_1: entered promiscuous mode
[   64.234574][ T5851] team0: Port device team_slave_0 added
[   64.252204][ T5851] team0: Port device team_slave_1 added
[   64.287462][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.312141][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.315900][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.318668][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.328292][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.354425][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.357130][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.368494][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.416767][ T5854] team0: Port device team_slave_0 added
[   64.430295][ T5854] team0: Port device team_slave_1 added
[   64.481079][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.483920][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.494964][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.506562][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.512155][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.522778][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.538734][ T5851] hsr_slave_0: entered promiscuous mode
[   64.542682][ T5851] hsr_slave_1: entered promiscuous mode
[   64.545303][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   64.547235][ T5851] Cannot create hsr debugfs directory
[   64.615214][ T5854] hsr_slave_0: entered promiscuous mode
[   64.617832][ T5854] hsr_slave_1: entered promiscuous mode
[   64.620389][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   64.622318][ T5854] Cannot create hsr debugfs directory
[   64.671034][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.684198][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.701840][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.722099][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.883884][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.902607][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.911984][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.922211][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.968268][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.980781][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.987131][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.007380][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.058180][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.118366][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.133225][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.135606][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.152956][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.155948][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.171797][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.213526][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.237254][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.240216][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.251541][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.271118][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.273990][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.305909][   T54] Bluetooth: hci0: command tx timeout
[   65.317535][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.343185][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.346277][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.353256][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.356263][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.453832][   T54] Bluetooth: hci2: command tx timeout
[   65.456415][   T54] Bluetooth: hci1: command tx timeout
[   65.535866][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.596400][ T5846] veth0_vlan: entered promiscuous mode
[   65.616448][ T5846] veth1_vlan: entered promiscuous mode
[   65.656018][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.688368][ T5846] veth0_macvtap: entered promiscuous mode
[   65.703606][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.715183][ T5846] veth1_macvtap: entered promiscuous mode
[   65.756681][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.761475][ T5854] veth0_vlan: entered promiscuous mode
[   65.780281][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.791899][ T5854] veth1_vlan: entered promiscuous mode
[   65.797538][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.808381][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.822682][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.842847][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.865918][ T5851] veth0_vlan: entered promiscuous mode
[   65.887528][ T5851] veth1_vlan: entered promiscuous mode
[   65.948880][ T5854] veth0_macvtap: entered promiscuous mode
[   65.955554][ T1954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.967921][ T5854] veth1_macvtap: entered promiscuous mode
[   65.970944][ T1954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.011560][ T5851] veth0_macvtap: entered promiscuous mode
[   66.018147][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.032040][ T5851] veth1_macvtap: entered promiscuous mode
[   66.043271][ T1954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.049985][ T1954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.056313][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.074891][ T5716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.085473][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.093101][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.107297][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.117960][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.138374][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.147736][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.154921][ T5716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.173025][ T5716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.200976][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.228203][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.341675][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.344797][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.365989][ T5914] Zero length message leads to an empty skb
[   66.386300][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.391392][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.447724][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.451037][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.532304][   T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.542727][   T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.188842][    C0] hrtimer: interrupt took 49782 ns
[   67.249847][ T5919] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.369194][ T5848] Bluetooth: hci0: command tx timeout
[   67.510638][ T5919] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.529625][   T54] Bluetooth: hci2: command tx timeout
[   67.531970][ T5848] Bluetooth: hci1: command tx timeout
[   67.587863][ T5933] =======================================================
[   67.587863][ T5933] WARNING: The mand mount option has been deprecated and
[   67.587863][ T5933]          and is ignored by this kernel. Remove the mand
[   67.587863][ T5933]          option from the mount to silence this warning.
[   67.587863][ T5933] =======================================================
[   67.621883][ T5296] udevd[5296]: worker [5860] terminated by signal 33 (Unknown signal 33)
[   67.624725][ T5296] udevd[5296]: worker [5860] failed while handling '/devices/virtual/block/loop0'
[   67.786669][ T5937] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.843058][ T5848] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[   68.607375][ T5967] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.21'.
[   68.953366][ T5971] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.23'.
[   69.241258][ T5874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.450857][ T5848] Bluetooth: hci0: command tx timeout
[   69.612292][ T5848] Bluetooth: hci1: command tx timeout
[   69.633105][ T5874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.697709][ T5990] netlink: 'syz.2.32': attribute type 16 has an invalid length.
[   69.701773][ T5990] netlink: 'syz.2.32': attribute type 17 has an invalid length.
[   69.940959][ T5874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.955831][ T5848] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[   69.982742][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.991025][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.994255][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.998033][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.001997][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.035020][ T5874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.404753][ T5874] bridge_slave_1: left allmulticast mode
[   70.406286][ T5999] netlink: 'syz.2.35': attribute type 10 has an invalid length.
[   70.407260][ T5874] bridge_slave_1: left promiscuous mode
[   70.434812][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.444107][ T5999] netlink: 152 bytes leftover after parsing attributes in process `syz.2.35'.
[   70.476351][ T5874] bridge_slave_0: left allmulticast mode
[   70.478677][ T5874] bridge_slave_0: left promiscuous mode
[   70.503659][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.909000][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.916649][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.928024][ T5874] bond0 (unregistering): Released all slaves
[   70.940246][ T5999] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   70.953185][ T5995] chnl_net:caif_netlink_parms(): no params data found
[   71.181854][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.184707][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.187530][ T5995] bridge_slave_0: entered allmulticast mode
[   71.197495][ T5995] bridge_slave_0: entered promiscuous mode
[   71.215929][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.221311][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.242099][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.244980][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.247847][ T5995] bridge_slave_1: entered allmulticast mode
[   71.267193][ T5995] bridge_slave_1: entered promiscuous mode
[   71.294944][ T6032] netlink: 798 bytes leftover after parsing attributes in process `syz.2.40'.
[   71.387250][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.402873][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.442512][ T5874] hsr_slave_0: left promiscuous mode
[   71.447311][ T5874] hsr_slave_1: left promiscuous mode
[   71.455468][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.458463][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.475624][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.478561][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.503218][ T5874] veth1_macvtap: left promiscuous mode
[   71.505654][ T5874] veth0_macvtap: left promiscuous mode
[   71.508029][ T5874] veth1_vlan: left promiscuous mode
[   71.511653][ T5874] veth0_vlan: left promiscuous mode
[   71.529079][ T5848] Bluetooth: hci0: command tx timeout
[   71.690873][ T5848] Bluetooth: hci1: command tx timeout
[   72.099537][ T5848] Bluetooth: hci2: command tx timeout
[   72.243506][ T5874] team0 (unregistering): Port device team_slave_1 removed
[   72.281979][ T5874] team0 (unregistering): Port device team_slave_0 removed
[   72.838672][ T5995] team0: Port device team_slave_0 added
[   72.845570][ T5995] team0: Port device team_slave_1 added
[   72.887541][ T6077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.937103][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.945775][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.957201][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.978306][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.984816][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.029262][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.195688][ T5995] hsr_slave_0: entered promiscuous mode
[   73.216393][ T5995] hsr_slave_1: entered promiscuous mode
[   73.219757][ T5995] debugfs: 'hsr0' already exists in 'hsr'
[   73.222121][ T5995] Cannot create hsr debugfs directory
[   73.411489][ T6080] syzkaller0: entered promiscuous mode
[   73.413689][ T6080] syzkaller0: entered allmulticast mode
[   73.481293][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   74.174848][ T5848] Bluetooth: hci2: command tx timeout
[   74.465896][ T5995] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.483518][ T5995] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.501862][ T5995] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.518360][ T5995] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.647211][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.669836][ T5995] 8021q: adding VLAN 0 to HW filter on device team0
[   74.689387][ T1954] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.691932][ T1954] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.735928][ T1954] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.738591][ T1954] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.959832][ T6137] netlink: 'syz.1.69': attribute type 10 has an invalid length.
[   74.963386][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.966424][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.001596][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.003960][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.006684][ T6137] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.008911][ T6137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.031199][ T6137] team0: Port device bridge0 added
[   75.054563][ T6141] bridge_slave_1: left allmulticast mode
[   75.056681][ T6141] bridge_slave_1: left promiscuous mode
[   75.058622][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.091247][ T6141] bridge_slave_0: left allmulticast mode
[   75.093121][ T6141] bridge_slave_0: left promiscuous mode
[   75.109313][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.189441][ T6141] team0: Port device bridge0 removed
[   75.273762][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.279380][ T6156] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   75.324185][ T5995] veth0_vlan: entered promiscuous mode
[   75.359968][ T5995] veth1_vlan: entered promiscuous mode
[   75.424343][ T5995] veth0_macvtap: entered promiscuous mode
[   75.445502][ T5995] veth1_macvtap: entered promiscuous mode
[   75.473025][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.490932][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.500196][ T5716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.504269][ T5716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.507678][ T5716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.533132][ T5716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.659114][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.662311][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.715761][ T1954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.719027][ T1954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.784462][ T6179] netlink: 152 bytes leftover after parsing attributes in process `syz.1.78'.
[   76.259150][ T5848] Bluetooth: hci2: command tx timeout
[   76.706572][ T6213] netlink: 'syz.2.91': attribute type 3 has an invalid length.
[   76.710451][ T6213] netlink: 'syz.2.91': attribute type 2 has an invalid length.
[   76.713015][ T6213] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.91'.
[   77.315034][ T6247] netlink: 22 bytes leftover after parsing attributes in process `syz.2.109'.
[   77.710395][  T793] cfg80211: failed to load regulatory.db
[   78.230443][ T6288] sock: sock_timestamping_bind_phc: sock not bind to device
[   78.329643][ T5848] Bluetooth: hci2: command tx timeout
[   78.402114][ T6292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.130'.
[   79.007187][ T6307] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.136'.
[   79.777954][ T6332] netlink: 'syz.0.148': attribute type 2 has an invalid length.
[   79.782873][ T6332] netlink: 'syz.0.148': attribute type 4 has an invalid length.
[   79.786606][ T6332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.148'.
[   79.976239][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'.
[   80.235318][ T6338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   82.924771][ T6380] netlink: 'syz.0.167': attribute type 33 has an invalid length.
