last executing test programs:

37.966185186s ago: executing program 0 (id=2389):
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4010)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x92, 0x0, 0x0, 0x100000000005531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0xc5f9, 0x0, 0x2, 0xfffffffffffffffd, 0x401, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

37.621839191s ago: executing program 0 (id=2395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)

37.579708717s ago: executing program 0 (id=2397):
socket$kcm(0x10, 0x0, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160009000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee40900ce01da1a348da9354ee6bd1a60850c9900001fb791643a5ee4ce1b14d6d9", 0x79}, {&(0x7f0000000340)="02f1bbf28ef65ac8ad6087b93e10b1d959bed6d04f8b91d1c39d4a42e02aa0f7281eb7c261c5736709df6989f2abad41bc854a8818b5991a6acde02068ec310f0886841a2ce73c54b1fb89db69f4b265240ad17054088ab0bb68e28a3b5220", 0x5f}], 0x2}, 0x0)

37.54175058s ago: executing program 0 (id=2401):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x18, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0655865e0050200000000000277fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

37.325988899s ago: executing program 0 (id=2406):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1}, 0x240c0841)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x48044)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000042)

37.0671556s ago: executing program 0 (id=2407):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4010)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0)

37.011475491s ago: executing program 32 (id=2407):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4010)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0)

2.541703718s ago: executing program 2 (id=2968):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="18020000eaff000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$\x00'/12, @ANYRES32=0x0], 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000240)=r4, 0x4)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8094)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0xff09, 0x0)
sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100}, 0x0, 0x2, 0x0, 0x7, 0x0, 0x2, 0xffff, 0x0, 0x80, 0x0, 0x201}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890b, &(0x7f0000000100))
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000380)={r10, r9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

614.441256ms ago: executing program 3 (id=2979):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x25000000, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)

614.22518ms ago: executing program 1 (id=2980):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x20, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

614.058798ms ago: executing program 1 (id=2981):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="94", 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x43}}, @prinfo={0x18, 0x84, 0x5, {0x30}}], 0x38, 0x4048800}, 0x0)

578.222073ms ago: executing program 3 (id=2982):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x121c0)

577.833837ms ago: executing program 1 (id=2983):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2ed}, {&(0x7f0000002b40)="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", 0x1fd}], 0x2}, 0x8400)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x220, 0x70bd2c, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80010}, 0x8044)

577.530407ms ago: executing program 3 (id=2984):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x7}, 0x14327, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
syz_clone(0x8110e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

561.27385ms ago: executing program 2 (id=2985):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0x0, 0x4}, {0xf6, 0x0, 0x4}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804)

486.330215ms ago: executing program 1 (id=2986):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a800000001c0a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500090002"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)

485.964685ms ago: executing program 2 (id=2987):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x91000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x5f28, 0x7fffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4925c)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000200)=@file={0x1, './cgroup.net/devices.allow\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40855}, 0x40)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18)
perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12200)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r9=>0x0, <r10=>0x0})
close(r9)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000090000000300000009000000010000", @ANYRES32=0x0, @ANYBLOB="000000d003150000040000020c23000000000000060000000000000024277215258ffabf349b0775d6c8ebc90000000000008bcc1bee103ee10550688647f92b3550568dcd7bd00219bde14071759df0d501326365e9793b25fd637c169d5a36164b06529111729af9d31ce3f90bd21a200569e1e7006dd9103b0aa8"], 0x48)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r11=>0x0, <r12=>0x0})
close(r11)
setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, 0x0, 0x0)

366.162878ms ago: executing program 1 (id=2988):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0xff7b)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000004)
r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x1, 0x9, 0x6, 0x0, 0xc89, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp, 0x300a, 0x1, 0x2, 0x7, 0x5, 0x2, 0x2, 0x0, 0x7fff, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000613b00000000850000008b00000095254a4951ea78f02296"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000006c0)='{@,-\x00'}, 0x30)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000600)="bc7e", 0x2}], 0x1}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r8, 0x20, &(0x7f0000000380)={&(0x7f0000000440)=""/184, 0xb8, 0x0, &(0x7f0000000500)=""/89, 0x59}}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20)

246.621438ms ago: executing program 3 (id=2989):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48)
openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x83, &(0x7f0000000240)}, 0x10)

246.480819ms ago: executing program 3 (id=2990):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

196.347418ms ago: executing program 3 (id=2991):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0xff06, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={<r3=>r0})
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
close(r3)

134.842036ms ago: executing program 2 (id=2992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340000001e0a05010000000000000000070000070900020073797a21000000000900010073797a3000"], 0xb8}}, 0x40088)

85.911994ms ago: executing program 2 (id=2993):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

85.60188ms ago: executing program 2 (id=2994):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0)