[   82.956257][ T6380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.167'.
[   82.961865][ T6380] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP)
[   83.021702][ T6380] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   84.362569][ T6427] netlink: 14 bytes leftover after parsing attributes in process `syz.1.180'.
[   84.407693][ T6428] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[   84.416578][ T6428] netlink: 'syz.1.180': attribute type 2 has an invalid length.
[   86.563838][ T6469] syzkaller0: entered promiscuous mode
[   86.571800][ T6469] syzkaller0: entered allmulticast mode
[   86.673601][ T6479] netlink: 'syz.2.199': attribute type 21 has an invalid length.
[   86.676540][ T6479] netlink: 128 bytes leftover after parsing attributes in process `syz.2.199'.
[   87.621373][ T6479] netlink: 'syz.2.199': attribute type 4 has an invalid length.
[   87.625328][ T6481] netlink: 830 bytes leftover after parsing attributes in process `syz.1.202'.
[   89.004188][ T6525] netlink: 'syz.1.221': attribute type 15 has an invalid length.
[   89.006839][ T6525] netlink: 'syz.1.221': attribute type 7 has an invalid length.
[   89.010007][ T6525] netlink: 52 bytes leftover after parsing attributes in process `syz.1.221'.
[   89.991606][ T6570] veth1_to_bond: entered allmulticast mode
[   90.159683][ T6578] : renamed from vlan0 (while UP)
[   90.771736][ T6605] netlink: 'syz.1.258': attribute type 10 has an invalid length.
[   90.813772][ T6611] netlink: 'syz.0.259': attribute type 21 has an invalid length.
[   90.817848][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.220541][ T6605] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.330171][ T6605] syz.1.258 (6605) used greatest stack depth: 18232 bytes left
[   91.484775][ T6638] netlink: 'syz.1.271': attribute type 10 has an invalid length.
[   91.487910][ T6638] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.271'.
[   91.874658][ T6660] netlink: 'syz.0.279': attribute type 2 has an invalid length.
[   92.442738][ T5848] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   93.218398][ T6699] sit0: entered allmulticast mode
[   93.224619][ T6699] sit0: entered promiscuous mode
[   93.546386][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[   94.226540][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'.
[   94.414442][ T6733] netlink: 22 bytes leftover after parsing attributes in process `syz.2.313'.
[   94.489023][   T54] Bluetooth: hci2: command tx timeout
[   94.774602][ T6756] tmpfs: Bad value for 'uid'
[   94.791078][ T6756] tmpfs: Bad value for 'uid'
[   95.085038][ T6764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'.
[   95.794407][ T6795] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   95.812120][ T6795] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.343'.
[   99.956312][ T6817] netlink: 798 bytes leftover after parsing attributes in process `syz.0.349'.
[  100.284164][   T54] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  100.914438][ T6846] tap0: tun_chr_ioctl cmd 1074025677
[  100.922949][ T6846] tap0: linktype set to 0
[  101.061662][ T6861] netlink: 64 bytes leftover after parsing attributes in process `syz.1.368'.
[  101.265928][ T6869] netlink: 56 bytes leftover after parsing attributes in process `syz.0.372'.
[  101.436262][ T6876] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  101.645708][ T6880] syzkaller0: entered promiscuous mode
[  101.659194][ T6880] syzkaller0: entered allmulticast mode
[  101.979223][ T6889] netlink: 48 bytes leftover after parsing attributes in process `syz.2.381'.
[  102.356255][ T6902] netlink: 'syz.1.387': attribute type 1 has an invalid length.
[  102.375490][ T6902] netlink: 348 bytes leftover after parsing attributes in process `syz.1.387'.
[  103.406817][ T6902] lo speed is unknown, defaulting to 1000
[  103.409719][ T6902] lo speed is unknown, defaulting to 1000
[  103.414626][ T6902] lo speed is unknown, defaulting to 1000
[  103.425746][ T6902] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  103.438316][ T6902] lo speed is unknown, defaulting to 1000
[  103.441937][ T6902] lo speed is unknown, defaulting to 1000
[  103.460880][ T6902] lo speed is unknown, defaulting to 1000
[  103.891634][ T6931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.926324][ T6931] netlink: 'syz.1.400': attribute type 28 has an invalid length.
[  103.930752][ T6931] netlink: 'syz.1.400': attribute type 3 has an invalid length.
[  103.934151][ T6931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.400'.
[  104.084060][ T6936] syzkaller0: entered promiscuous mode
[  104.086482][ T6936] syzkaller0: entered allmulticast mode
[  104.957646][ T6961] netlink: 'syz.2.407': attribute type 3 has an invalid length.
[  104.964029][ T6961] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[  104.967028][ T6961] netlink: 'syz.2.407': attribute type 2 has an invalid length.
[  104.973227][ T6961] netlink: 'syz.2.407': attribute type 8 has an invalid length.
[  104.976411][ T6961] netlink: 'syz.2.407': attribute type 10 has an invalid length.
[  104.980125][ T6961] netlink: 'syz.2.407': attribute type 11 has an invalid length.
[  104.983571][ T6961] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.407'.
[  105.548231][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.412'.
[  105.592232][ T6973] netlink: 80 bytes leftover after parsing attributes in process `syz.1.411'.
[  106.316538][ T6995] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.421'.
[  106.734862][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  106.844052][ T7018] netlink: 'syz.1.430': attribute type 29 has an invalid length.
[  107.826806][ T7054] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  107.897521][ T7062] netlink: 'syz.0.450': attribute type 3 has an invalid length.
[  107.901363][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  107.906221][ T7062] netlink: 'syz.0.450': attribute type 3 has an invalid length.
[  107.920160][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  107.923066][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  107.948207][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[  107.955027][ T7064] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  107.959646][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.163955][ T7076] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.456'.
[  108.787668][ T7106] Illegal XDP return value 2505677882 on prog  (id 176) dev N/A, expect packet loss!
[  108.875844][ T7109] lo speed is unknown, defaulting to 1000
[  109.175676][ T7120] lo speed is unknown, defaulting to 1000
[  109.382005][ T7132] netlink: 'syz.2.479': attribute type 21 has an invalid length.
[  109.651939][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.484'.
[  110.641161][ T7174] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[  110.643364][ T7175] __nla_validate_parse: 2 callbacks suppressed
[  110.643380][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  110.675184][ T7175] : entered promiscuous mode
[  110.832525][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.499'.
[  110.865456][ T7187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.044976][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.504'.
[  111.060695][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.504'.
[  111.975044][ T7219] netlink: 'syz.2.515': attribute type 4 has an invalid length.
[  112.131871][ T7225] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[  112.135878][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'.
[  112.222624][ T7229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.519'.
[  112.634619][ T7246] netlink: 'syz.0.528': attribute type 7 has an invalid length.
[  112.637812][ T7246] netlink: 64 bytes leftover after parsing attributes in process `syz.0.528'.
[  112.998196][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'.
[  113.462692][ T7274] netlink: 'syz.2.541': attribute type 21 has an invalid length.
[  113.470505][ T7274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.541'.
[  113.536464][ T7276] netlink: 'syz.0.542': attribute type 14 has an invalid length.
[  113.680136][ T7284] netlink: 'syz.1.545': attribute type 2 has an invalid length.
[  113.683228][ T7284] netlink: 'syz.1.545': attribute type 1 has an invalid length.
[  113.686584][ T7284] netlink: 'syz.1.545': attribute type 1 has an invalid length.
[  113.739233][ T7288] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.546'.
[  113.801780][ T7290] syzkaller0: tun_chr_ioctl cmd 1074025677
[  113.804519][ T7290] syzkaller0: linktype set to 768
[  113.953084][ T7304] netlink: 'syz.1.554': attribute type 1 has an invalid length.
[  114.320007][ T7327] netlink: 'syz.2.560': attribute type 39 has an invalid length.
[  114.325605][ T7327] veth0_macvtap: left promiscuous mode
[  114.601803][ T7343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  115.541783][ T7360] netlink: 'syz.0.576': attribute type 10 has an invalid length.
[  115.945451][ T7391] __nla_validate_parse: 2 callbacks suppressed
[  115.945463][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'.
[  115.952825][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'.
[  116.111394][ T7402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.594'.
[  116.385725][ T7412] lo speed is unknown, defaulting to 1000
[  116.885977][ T7432] netlink: 'syz.2.606': attribute type 4 has an invalid length.
[  116.892774][ T7432] netlink: 'syz.2.606': attribute type 3 has an invalid length.
[  116.898658][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.606'.
[  116.982866][ T7436] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.608'.
[  117.549608][ T7449] netlink: 104 bytes leftover after parsing attributes in process `syz.2.613'.
[  117.714035][ T7462] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.619'.
[  117.875045][ T7468] sctp: [Deprecated]: syz.1.621 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.875045][ T7468] Use struct sctp_sack_info instead
[  119.517014][ T7506] netlink: 132 bytes leftover after parsing attributes in process `syz.1.636'.
[  119.557623][ T7510] netlink: 48 bytes leftover after parsing attributes in process `syz.1.638'.
[  120.258145][ T7552] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.657'.
[  120.262815][ T7552] validate_nla: 1 callbacks suppressed
[  120.262836][ T7552] netlink: 'syz.0.657': attribute type 3 has an invalid length.
[  120.423630][ T7560] netlink: 'syz.0.661': attribute type 10 has an invalid length.
[  120.450047][ T7560] team0: Port device geneve1 added
[  122.136887][ T7602] netlink: ct family unspecified
[  122.153775][ T7602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.208652][ T7608] syz.0.683 uses obsolete (PF_INET,SOCK_PACKET)
[  122.234952][ T7608] bond0: entered promiscuous mode
[  122.238022][ T7608] bond_slave_0: entered promiscuous mode
[  122.243137][ T7608] bond_slave_1: entered promiscuous mode
[  122.261400][ T7608] bond0: entered allmulticast mode
[  122.265874][ T7608] bond_slave_0: entered allmulticast mode
[  122.268144][ T7608] bond_slave_1: entered allmulticast mode
[  122.321561][ T7612] __nla_validate_parse: 5 callbacks suppressed
[  122.321572][ T7612] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.685'.