0s ago: executing program 1 (id=2995):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1cc300005e0007", @ANYRESHEX=0x0], 0xfe33)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19631' (ED25519) to the list of known hosts.
syzkaller login: [   56.108785][ T5833] cgroup: Unknown subsys name 'net'
[   56.211997][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.216152][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.507203][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.683062][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.692812][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.695865][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.726299][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.729148][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.732080][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.732112][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.737729][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.738891][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.741755][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.743991][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.746149][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.749579][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.755108][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.759643][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.102881][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   62.152541][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   62.165379][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   62.291054][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.293788][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.296987][ T5850] bridge_slave_0: entered allmulticast mode
[   62.299854][ T5850] bridge_slave_0: entered promiscuous mode
[   62.367662][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.370704][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.373743][ T5850] bridge_slave_1: entered allmulticast mode
[   62.378021][ T5850] bridge_slave_1: entered promiscuous mode
[   62.382021][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.384982][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.388813][ T5853] bridge_slave_0: entered allmulticast mode
[   62.392713][ T5853] bridge_slave_0: entered promiscuous mode
[   62.397269][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.400157][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.402767][ T5853] bridge_slave_1: entered allmulticast mode
[   62.407233][ T5853] bridge_slave_1: entered promiscuous mode
[   62.410193][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.413139][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.416881][ T5848] bridge_slave_0: entered allmulticast mode
[   62.420522][ T5848] bridge_slave_0: entered promiscuous mode
[   62.458102][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.461118][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.464077][ T5848] bridge_slave_1: entered allmulticast mode
[   62.467968][ T5848] bridge_slave_1: entered promiscuous mode
[   62.473936][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.480506][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.548913][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.554733][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.561063][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.568251][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.573429][ T5850] team0: Port device team_slave_0 added
[   62.613357][ T5850] team0: Port device team_slave_1 added
[   62.656375][ T5848] team0: Port device team_slave_0 added
[   62.661491][ T5853] team0: Port device team_slave_0 added
[   62.665391][ T5848] team0: Port device team_slave_1 added
[   62.669372][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.672331][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.683845][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.691250][ T5853] team0: Port device team_slave_1 added
[   62.694373][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.697276][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.707820][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.783742][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.787148][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.797288][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.802388][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.805371][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.816422][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.841842][ T5850] hsr_slave_0: entered promiscuous mode
[   62.845159][ T5850] hsr_slave_1: entered promiscuous mode
[   62.849500][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.852482][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.863829][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.869122][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.871930][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.881383][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.924458][ T5853] hsr_slave_0: entered promiscuous mode
[   62.927086][ T5853] hsr_slave_1: entered promiscuous mode
[   62.929289][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   62.931129][ T5853] Cannot create hsr debugfs directory
[   62.983553][ T5848] hsr_slave_0: entered promiscuous mode
[   62.987376][ T5848] hsr_slave_1: entered promiscuous mode
[   62.990500][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   62.992895][ T5848] Cannot create hsr debugfs directory
[   63.282257][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.291085][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.297351][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.312062][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.371180][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.378445][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.385132][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.394055][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.448456][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.456014][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.464092][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.471966][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.582955][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.607646][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.613912][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.618517][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   63.627508][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.629786][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.640498][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.643271][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.659416][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   63.663099][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   63.684779][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.687606][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.694421][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.697301][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.703179][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.705893][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.713101][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.715882][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.798383][ T5859] Bluetooth: hci0: command tx timeout
[   63.800773][ T5859] Bluetooth: hci2: command tx timeout
[   63.802978][ T5859] Bluetooth: hci1: command tx timeout
[   63.804374][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.986098][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.008882][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.050643][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.076484][ T5850] veth0_vlan: entered promiscuous mode