[  122.398486][ T7618] netlink: 'syz.0.688': attribute type 13 has an invalid length.
[  122.406578][ T7618] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.688'.
[  122.417410][ T7620] netlink: 'syz.2.689': attribute type 10 has an invalid length.
[  122.450286][ T7622] netlink: 'syz.1.690': attribute type 21 has an invalid length.
[  122.859911][ T7644] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  122.920948][ T7646] netlink: 'syz.2.701': attribute type 6 has an invalid length.
[  122.924237][ T7646] netlink: 140 bytes leftover after parsing attributes in process `syz.2.701'.
[  122.987475][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'.
[  123.085944][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'.
[  125.232816][ T7691] TCP: TCP_TX_DELAY enabled
[  125.909083][ T7723] netlink: 'syz.2.735': attribute type 3 has an invalid length.
[  125.912062][ T7723] netlink: 'syz.2.735': attribute type 2 has an invalid length.
[  125.916644][ T7723] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.735'.
[  126.208202][ T7732] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  126.215042][ T7734] netlink: 'syz.0.740': attribute type 37 has an invalid length.
[  126.345463][ T7744] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  126.348335][ T7744] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  126.441466][ T7751] netlink: 'syz.0.748': attribute type 19 has an invalid length.
[  126.857450][ T7766] IPv6: Can't replace route, no match found
[  127.027940][ T7764] syzkaller0: entered promiscuous mode
[  127.031249][ T7764] syzkaller0: entered allmulticast mode
[  127.039667][ T7764] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  127.337678][ T7803] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.770'.
[  128.021780][ T7816] netlink: 'syz.2.774': attribute type 2 has an invalid length.
[  128.211770][ T7819] netlink: 'syz.0.775': attribute type 23 has an invalid length.
[  130.369767][ T7869] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.797'.
[  131.814477][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  131.817316][ T7903] netlink: 32 bytes leftover after parsing attributes in process `syz.0.812'.
[  131.987818][ T7911] netlink: 'syz.2.817': attribute type 29 has an invalid length.
[  131.996951][ T7911] netlink: 'syz.2.817': attribute type 29 has an invalid length.
[  132.652947][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.655116][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.480440][ T7949] openvswitch: netlink: Flow actions attr not present in new flow.
[  133.495841][ T7949] syzkaller0: entered promiscuous mode
[  134.863569][ T7963] netlink: 182 bytes leftover after parsing attributes in process `syz.0.839'.
[  136.015802][ T7982] netlink: 'syz.0.847': attribute type 39 has an invalid length.
[  136.324232][ T7990] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.851'.
[  136.345240][ T7990] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.851'.
[  136.426689][ T7994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.072398][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'.
[  137.075183][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'.
[  137.141336][ T8016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.281830][ T8021] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.864'.
[  137.285629][ T8020] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.864'.
[  137.300173][ T8021] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.864'.
[  137.515672][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  137.518340][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.0.866'.
[  137.987570][ T8033] delete_channel: no stack
[  137.994965][ T8033] delete_channel: no stack
[  138.104215][ T8037] netlink: 'syz.0.872': attribute type 25 has an invalid length.
[  138.292768][ T8041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.423936][ T8048] netlink: 'syz.2.877': attribute type 3 has an invalid length.
[  140.296985][ T8091] netlink: 'syz.0.894': attribute type 8 has an invalid length.
[  141.654665][ T8102] __nla_validate_parse: 5 callbacks suppressed
[  141.654682][ T8102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'.
[  142.188045][ T8113] netlink: 'syz.2.904': attribute type 1 has an invalid length.
[  142.813788][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  142.817809][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  142.822040][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  142.827028][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  142.829921][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.910375][ T5891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.939951][ T8134] lo speed is unknown, defaulting to 1000
[  143.007735][ T5891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.105385][ T5891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.108459][ T8152] netlink: 'syz.0.919': attribute type 10 has an invalid length.
[  143.146314][ T8152] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  143.149656][ T8152] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  143.153318][ T8152] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  143.218219][ T5891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.256748][ T8134] chnl_net:caif_netlink_parms(): no params data found
[  143.273124][ T5848] Bluetooth: hci1: Malformed LE Event: 0x0d
[  143.484676][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.487704][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.493038][ T8134] bridge_slave_0: entered allmulticast mode
[  143.497054][ T8134] bridge_slave_0: entered promiscuous mode
[  143.511915][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.515248][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.518430][ T8134] bridge_slave_1: entered allmulticast mode
[  143.524051][ T8134] bridge_slave_1: entered promiscuous mode
[  144.001949][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.009338][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.015654][ T5891] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  144.026475][ T5891] bond0 (unregistering): Released all slaves
[  144.043667][ T8134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.052989][ T8134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.164016][ T8134] team0: Port device team_slave_0 added
[  144.179598][ T8134] team0: Port device team_slave_1 added
[  144.242426][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.245347][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.257582][ T8134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.307930][ T8134] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.312508][ T8134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.327637][ T8134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.518276][ T5891] hsr_slave_0: left promiscuous mode
[  144.522011][ T5891] hsr_slave_1: left promiscuous mode
[  144.524944][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.528020][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.532154][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.535347][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.554123][ T5891] veth1_vlan: left promiscuous mode
[  144.556711][ T5891] veth0_vlan: left promiscuous mode
[  144.889118][ T5848] Bluetooth: hci0: command tx timeout
[  144.981222][ T5891] team0 (unregistering): Port device team_slave_1 removed
[  145.007334][ T5891] team0 (unregistering): Port device team_slave_0 removed
[  145.375132][ T8134] hsr_slave_0: entered promiscuous mode
[  145.378499][ T8134] hsr_slave_1: entered promiscuous mode
[  145.399653][ T5916] lo speed is unknown, defaulting to 1000
[  145.402612][ T5916] infiniband syz2: ib_query_port failed (-19)
[  145.787271][ T8134] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.800436][ T8134] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.805446][ T8134] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.814244][ T8134] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  146.031508][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.056108][ T8134] 8021q: adding VLAN 0 to HW filter on device team0
[  146.082339][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.085183][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.092606][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.095104][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.232469][ T8254] netlink: 45 bytes leftover after parsing attributes in process `syz.0.956'.
[  146.454371][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.524447][ T8134] veth0_vlan: entered promiscuous mode
[  146.547614][ T8134] veth1_vlan: entered promiscuous mode
[  146.595957][ T8134] veth0_macvtap: entered promiscuous mode
[  146.606534][ T8134] veth1_macvtap: entered promiscuous mode
[  146.637796][ T8134] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.648711][ T8134] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.665055][ T5716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.686410][ T5716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.704182][ T5716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.708261][ T5716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.731904][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'.
[  146.897169][ T8284] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  146.908979][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'.
[  146.912938][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.916431][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.971473][ T5848] Bluetooth: hci0: command tx timeout
[  146.985890][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.996071][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.695700][ T5848] Bluetooth: hci1: adv larger than maximum supported
[  147.695731][ T5848] Bluetooth: hci1: Unknown advertising packet type: 0x73
[  147.707929][ T8309] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.971'.
[  147.913640][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'.
[  147.929915][ T8292] netlink: 152 bytes leftover after parsing attributes in process `syz.3.908'.
[  149.059610][ T5848] Bluetooth: hci0: command tx timeout
[  151.046423][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  151.129298][ T5848] Bluetooth: hci0: command tx timeout
[  151.346249][ T8359] netlink: 'syz.2.990': attribute type 6 has an invalid length.
[  151.350010][ T8359] netlink: 168 bytes leftover after parsing attributes in process `syz.2.990'.
[  153.053579][ T8404] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1011'.
[  153.396760][ T8417] netlink: 'syz.2.1016': attribute type 39 has an invalid length.
[  153.413095][ T8428] netlink: 'syz.3.1020': attribute type 2 has an invalid length.
[  153.416388][ T8428] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1020'.
[  155.361985][ T8430] netlink: 'syz.3.1021': attribute type 29 has an invalid length.
[  155.461628][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  155.465317][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  155.471770][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  155.475306][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  156.812021][ T8474] netlink: 'syz.0.1038': attribute type 23 has an invalid length.
[  157.828648][ T8525] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1057'.
[  157.832937][ T8523] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1057'.
[  157.921099][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'.
[  158.055222][ T8535] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1059'.
[  158.071000][ T8535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'.
[  158.087079][ T8535] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1059'.
[  158.104703][ T8535] netlink: 'syz.3.1059': attribute type 2 has an invalid length.
[  158.115418][ T8535] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1059'.
[  158.236700][ T8504] delete_channel: no stack
[  158.364898][ T8546] netlink: 'syz.3.1062': attribute type 1 has an invalid length.
[  158.368012][ T8546] netlink: 'syz.3.1062': attribute type 2 has an invalid length.
[  158.371544][ T8546] netlink: 'syz.3.1062': attribute type 3 has an invalid length.
[  158.374601][ T8546] netlink: 'syz.3.1062': attribute type 5 has an invalid length.
[  158.377557][ T8546] netlink: 'syz.3.1062': attribute type 6 has an invalid length.
[  158.396137][ T8546] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1062'.
[  158.407051][ T8546] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.1062'.
[  158.411178][ T8546] validate_nla: 1 callbacks suppressed
[  158.411192][ T8546] netlink: 'syz.3.1062': attribute type 1 has an invalid length.
[  158.418226][ T8546] netlink: 'syz.3.1062': attribute type 2 has an invalid length.
[  158.425575][ T8546] netlink: 'syz.3.1062': attribute type 3 has an invalid length.
[  158.428886][ T8546] netlink: 'syz.3.1062': attribute type 5 has an invalid length.
[  158.432025][ T8546] netlink: 'syz.3.1062': attribute type 6 has an invalid length.
[  158.445883][ T8551] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1063'.
[  158.451864][ T8546] netlink: 'syz.3.1062': attribute type 7 has an invalid length.
[  158.455053][ T8546] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1062'.
[  158.775080][ T5848] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255
[  158.974041][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'.
[  158.989048][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'.
[  159.291984][ T8593] netlink: 'syz.3.1083': attribute type 40 has an invalid length.
[  159.300155][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.535978][ T8609] netlink: 'syz.3.1091': attribute type 26 has an invalid length.
[  160.348712][ T8660] netlink: 'syz.2.1113': attribute type 7 has an invalid length.
[  160.707246][ T8674] netlink: 198328 bytes leftover after parsing attributes in process `syz.0.1120'.
[  160.710791][ T8674] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  162.027566][ T8697] sit0: entered allmulticast mode
[  162.128449][ T8703] sit0: entered promiscuous mode
[  163.166907][ T8722] __nla_validate_parse: 3 callbacks suppressed
[  163.167002][ T8722] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1140'.
[  163.269306][ T8738] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  163.610704][ T8751] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1153'.
[  163.922749][ T8766] validate_nla: 3 callbacks suppressed
[  163.922766][ T8766] netlink: 'syz.2.1160': attribute type 4 has an invalid length.
[  163.928766][ T8766] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1160'.
[  164.245235][ T8784] netlink: 'syz.2.1169': attribute type 13 has an invalid length.
[  164.258677][ T8784] netlink: 'syz.2.1169': attribute type 58 has an invalid length.
[  164.262900][ T8784] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1169'.
[  164.537865][ T8798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'.
[  164.559405][ T8798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'.
[  164.628041][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1177'.
[  164.646485][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1177'.
[  164.958234][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1182'.
[  164.963489][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1182'.
[  165.047044][ T8815] openvswitch: netlink: IP tunnel dst address not specified
[  165.125532][ T5848] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  165.234731][ T8819] netlink: 'syz.2.1185': attribute type 2 has an invalid length.
[  167.294535][ T8878] netlink: 'syz.3.1213': attribute type 2 has an invalid length.
[  167.297719][ T8878] netlink: 'syz.3.1213': attribute type 8 has an invalid length.
[  167.401017][ T8886] netlink: 'syz.0.1216': attribute type 21 has an invalid length.
[  167.403949][ T8886] netlink: 'syz.0.1216': attribute type 4 has an invalid length.
[  167.522403][ T8894] netlink: 'syz.0.1221': attribute type 2 has an invalid length.
[  167.525258][ T8894] netlink: 'syz.0.1221': attribute type 1 has an invalid length.
[  167.528092][ T8894] nbd: illegal input index 65540
[  168.305966][ T8912] __nla_validate_parse: 9 callbacks suppressed
[  168.305983][ T8912] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1227'.
[  168.320018][ T8912] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1227'.
[  168.325542][ T8909] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1227'.
[  168.733625][ T5848] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  168.795533][ T8937] netlink: 208192 bytes leftover after parsing attributes in process `syz.2.1242'.
[  169.141926][ T5848] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  169.145450][ T5848] Bluetooth: hci0: Injecting HCI hardware error event
[  169.150760][   T54] Bluetooth: hci0: hardware error 0x00
[  169.585516][ T8950] validate_nla: 2 callbacks suppressed
[  169.585530][ T8950] netlink: 'syz.3.1245': attribute type 21 has an invalid length.
[  169.592915][ T8950] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1245'.
[  169.596193][ T8950] netlink: 'syz.3.1245': attribute type 5 has an invalid length.
[  169.598612][ T8950] netlink: 'syz.3.1245': attribute type 6 has an invalid length.
[  169.604489][ T8950] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1245'.
[  169.696711][ T8960] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1250'.
[  169.746024][ T8967] netlink: 'syz.2.1253': attribute type 21 has an invalid length.
[  169.756655][ T8967] netlink: 'syz.2.1253': attribute type 4 has an invalid length.
[  169.770644][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1253'.
[  170.131970][ T8987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1262'.
[  170.506036][ T9003] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1269'.
[  170.680672][ T9010] netlink: 'syz.0.1272': attribute type 3 has an invalid length.
[  170.745297][ T9015] netlink: 'syz.0.1274': attribute type 4 has an invalid length.
[  171.140727][ T9038] svc: failed to register nfsdv3 RPC service (errno 111).
[  171.146804][ T9038] svc: failed to register nfsaclv3 RPC service (errno 111).
[  171.257451][ T9048] netlink: 'syz.2.1290': attribute type 2 has an invalid length.
[  171.335242][ T9052] syzkaller0: entered promiscuous mode
[  171.337051][ T9052] syzkaller0: entered allmulticast mode
[  171.460100][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  171.506900][ T9062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.273389][ T9070] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.276794][ T9070] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.324268][ T9071] netlink: 'syz.3.1300': attribute type 21 has an invalid length.
[  172.370028][ T9071] netlink: 'syz.3.1300': attribute type 5 has an invalid length.
[  172.694714][ T9090] C: renamed from team_slave_0 (while UP)
[  172.735468][ T9090] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  172.958740][ T9102] xt_socket: unknown flags 0x40
[  174.037776][ T9147] __nla_validate_parse: 11 callbacks suppressed
[  174.037799][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'.
[  174.046921][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'.
[  174.136200][ T9151] syzkaller0: entered promiscuous mode
[  174.138103][ T9151] syzkaller0: entered allmulticast mode
[  174.515767][ T9170] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1345'.
[  174.521092][ T9170] nbd: must specify at least one socket
[  174.549697][   T54] Bluetooth: hci2: Malformed LE Event: 0x0b
[  174.716062][ T9183] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1351'.
[  175.432107][ T9184] syzkaller0: entered promiscuous mode
[  175.434108][ T9184] syzkaller0: entered allmulticast mode
[  175.496625][ T9199] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1356'.
[  176.577814][   T54] Bluetooth: hci1: unexpected event 0x17 length: 151 > 6
[  176.798215][ T9235] validate_nla: 9 callbacks suppressed
[  176.798228][ T9235] netlink: 'syz.0.1371': attribute type 1 has an invalid length.
[  177.170813][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'.
[  177.173564][ T9260] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  177.176017][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.266630][ T9266] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1383'.
[  179.685824][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1039604737 wd_nsec: 1039604748
[  180.595109][ T9274] pim6reg1: entered allmulticast mode
[  180.606190][ T9277] pim6reg1: left allmulticast mode
[  181.043808][ T9307] lo speed is unknown, defaulting to 1000
[  181.047397][ T9307] lo speed is unknown, defaulting to 1000
[  181.061898][ T9307] lo speed is unknown, defaulting to 1000
[  181.376576][ T9307] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  181.818379][ T9307] lo speed is unknown, defaulting to 1000
[  181.863938][ T9307] lo speed is unknown, defaulting to 1000
[  181.868021][ T9307] lo speed is unknown, defaulting to 1000
[  181.881771][ T9340] netlink: 'syz.0.1419': attribute type 4 has an invalid length.
[  181.934142][ T9347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1421'.
[  181.961861][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'.
[  181.968350][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'.
[  182.107008][   T54] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  182.245822][ T9367] netlink: 'syz.0.1431': attribute type 10 has an invalid length.
[  182.258764][ T9367] bond0: (slave netdevsim0): Releasing backup interface
[  182.263046][ T9367] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  182.266105][ T9367] bridge0: port 3(netdevsim0) entered blocking state
[  182.268378][ T9367] bridge0: port 3(netdevsim0) entered disabled state
[  182.271763][ T9367] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  183.297390][ T9386] raw_sendmsg: syz.0.1438 forgot to set AF_INET. Fix it!
[  183.346130][ T9386] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1438'.
[  183.884552][ T9394] netlink: 'syz.3.1443': attribute type 4 has an invalid length.
[  183.887698][ T9394] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1443'.
[  184.179001][   T54] Bluetooth: hci1: command tx timeout
[  184.325923][ T9419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'.
[  184.333084][ T9418] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1454'.
[  184.336103][ T9415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'.
[  184.347624][ T9419] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1453'.
[  184.355870][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'.
[  184.405092][ T9421] netlink: 'syz.0.1455': attribute type 2 has an invalid length.
[  186.006094][ T9470] option changes via remount are deprecated (pid=9469 comm=syz.3.1476)
[  186.261078][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  186.976784][ T9506] syzkaller0: entered promiscuous mode
[  186.978645][ T9506] syzkaller0: entered allmulticast mode
[  187.018124][ T9508] __nla_validate_parse: 3 callbacks suppressed
[  187.018136][ T9508] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1494'.
[  188.333874][ T9508] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  188.512374][ T9514] netlink: 'syz.3.1497': attribute type 3 has an invalid length.
[  190.062617][ T9550] dummy0: entered promiscuous mode
[  190.080018][ T9550] dummy0: entered allmulticast mode
[  190.149735][ T9552] netlink: 'syz.3.1513': attribute type 10 has an invalid length.
[  190.152762][ T9552] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1513'.
[  191.480538][ T9566] openvswitch: netlink: Flow key attr not present in new flow.
[  192.989480][ T9603] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1537'.
[  193.844127][ T9613] lo speed is unknown, defaulting to 1000
[  193.951520][ T9617] rdma_rxe: rxe_newlink: failed to add erspan0
[  194.059432][ T9622] C: renamed from team_slave_0 (while UP)
[  194.072782][ T9622] netlink: 'syz.3.1545': attribute type 8 has an invalid length.
[  194.080218][ T9622] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  194.092522][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.095010][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  196.169855][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  198.743989][ T9698] sctp: [Deprecated]: syz.3.1575 (pid 9698) Use of int in maxseg socket option.
[  198.743989][ T9698] Use struct sctp_assoc_value instead
[  198.830114][ T9708] tap0: tun_chr_ioctl cmd 1074025680
[  199.465223][ T9723] netlink: 'syz.3.1587': attribute type 3 has an invalid length.
[  200.049663][ T9746] IPv6: Can't replace route, no match found
[  202.552199][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  202.556860][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  202.561305][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  202.565005][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  202.569752][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  203.404870][ T9754] lo speed is unknown, defaulting to 1000
[  203.598051][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.623015][ T9770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.721808][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.744486][ T9754] chnl_net:caif_netlink_parms(): no params data found
[  203.818209][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.896301][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  203.901278][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  203.930138][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.964367][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.979611][ T9786] bridge0: entered allmulticast mode
[  203.999286][ T9791] netlink: 'syz.2.1614': attribute type 32 has an invalid length.
[  204.053113][ T9754] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.057500][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.062498][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1615'.
[  204.068141][ T9754] bridge_slave_0: entered allmulticast mode
[  204.072596][ T9754] bridge_slave_0: entered promiscuous mode
[  204.078942][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.082660][ T9781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.098730][ T9781] bridge0: entered promiscuous mode
[  204.213616][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.217444][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.221741][ T9754] bridge_slave_1: entered allmulticast mode
[  204.225026][ T9754] bridge_slave_1: entered promiscuous mode
[  204.307244][ T9754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.312786][ T9799] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1618'.
[  204.317664][ T9754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.393099][ T9754] team0: Port device team_slave_0 added
[  204.444472][ T9754] team0: Port device team_slave_1 added
[  204.473287][   T12] bridge_slave_1: left allmulticast mode
[  204.475742][   T12] bridge_slave_1: left promiscuous mode
[  204.490065][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.504747][   T12] bridge_slave_0: left allmulticast mode
[  204.507537][   T12] bridge_slave_0: left promiscuous mode
[  204.511031][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.654339][   T54] Bluetooth: hci3: command tx timeout
[  204.765762][   T12] team0: Port device geneve1 removed
[  204.931955][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.937172][   T12] bond_slave_0: left promiscuous mode
[  204.940103][   T12] bond_slave_0: left allmulticast mode
[  204.951240][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.955358][   T12] bond_slave_1: left promiscuous mode
[  204.957814][   T12] bond_slave_1: left allmulticast mode
[  204.966862][   T12] bond0 (unregistering): Released all slaves
[  205.051711][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.054618][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.065170][ T9754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.071770][ T9754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.074612][ T9754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.086161][ T9754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.159020][   T12] : left promiscuous mode
[  205.201154][ T9754] hsr_slave_0: entered promiscuous mode
[  205.213225][ T9754] hsr_slave_1: entered promiscuous mode
[  205.225032][ T9754] debugfs: 'hsr0' already exists in 'hsr'
[  205.227828][ T9754] Cannot create hsr debugfs directory
[  205.533743][ T9821] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component
[  205.705587][   T12] hsr_slave_0: left promiscuous mode
[  205.708579][   T12] hsr_slave_1: left promiscuous mode
[  205.712706][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.715828][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.720892][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.723993][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.751130][   T12] veth1_macvtap: left promiscuous mode
[  205.753656][   T12] veth0_macvtap: left promiscuous mode
[  205.756105][   T12] veth1_vlan: left promiscuous mode
[  205.758516][   T12] veth0_vlan: left promiscuous mode
[  206.729264][   T54] Bluetooth: hci3: command tx timeout
[  207.089573][   T12] team0 (unregistering): Port device team_slave_1 removed
[  207.138752][   T12] team0 (unregistering): Port device team_slave_0 removed
[  207.545220][ T5916] infiniband syz0: ib_query_port failed (-19)
[  207.697696][ T9754] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  207.721586][ T9754] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  207.737782][ T9754] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  207.785432][ T9754] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  207.841442][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'.
[  208.113352][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.152797][ T9754] 8021q: adding VLAN 0 to HW filter on device team0
[  208.158570][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'.
[  208.175941][ T1954] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.179120][ T1954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.204493][ T1954] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.207753][ T1954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.800058][ T9887] netlink: 'syz.2.1647': attribute type 4 has an invalid length.
[  208.803431][ T9887] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1647'.
[  208.810977][   T54] Bluetooth: hci3: command tx timeout
[  208.911610][ T9887] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1647'.
[  208.915346][ T9887] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  208.992445][ T9754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.338682][ T9913] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1650'.
[  209.384267][ T9754] veth0_vlan: entered promiscuous mode
[  209.399891][ T9754] veth1_vlan: entered promiscuous mode
[  209.436994][ T9754] veth0_macvtap: entered promiscuous mode
[  209.444184][ T9754] veth1_macvtap: entered promiscuous mode
[  209.460706][ T9923] netlink: 'syz.2.1652': attribute type 1 has an invalid length.
[  209.463162][ T9923] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1652'.
[  209.465560][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.477298][ T9754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.491314][ T5874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.502746][ T5874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.516090][ T5874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.521638][ T5874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.599151][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.605418][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.624870][  T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.627903][  T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.736721][ T9931] lo speed is unknown, defaulting to 1000
[  210.057939][ T9941] -1: renamed from syzkaller0
[  210.578397][ T9961] netlink: 'syz.2.1666': attribute type 27 has an invalid length.
[  210.581160][ T9961] netlink: 'syz.2.1666': attribute type 3 has an invalid length.
[  210.585182][ T9961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1666'.
[  210.656762][ T9965] netlink: 'syz.3.1668': attribute type 23 has an invalid length.
[  210.889118][ T5848] Bluetooth: hci3: command tx timeout
[  210.989579][ T9980] syzkaller0: create flow: hash 3205108512 index 1
[  211.082234][ T9984] syzkaller0: delete flow: hash 3205108512 index 1
[  213.022062][T10008] netlink: 'syz.3.1683': attribute type 10 has an invalid length.
[  213.395765][T10008] bond0: (slave bond_slave_0): Releasing backup interface
[  213.615389][T10016] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1688'.
[  213.645052][T10020] xt_time: invalid argument - start or stop time greater than 23:59:59
[  214.347542][ T5716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.483839][ T5716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.565712][ T5716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.625710][ T5716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.726527][ T5716] bridge_slave_1: left allmulticast mode
[  214.731448][ T5716] bridge_slave_1: left promiscuous mode
[  214.733990][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.739847][ T5716] bridge_slave_0: left allmulticast mode
[  214.742175][ T5716] bridge_slave_0: left promiscuous mode
[  214.744601][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.262343][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.267605][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.271178][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.274174][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.277185][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.482003][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1705'.
[  215.972399][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.983984][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.990094][ T5716] bond0 (unregistering): Released all slaves
[  216.009090][T10065] netlink: 'syz.3.1705': attribute type 3 has an invalid length.
[  216.012661][T10066] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1705'.
[  216.037523][T10062] lo speed is unknown, defaulting to 1000
[  216.225627][T10072] syzkaller0: entered promiscuous mode
[  216.227962][T10072] syzkaller0: entered allmulticast mode
[  216.287491][   T54] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  216.368574][T10078] netlink: 'syz.2.1710': attribute type 25 has an invalid length.
[  216.465826][ T5716] hsr_slave_0: left promiscuous mode
[  216.470335][T10081] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1711'.
[  216.479366][ T5716] hsr_slave_1: left promiscuous mode
[  216.483820][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.486916][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.493872][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.497089][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.525245][ T5716] veth1_macvtap: left promiscuous mode
[  216.527592][ T5716] veth0_macvtap: left promiscuous mode
[  216.540846][ T5716] veth1_vlan: left promiscuous mode
[  216.543007][ T5716] veth0_vlan: left promiscuous mode
[  217.014695][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  217.054900][ T5716] team0 (unregistering): Port device team_slave_0 removed
[  217.299311][ T5848] Bluetooth: hci2: command tx timeout
[  217.474504][T10087] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.478435][T10087] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  217.482556][T10062] chnl_net:caif_netlink_parms(): no params data found
[  217.674745][T10062] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.680409][T10062] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.699209][T10062] bridge_slave_0: entered allmulticast mode
[  217.702864][T10062] bridge_slave_0: entered promiscuous mode
[  217.731504][T10062] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.745689][T10062] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.755739][T10062] bridge_slave_1: entered allmulticast mode
[  217.762085][T10062] bridge_slave_1: entered promiscuous mode
[  217.803356][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'.
[  217.847081][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'.
[  217.852808][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.855846][T10103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1719'.
[  217.862890][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.899995][T10062] team0: Port device team_slave_0 added
[  217.904709][T10062] team0: Port device team_slave_1 added
[  217.911255][T10104] delete_channel: no stack
[  217.957731][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.962199][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.976211][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.988978][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.991526][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.001446][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.047134][T10062] hsr_slave_0: entered promiscuous mode
[  218.051118][T10062] hsr_slave_1: entered promiscuous mode
[  218.053722][T10062] debugfs: 'hsr0' already exists in 'hsr'
[  218.056016][T10062] Cannot create hsr debugfs directory
[  218.328972][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  218.367486][T10062] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  218.388001][T10062] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  218.407884][T10062] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  218.416642][T10062] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  218.496759][T10062] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.500022][T10062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.503477][T10062] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.506601][T10062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.537931][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.554283][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.648407][T10062] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.750288][T10062] 8021q: adding VLAN 0 to HW filter on device team0
[  218.760770][ T1954] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.763062][ T1954] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.792028][ T1954] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.794418][ T1954] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.072213][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.194258][T10154] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  219.328775][T10062] veth0_vlan: entered promiscuous mode
[  219.346141][T10062] veth1_vlan: entered promiscuous mode
[  219.371543][ T5848] Bluetooth: hci2: command tx timeout
[  219.390799][T10062] veth0_macvtap: entered promiscuous mode
[  219.408039][T10062] veth1_macvtap: entered promiscuous mode
[  219.425217][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.436429][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.444799][ T5716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.455036][ T5716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.468344][ T5716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.474297][ T5716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.535353][   T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.538088][   T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.578179][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.584004][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.818068][T10179] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1745'.
[  219.822831][T10179] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1745'.
[  219.887971][T10186] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  219.916818][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1750'.
[  219.921692][T10188] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1750'.
[  219.922082][T10190] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  220.237544][ T5848] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  220.237921][ T5848] Bluetooth: hci2: connection err: -111
[  220.720226][T10213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.865525][T10222] __nla_validate_parse: 1 callbacks suppressed
[  220.865543][T10222] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1763'.
[  220.881863][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'.
[  221.149126][T10241] netlink: 'syz.3.1771': attribute type 1 has an invalid length.
[  221.183597][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.329811][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1775'.
[  221.335910][T10250] unsupported nlmsg_type 40
[  221.449646][ T5848] Bluetooth: hci2: command tx timeout
[  222.693552][T10258] netlink: 'syz.3.1779': attribute type 3 has an invalid length.
[  222.696795][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1779'.
[  222.724862][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1778'.
[  222.734956][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1778'.
[  222.812136][T10263] siw: device registration error -23
[  222.892187][T10267] netlink: 'syz.3.1784': attribute type 1 has an invalid length.
[  223.166768][T10285] netlink: 'syz.5.1791': attribute type 2 has an invalid length.
[  223.175266][T10285] netlink: 'syz.5.1791': attribute type 1 has an invalid length.
[  223.178398][T10285] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1791'.
[  223.185942][T10285] nbd: must specify at least one socket
[  223.399764][T10303] netlink: 'syz.3.1799': attribute type 16 has an invalid length.
[  223.402917][T10303] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1799'.
[  223.534424][ T5848] Bluetooth: hci2: command tx timeout
[  223.558597][T10319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.828369][ T5848] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  224.565735][T10381] netlink: 'syz.2.1837': attribute type 2 has an invalid length.
[  224.577735][T10381] netlink: 'syz.2.1837': attribute type 1 has an invalid length.
[  224.581711][T10381] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1837'.
[  224.586454][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'.
[  224.629950][T10386] bridge0: port 3(hsr_slave_1) entered blocking state
[  224.634076][T10386] bridge0: port 3(hsr_slave_1) entered disabled state
[  224.637456][T10386] hsr_slave_1: entered allmulticast mode
[  224.644887][T10386] hsr_slave_1: left allmulticast mode
[  224.678929][T10389] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  224.799397][T10395] netlink: 'syz.2.1844': attribute type 4 has an invalid length.
[  225.158612][T10425] lo: entered allmulticast mode
[  225.186309][ T5912] lo speed is unknown, defaulting to 1000
[  225.192014][ T5912] syz2: Port: 1 Link DOWN
[  225.194675][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.198554][T10425] lo: entered promiscuous mode
[  225.201952][T10425] lo: left allmulticast mode
[  225.204907][ T5884] lo speed is unknown, defaulting to 1000
[  225.206750][ T5884] syz2: Port: 1 Link ACTIVE
[  225.225117][T10429] bridge_slave_1: left allmulticast mode
[  225.227332][T10429] bridge_slave_1: left promiscuous mode
[  225.237850][T10429] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.247807][T10429] bridge_slave_0: left allmulticast mode
[  225.253662][T10429] bridge_slave_0: left promiscuous mode
[  225.255600][T10429] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.348283][T10435] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  226.036340][T10468] __nla_validate_parse: 4 callbacks suppressed
[  226.036361][T10468] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1879'.
[  226.192997][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'.
[  226.503789][T10486] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  226.556266][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1888'.
[  230.205622][T10526] validate_nla: 2 callbacks suppressed
[  230.205636][T10526] netlink: 'syz.2.1904': attribute type 3 has an invalid length.
[  230.212574][T10526] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1904'.
[  230.611299][T10547] syzkaller0: entered promiscuous mode
[  230.613746][T10547] syzkaller0: entered allmulticast mode
[  230.842822][T10551] siw: device registration error -23
[  232.298256][T10571] openvswitch: netlink: IP tunnel TTL not specified.
[  232.382345][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'.
[  232.429017][T10580] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  233.155449][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'.
[  233.253901][T10600] netlink: 'syz.2.1933': attribute type 1 has an invalid length.
[  233.257057][T10600] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1933'.
[  233.306609][T10606] netlink: 'syz.2.1936': attribute type 2 has an invalid length.
[  233.312382][T10606] netlink: 'syz.2.1936': attribute type 1 has an invalid length.
[  233.314865][T10606] netlink: 'syz.2.1936': attribute type 8 has an invalid length.
[  233.317285][T10606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1936'.
[  233.391931][T10615] netlink: 'syz.5.1938': attribute type 4 has an invalid length.
[  233.449015][T10621] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  233.451861][T10621] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  233.574501][T10635] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1948'.
[  233.777481][T10641] netlink: 'syz.5.1951': attribute type 10 has an invalid length.
[  233.781933][T10641] vlan0: entered allmulticast mode
[  233.784248][T10641] veth0_vlan: entered allmulticast mode
[  233.805494][T10641] team0: Port device vlan0 added
[  234.107561][ T5848] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[  234.334214][T10655] netlink: 'syz.3.1956': attribute type 16 has an invalid length.
[  234.341693][T10655] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1956'.
[  234.496082][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1960'.
[  234.500189][T10664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1960'.
[  235.471419][T10672] netlink: 'syz.3.1963': attribute type 2 has an invalid length.
[  235.475558][T10672] netlink: 'syz.3.1963': attribute type 5 has an invalid length.
[  235.478585][T10672] netlink: 'syz.3.1963': attribute type 6 has an invalid length.
[  235.483607][T10672] netlink: 'syz.3.1963': attribute type 7 has an invalid length.
[  235.486492][T10672] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1963'.
[  235.490976][T10672] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.1963'.
[  235.494526][T10672] netlink: 'syz.3.1963': attribute type 2 has an invalid length.
[  235.500571][T10672] netlink: 'syz.3.1963': attribute type 5 has an invalid length.
[  235.506354][T10672] netlink: 'syz.3.1963': attribute type 6 has an invalid length.
[  235.522515][T10672] netlink: 'syz.3.1963': attribute type 7 has an invalid length.
[  235.784055][T10689] netlink: 'syz.2.1971': attribute type 13 has an invalid length.
[  235.812613][T10687] syzkaller0: entered promiscuous mode
[  235.814887][T10687] syzkaller0: entered allmulticast mode
[  235.838200][T10689] gretap0: refused to change device tx_queue_len
[  235.841069][T10689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  236.010636][T10699] netlink: 'syz.2.1976': attribute type 1 has an invalid length.
[  237.210518][T10715] openvswitch: netlink: Unknown nsh attribute 0
[  237.213253][T10715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.486706][T10732] netlink: zone id is out of range
[  237.491902][T10732] netlink: zone id is out of range
[  237.495244][T10732] netlink: zone id is out of range
[  237.497512][T10732] netlink: zone id is out of range
[  237.502544][T10732] netlink: zone id is out of range
[  237.505431][T10732] netlink: zone id is out of range
[  237.512384][T10732] netlink: zone id is out of range
[  237.514563][T10732] netlink: zone id is out of range
[  237.566192][ T5848] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  237.586836][T10732] netlink: set zone limit has 4 unknown bytes
[  237.922511][T10762] __nla_validate_parse: 7 callbacks suppressed
[  237.922530][T10762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2006'.
[  238.379262][T10805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2028'.
[  238.382880][T10805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2028'.
[  238.386310][T10805] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2028'.
[  238.447920][T10810] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2030'.
[  239.302850][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'.
[  240.480731][T10877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.697379][T10873] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  241.488526][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2069'.
[  241.543319][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'.
[  241.695308][T10910] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2072'.
[  241.912706][T10929] validate_nla: 10 callbacks suppressed
[  241.912726][T10929] netlink: 'syz.3.2080': attribute type 19 has an invalid length.
[  241.918016][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2080'.
[  245.939929][T10984] netlink: 'syz.3.2103': attribute type 13 has an invalid length.
[  245.948973][T10984] netlink: 'syz.3.2103': attribute type 17 has an invalid length.
[  246.130375][ T5848] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  246.133988][ T5848] Bluetooth: hci2: Injecting HCI hardware error event
[  246.137092][ T5848] Bluetooth: hci2: hardware error 0x00
[  246.382948][T10984] sit0: left promiscuous mode
[  246.384863][T10984] sit0: left allmulticast mode
[  246.503935][T10984] bridge0: left promiscuous mode
[  246.506244][T10984] bridge0: left allmulticast mode
[  246.868730][T10984] dummy0: left promiscuous mode
[  246.890805][T10984] dummy0: left allmulticast mode
[  247.060779][T10984] net_ratelimit: 1 callbacks suppressed
[  247.060867][T10984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.113811][T11006] __nla_validate_parse: 2 callbacks suppressed
[  247.113828][T11006] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2111'.
[  247.407204][T11014] _Z`Ԁ@S!!: entered promiscuous mode
[  247.432698][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'.
[  247.664670][T11031] netlink: 'syz.5.2123': attribute type 1 has an invalid length.
[  247.667829][T11031] netlink: 'syz.5.2123': attribute type 4 has an invalid length.
[  247.683651][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'.
[  247.687844][T11029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'.
[  247.757836][T11038] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2125'.
[  247.761833][T11038] tc_dump_action: action bad kind
[  248.329816][ T5848] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  248.380979][T11074] netlink: 'syz.3.2142': attribute type 4 has an invalid length.
[  248.383422][T11074] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2142'.
[  248.388208][T11074] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  248.565801][T11083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'.
[  248.600103][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'.
[  248.778630][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'.
[  249.033347][T11113] netlink: 'syz.3.2161': attribute type 1 has an invalid length.
[  249.243385][T11127] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  249.493514][T11132] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2169'.
[  249.569327][T11131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.750787][T11150] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  251.255676][ T5848] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  251.646389][T11192] netlink: 'syz.2.2196': attribute type 1 has an invalid length.
[  251.655817][T11192] netlink: 'syz.2.2196': attribute type 2 has an invalid length.
[  251.668305][T11189] sctp: [Deprecated]: syz.3.2193 (pid 11189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  251.668305][T11189] Use struct sctp_sack_info instead
[  252.098208][T11221] netlink: 'syz.2.2210': attribute type 11 has an invalid length.
[  252.104289][T11220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.212004][T11226] syzkaller0: entered promiscuous mode
[  252.215384][T11226] syzkaller0: entered allmulticast mode
[  255.533463][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.537099][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.605416][T11264] __nla_validate_parse: 4 callbacks suppressed
[  255.605491][T11264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2228'.
[  255.714554][T11273] netlink: 'syz.5.2232': attribute type 2 has an invalid length.
[  255.717727][T11273] netlink: 'syz.5.2232': attribute type 8 has an invalid length.
[  255.721943][T11273] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2232'.
[  255.816241][T11283] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2236'.
[  255.897468][T11287] netlink: 1000 bytes leftover after parsing attributes in process `syz.2.2239'.
[  255.988485][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2242'.
[  256.096013][T11296] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  256.777232][T11326] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2253'.
[  256.796468][T11326] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2253'.
[  256.933382][T11328] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2253'.
[  257.872844][T11367] xt_time: invalid argument - start or stop time greater than 23:59:59
[  258.811965][T11393] netlink: 'syz.3.2282': attribute type 29 has an invalid length.
[  258.816000][T11393] netlink: 'syz.3.2282': attribute type 29 has an invalid length.
[  258.988756][T11406] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2288'.
[  259.074443][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'.
[  259.264782][T11427] netlink: 'syz.3.2298': attribute type 21 has an invalid length.
[  259.358491][T11433] netlink: 'syz.2.2301': attribute type 12 has an invalid length.
[  259.476502][ T5848] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  259.564555][T11447] netlink: 'syz.3.2308': attribute type 21 has an invalid length.
[  259.577248][T11447] netlink: 'syz.3.2308': attribute type 15 has an invalid length.
[  259.583639][T11447] IPv6: NLM_F_CREATE should be specified when creating new route
[  259.587531][T11447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  259.590658][T11447] IPv6: NLM_F_CREATE should be set when creating new route
[  259.593784][T11447] IPv6: NLM_F_CREATE should be set when creating new route
[  259.596906][T11447] IPv6: NLM_F_CREATE should be set when creating new route
[  260.713081][T11478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.530706][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  261.696872][T11500] __nla_validate_parse: 2 callbacks suppressed
[  261.696884][T11500] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2334'.
[  261.769762][T11505] netlink: 'syz.2.2335': attribute type 21 has an invalid length.
[  261.872858][T11508] netlink: 'syz.2.2335': attribute type 4 has an invalid length.
[  261.876179][T11508] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2335'.
[  261.883224][T11508] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  261.906912][T11505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2335'.
[  262.560942][T11516] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.2340'.
[  262.668775][T11526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2344'.
[  262.674252][T11526] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2344'.
[  262.854036][T11536] option changes via remount are deprecated (pid=11524 comm=syz.2.2345)
[  262.956287][T11544] netlink: 'syz.3.2353': attribute type 3 has an invalid length.
[  262.960235][T11544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2353'.
[  263.038712][T11554] netlink: 'syz.3.2357': attribute type 10 has an invalid length.
[  263.041876][T11554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'.
[  263.045350][T11554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.217521][T11568] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2364'.
[  263.284460][T11572] netlink: 1053 bytes leftover after parsing attributes in process `syz.5.2366'.
[  263.477053][T11579] tQ6\bY4: renamed from lo (while UP)
[  264.052049][T11605] netlink: 'syz.5.2382': attribute type 21 has an invalid length.
[  264.055120][T11605] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.058230][T11605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  264.061228][T11605] IPv6: NLM_F_CREATE should be set when creating new route
[  264.064074][T11605] IPv6: NLM_F_CREATE should be set when creating new route
[  264.066957][T11605] IPv6: NLM_F_CREATE should be set when creating new route
[  265.862502][T11663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.000453][T11745] netlink: 'syz.5.2441': attribute type 1 has an invalid length.
[  268.003486][T11745] __nla_validate_parse: 5 callbacks suppressed
[  268.003501][T11745] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2441'.
[  268.020130][T11745] netlink: 125920 bytes leftover after parsing attributes in process `syz.5.2441'.
[  268.023788][T11745] netlink: 'syz.5.2441': attribute type 1 has an invalid length.
[  268.026670][T11745] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2441'.
[  268.200016][T11761] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2449'.
[  268.203669][T11761] bridge: RTM_NEWNEIGH with invalid state 0x1
[  268.447667][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2455'.
[  268.525632][T11774] syzkaller0: entered promiscuous mode
[  268.527802][T11774] syzkaller0: entered allmulticast mode
[  269.266733][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.395690][T11803] netlink: 'syz.3.2466': attribute type 10 has an invalid length.
[  271.089625][T11803] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.093732][T11803] team0: Port device bond0 added
[  271.218738][T11810] pim6reg0: tun_chr_ioctl cmd 1074025681
[  271.388248][T11813] rdma_rxe: rxe_newlink: failed to add lo
[  271.547894][T11823] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  271.571618][T11825] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  271.574563][T11825] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  273.547253][T11860] delete_channel: no stack
[  273.643312][T11900] netlink: 'syz.2.2507': attribute type 29 has an invalid length.
[  274.371089][T11915] netlink: 'syz.5.2513': attribute type 1 has an invalid length.
[  275.072723][T11945] netlink: 'syz.3.2527': attribute type 13 has an invalid length.
[  276.163670][T11958] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2532'.
[  276.286997][T11978] netlink: 'syz.5.2541': attribute type 10 has an invalid length.
[  276.298018][T11978] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2541'.
[  276.388051][T11988] netlink: 65027 bytes leftover after parsing attributes in process `syz.5.2546'.
[  276.668654][T12014] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2557'.
[  276.675628][T12014] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2557'.
[  276.688291][T12017] netlink: 62967 bytes leftover after parsing attributes in process `syz.3.2560'.
[  276.811180][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2564'.
[  277.279431][T12035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  277.282497][T12035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  277.330194][T12040] syzkaller1: tun_chr_ioctl cmd 1074025677
[  277.332281][T12040] syzkaller1: linktype set to 823
[  277.534841][T12044] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2571'.
[  277.734531][T12044] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2571'.
[  278.569970][    C1] ==================================================================
[  278.573140][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  278.576272][    C1] Write of size 8 at addr ffff88811719f1b0 by task syz.3.2577/12058
[  278.579822][    C1] 
[  278.581130][    C1] CPU: 1 UID: 0 PID: 12058 Comm: syz.3.2577 Not tainted syzkaller #0 PREEMPT(full) 
[  278.581149][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.581159][    C1] Call Trace:
[  278.581167][    C1]  <IRQ>
[  278.581174][    C1]  dump_stack_lvl+0x189/0x250
[  278.581201][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  278.581214][    C1]  ? rcu_is_watching+0x15/0xb0
[  278.581224][    C1]  ? __kasan_check_byte+0x12/0x40
[  278.581237][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.581246][    C1]  ? rcu_is_watching+0x15/0xb0
[  278.581253][    C1]  ? lock_release+0x4b/0x3e0
[  278.581268][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  278.581277][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  278.581287][    C1]  print_report+0xca/0x240
[  278.581296][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  278.581305][    C1]  kasan_report+0x118/0x150
[  278.581317][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  278.581327][    C1]  __xfrm_state_delete+0x696/0xca0
[  278.581338][    C1]  xfrm_timer_handler+0x18f/0xa00
[  278.581349][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  278.581357][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  278.581366][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.581376][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  278.581383][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.581397][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  278.581405][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  278.581414][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  278.581426][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  278.581434][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  278.581445][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  278.581454][    C1]  handle_softirqs+0x286/0x870
[  278.581463][    C1]  ? do_softirq+0xec/0x180
[  278.581471][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  278.581479][    C1]  ? bpf_test_run+0x197/0x7b0
[  278.581489][    C1]  do_softirq+0xec/0x180
[  278.581497][    C1]  </IRQ>
[  278.581500][    C1]  <TASK>
[  278.581503][    C1]  ? __pfx_do_softirq+0x10/0x10
[  278.581512][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  278.581523][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  278.581531][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  278.581566][    C1]  ? bpf_test_timer_continue+0x136/0x350
[  278.581579][    C1]  ? bpf_test_run+0x197/0x7b0
[  278.581586][    C1]  bpf_test_run+0x376/0x7b0
[  278.581598][    C1]  ? __pfx_bpf_test_run+0x10/0x10
[  278.581611][    C1]  ? slab_build_skb+0x273/0x3e0
[  278.581622][    C1]  ? convert___skb_to_skb+0x3d/0x590
[  278.581630][    C1]  bpf_prog_test_run_skb+0xb30/0x1560
[  278.581641][    C1]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  278.581649][    C1]  bpf_prog_test_run+0x2c7/0x340
[  278.581663][    C1]  __sys_bpf+0x581/0x870
[  278.581673][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  278.581685][    C1]  ? exc_page_fault+0x76/0xf0
[  278.581693][    C1]  ? rcu_is_watching+0x15/0xb0
[  278.581702][    C1]  __x64_sys_bpf+0x7c/0x90
[  278.581711][    C1]  do_syscall_64+0xfa/0x3b0
[  278.581720][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.581728][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.581737][    C1]  ? exc_page_fault+0x9f/0xf0
[  278.581744][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.581752][    C1] RIP: 0033:0x7fdbef58eba9
[  278.581761][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.581769][    C1] RSP: 002b:00007fdbf04f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  278.581779][    C1] RAX: ffffffffffffffda RBX: 00007fdbef7d5fa0 RCX: 00007fdbef58eba9
[  278.581785][    C1] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  278.581790][    C1] RBP: 00007fdbef611e19 R08: 0000000000000000 R09: 0000000000000000
[  278.581795][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.581799][    C1] R13: 00007fdbef7d6038 R14: 00007fdbef7d5fa0 R15: 00007fffae8cca38
[  278.581809][    C1]  </TASK>
[  278.581812][    C1] 
[  278.710046][    C1] Allocated by task 11004:
[  278.711439][    C1]  kasan_save_track+0x3e/0x80
[  278.712935][    C1]  __kasan_slab_alloc+0x6c/0x80
[  278.714477][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  278.716241][    C1]  xfrm_state_alloc+0x24/0x2f0
[  278.717764][    C1]  __find_acq_core+0x8a7/0x1c00
[  278.719310][    C1]  xfrm_find_acq+0x78/0xa0
[  278.720760][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  278.722341][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  278.723929][    C1]  netlink_rcv_skb+0x208/0x470
[  278.725502][    C1]  xfrm_netlink_rcv+0x79/0x90
[  278.726984][    C1]  netlink_unicast+0x82f/0x9e0
[  278.728508][    C1]  netlink_sendmsg+0x805/0xb30
[  278.730027][    C1]  __sock_sendmsg+0x21c/0x270
[  278.731506][    C1]  ____sys_sendmsg+0x505/0x830
[  278.733014][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  278.734585][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  278.736145][    C1]  do_syscall_64+0xfa/0x3b0
[  278.737573][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.739411][    C1] 
[  278.740178][    C1] Freed by task 5912:
[  278.741494][    C1]  kasan_save_track+0x3e/0x80
[  278.743018][    C1]  kasan_save_free_info+0x46/0x50
[  278.744628][    C1]  __kasan_slab_free+0x5b/0x80
[  278.746197][    C1]  kmem_cache_free+0x18f/0x400
[  278.747707][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  278.749578][    C1]  process_scheduled_works+0xae1/0x17b0
[  278.751661][    C1]  worker_thread+0x8a0/0xda0
[  278.753401][    C1]  kthread+0x711/0x8a0
[  278.754700][    C1]  ret_from_fork+0x439/0x7d0
[  278.756122][    C1]  ret_from_fork_asm+0x1a/0x30
[  278.757634][    C1] 
[  278.758378][    C1] The buggy address belongs to the object at ffff88811719f180
[  278.758378][    C1]  which belongs to the cache xfrm_state of size 928
[  278.762672][    C1] The buggy address is located 48 bytes inside of
[  278.762672][    C1]  freed 928-byte region [ffff88811719f180, ffff88811719f520)
[  278.766778][    C1] 
[  278.767544][    C1] The buggy address belongs to the physical page:
[  278.769503][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811719ed00 pfn:0x11719c
[  278.772624][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  278.775179][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  278.777523][    C1] page_type: f5(slab)
[  278.778799][    C1] raw: 057ff00000000040 ffff8881048fc280 dead000000000122 0000000000000000
[  278.781440][    C1] raw: ffff88811719ed00 00000000800e000c 00000000f5000000 0000000000000000
[  278.784092][    C1] head: 057ff00000000040 ffff8881048fc280 dead000000000122 0000000000000000
[  278.786750][    C1] head: ffff88811719ed00 00000000800e000c 00000000f5000000 0000000000000000
[  278.789379][    C1] head: 057ff00000000002 ffffea00045c6701 00000000ffffffff 00000000ffffffff
[  278.792227][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  278.795520][    C1] page dumped because: kasan: bad access detected
[  278.797821][    C1] page_owner tracks the page as allocated
[  278.799612][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6861, tgid 6860 (syz.1.368), ts 101033425153, free_ts 100981251623
[  278.805520][    C1]  post_alloc_hook+0x240/0x2a0
[  278.807152][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  278.808850][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  278.810642][    C1]  alloc_pages_mpol+0x232/0x4a0
[  278.812172][    C1]  allocate_slab+0x8a/0x370
[  278.813584][    C1]  ___slab_alloc+0xbeb/0x1420
[  278.815034][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  278.816721][    C1]  xfrm_state_alloc+0x24/0x2f0
[  278.818195][    C1]  xfrm_add_sa+0x17d1/0x4070
[  278.819627][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  278.821187][    C1]  netlink_rcv_skb+0x208/0x470
[  278.822694][    C1]  xfrm_netlink_rcv+0x79/0x90
[  278.824163][    C1]  netlink_unicast+0x82f/0x9e0
[  278.825627][    C1]  netlink_sendmsg+0x805/0xb30
[  278.827170][    C1]  __sock_sendmsg+0x21c/0x270
[  278.828784][    C1]  ____sys_sendmsg+0x505/0x830
[  278.830289][    C1] page last free pid 6845 tgid 6845 stack trace:
[  278.832232][    C1]  __free_frozen_pages+0xbc4/0xd30
[  278.833847][    C1]  free_large_kmalloc+0x13a/0x1f0
[  278.835403][    C1]  device_release+0x9c/0x1c0
[  278.836850][    C1]  kobject_put+0x22b/0x480
[  278.838230][    C1]  netdev_run_todo+0xd2e/0xea0
[  278.839732][    C1]  tun_chr_close+0x13c/0x1c0
[  278.841162][    C1]  __fput+0x44c/0xa70
[  278.842406][    C1]  task_work_run+0x1d4/0x260
[  278.843896][    C1]  exit_to_user_mode_loop+0xec/0x110
[  278.845539][    C1]  do_syscall_64+0x2bd/0x3b0
[  278.846969][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.848791][    C1] 
[  278.849547][    C1] Memory state around the buggy address:
[  278.851287][    C1]  ffff88811719f080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  278.853760][    C1]  ffff88811719f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  278.856199][    C1] >ffff88811719f180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  278.858917][    C1]                                      ^
[  278.860793][    C1]  ffff88811719f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  278.863249][    C1]  ffff88811719f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  278.865814][    C1] ==================================================================
[  278.868623][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  278.870892][    C1] CPU: 1 UID: 0 PID: 12058 Comm: syz.3.2577 Not tainted syzkaller #0 PREEMPT(full) 
[  278.873829][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.877371][    C1] Call Trace:
[  278.878722][    C1]  <IRQ>
[  278.879876][    C1]  dump_stack_lvl+0x99/0x250
[  278.881500][    C1]  ? __asan_memcpy+0x40/0x70
[  278.882979][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.884577][    C1]  ? __pfx__printk+0x10/0x10
[  278.886043][    C1]  vpanic+0x281/0x750
[  278.887331][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  278.888963][    C1]  ? __pfx_vpanic+0x10/0x10
[  278.890392][    C1]  ? irqentry_exit+0x74/0x90
[  278.891850][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.893476][    C1]  panic+0xb9/0xc0
[  278.894693][    C1]  ? __pfx_panic+0x10/0x10
[  278.896228][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  278.898546][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.900490][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  278.902172][    C1]  check_panic_on_warn+0x89/0xb0
[  278.903770][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  278.905417][    C1]  end_report+0x78/0x160
[  278.906802][    C1]  kasan_report+0x129/0x150
[  278.908237][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  278.909924][    C1]  __xfrm_state_delete+0x696/0xca0
[  278.911513][    C1]  xfrm_timer_handler+0x18f/0xa00
[  278.913156][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  278.914965][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  278.916913][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.918560][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  278.920379][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.922325][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  278.924028][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  278.925793][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  278.927447][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  278.929223][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  278.931043][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  278.932651][    C1]  handle_softirqs+0x286/0x870
[  278.934149][    C1]  ? do_softirq+0xec/0x180
[  278.935575][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  278.937280][    C1]  ? bpf_test_run+0x197/0x7b0
[  278.938769][    C1]  do_softirq+0xec/0x180
[  278.940099][    C1]  </IRQ>
[  278.941041][    C1]  <TASK>
[  278.941993][    C1]  ? __pfx_do_softirq+0x10/0x10
[  278.943540][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  278.945361][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  278.947094][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  278.948881][    C1]  ? bpf_test_timer_continue+0x136/0x350
[  278.950652][    C1]  ? bpf_test_run+0x197/0x7b0
[  278.952145][    C1]  bpf_test_run+0x376/0x7b0
[  278.953627][    C1]  ? __pfx_bpf_test_run+0x10/0x10
[  278.955655][    C1]  ? slab_build_skb+0x273/0x3e0
[  278.957637][    C1]  ? convert___skb_to_skb+0x3d/0x590
[  278.959774][    C1]  bpf_prog_test_run_skb+0xb30/0x1560
[  278.961938][    C1]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  278.964313][    C1]  bpf_prog_test_run+0x2c7/0x340
[  278.966313][    C1]  __sys_bpf+0x581/0x870
[  278.968036][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  278.969972][    C1]  ? exc_page_fault+0x76/0xf0
[  278.971875][    C1]  ? rcu_is_watching+0x15/0xb0
[  278.973840][    C1]  __x64_sys_bpf+0x7c/0x90
[  278.975656][    C1]  do_syscall_64+0xfa/0x3b0
[  278.977429][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.979044][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.980936][    C1]  ? exc_page_fault+0x9f/0xf0
[  278.982645][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.984658][    C1] RIP: 0033:0x7fdbef58eba9
[  278.986140][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.993336][    C1] RSP: 002b:00007fdbf04f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  278.995887][    C1] RAX: ffffffffffffffda RBX: 00007fdbef7d5fa0 RCX: 00007fdbef58eba9
[  278.998316][    C1] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  279.000741][    C1] RBP: 00007fdbef611e19 R08: 0000000000000000 R09: 0000000000000000
[  279.003153][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.005649][    C1] R13: 00007fdbef7d6038 R14: 00007fdbef7d5fa0 R15: 00007fffae8cca38
[  279.008069][    C1]  </TASK>
[  279.009623][    C1] Kernel Offset: disabled
[  279.011002][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:57:22  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ee1a00 RBX=0000000000000000 RCX=0000000000010000 RDX=ffffffff8de95100
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90000007bc0
R8 =ffff88804b039f83 R9 =1ffff110096073f0 R10=dffffc0000000000 R11=ffffed10096073f1
R12=ffffffff8de95100 R13=0000000000000000 R14=ffff88804b032790 R15=dffffc0000000000
RIP=ffffffff81bfc104 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa2b1447e79 CR3=0000000029c68000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdbef7a7498 00007fdbef7a7470 XMM03=00007fdbef7a74a8 00007fdbef7a74a0
XMM04=00007fdbf030d100 00007fdbef7a7460 XMM05=00007fdbef7a7478 00007fdbef7a74c0
XMM06=00007fdbef7a74b8 00007fdbef7a74b0 XMM07=00007fdbef7a74a8 00007fdbef7a74a0
XMM08=511d3c07394688e2 bf9f1ba9bbf20713 XMM09=0000000000000000 00007fdbef612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0450
R8 =ffff88801ffa0237 R9 =1ffff11003ff4046 R10=dffffc0000000000 R11=ffffffff854f9ec0
R12=dffffc0000000000 R13=ffffffff99b028c5 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9f3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdbf04f16c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdbf04cffc8 CR3=0000000029c68000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fcb70012e53
XMM06=0000000000000000 00007fcb70012e4d XMM07=0000000000000000 00007fcb70012e61
XMM08=0000000000000000 00007fcb70012ee7 XMM09=0000000000000000 00007fcb70012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