[   64.092806][ T5850] veth1_vlan: entered promiscuous mode
[   64.117736][ T5853] veth0_vlan: entered promiscuous mode
[   64.131995][ T5853] veth1_vlan: entered promiscuous mode
[   64.142208][ T5848] veth0_vlan: entered promiscuous mode
[   64.158951][ T5850] veth0_macvtap: entered promiscuous mode
[   64.164509][ T5848] veth1_vlan: entered promiscuous mode
[   64.173639][ T5850] veth1_macvtap: entered promiscuous mode
[   64.199881][ T5853] veth0_macvtap: entered promiscuous mode
[   64.205434][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.223509][ T5853] veth1_macvtap: entered promiscuous mode
[   64.231494][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.259724][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.262881][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.268565][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.272326][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.286098][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.289891][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.304400][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.309851][ T5848] veth0_macvtap: entered promiscuous mode
[   64.314764][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.319243][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.322326][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.341481][ T5848] veth1_macvtap: entered promiscuous mode
[   64.392533][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.412608][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.430197][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.433661][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.441710][ T5696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.460058][ T5696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.463842][ T5696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.483247][ T5696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.490205][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.498309][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.507354][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.512580][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.543001][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.549970][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.555356][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.560515][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.578952][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.584535][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.589330][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.647280][ T5919] Zero length message leads to an empty skb
[   64.863869][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.868071][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   65.176584][    C1] hrtimer: interrupt took 40097 ns
[   65.440127][ T5852] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[   65.539225][ T5947] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.725079][ T5957] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.19'.
[   65.861247][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.867614][ T5859] Bluetooth: hci1: command tx timeout
[   65.869494][ T5859] Bluetooth: hci2: command tx timeout
[   65.871780][ T5852] Bluetooth: hci0: command tx timeout
[   66.332665][ T5975] delete_channel: no stack
[   66.345128][ T5975] delete_channel: no stack
[   66.448108][ T5975] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.26'.
[   66.755210][ T5981] netlink: 'syz.0.27': attribute type 3 has an invalid length.
[   66.758916][ T5981] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.27'.
[   66.810261][ T5983] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   67.134907][ T5993] netlink: 'syz.2.32': attribute type 4 has an invalid length.
[   67.140110][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'.
[   67.949206][ T5859] Bluetooth: hci1: command tx timeout
[   67.951245][ T5859] Bluetooth: hci2: command tx timeout
[   67.952901][ T5859] Bluetooth: hci0: command tx timeout
[   68.150100][ T6022] wg0 speed is unknown, defaulting to 1000
[   68.152178][ T6022] wg0 speed is unknown, defaulting to 1000
[   68.155584][ T6022] wg0 speed is unknown, defaulting to 1000
[   68.161351][ T6022] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.170925][ T6022] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   68.191578][ T6022] wg0 speed is unknown, defaulting to 1000
[   68.195693][ T6022] wg0 speed is unknown, defaulting to 1000
[   68.665711][ T6022] wg0 speed is unknown, defaulting to 1000
[   69.040440][ T6043] netlink: 'syz.1.52': attribute type 11 has an invalid length.
[   69.050667][ T6043] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.52'.
[   69.063838][ T6045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'.
[   69.071736][ T6045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'.
[   69.185920][ T6038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.291841][ T6054] netlink: 'syz.2.59': attribute type 2 has an invalid length.
[   69.294794][ T6054] netlink: 'syz.2.59': attribute type 5 has an invalid length.
[   69.319022][ T6054] netlink: 'syz.2.59': attribute type 6 has an invalid length.
[   69.321783][ T6054] netlink: 'syz.2.59': attribute type 7 has an invalid length.
[   69.324477][ T6054] netlink: 9 bytes leftover after parsing attributes in process `syz.2.59'.
[   69.346167][ T6054] netlink: 'syz.2.59': attribute type 2 has an invalid length.
[   69.351387][ T6054] netlink: 'syz.2.59': attribute type 5 has an invalid length.
[   69.354975][ T6054] netlink: 'syz.2.59': attribute type 6 has an invalid length.
[   70.028964][ T5852] Bluetooth: hci2: command tx timeout
[   70.029000][   T54] Bluetooth: hci1: command tx timeout
[   70.031374][ T5859] Bluetooth: hci0: command tx timeout
[   70.085373][ T6100] __nla_validate_parse: 4 callbacks suppressed
[   70.085382][ T6100] netlink: 56 bytes leftover after parsing attributes in process `syz.2.79'.
[   71.162665][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.165738][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.754198][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1167179367 wd_nsec: 1167162921
[   73.229541][ T5859] Bluetooth: hci1: command tx timeout
[   74.789137][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.121'.
[   74.794266][ T6197] validate_nla: 3 callbacks suppressed
[   74.794278][ T6197] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   74.844358][ T6192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.111'.
[   74.851361][ T6192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.111'.
[   74.861379][ T6197] netlink: 2 bytes leftover after parsing attributes in process `syz.1.121'.
[   74.864947][ T6197] bond0: entered promiscuous mode
[   74.866830][ T6197] bond_slave_0: entered promiscuous mode
[   74.868930][ T6197] bond_slave_1: entered promiscuous mode
[   74.871950][ T6197] bridge0: port 3(bond0) entered blocking state
[   74.874822][ T6197] bridge0: port 3(bond0) entered disabled state
[   74.877860][ T6197] bond0: entered allmulticast mode
[   74.880022][ T6197] bond_slave_0: entered allmulticast mode
[   74.882682][ T6197] bond_slave_1: entered allmulticast mode
[   74.888291][ T6197] bridge0: port 3(bond0) entered blocking state
[   74.891219][ T6197] bridge0: port 3(bond0) entered forwarding state
[   74.898835][ T6197] netlink: 'syz.1.121': attribute type 4 has an invalid length.
[   74.902149][ T6197] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.121'.
[   76.426378][ T6218] netlink: 'syz.0.128': attribute type 29 has an invalid length.
[   76.442205][ T6218] netlink: 'syz.0.128': attribute type 29 has an invalid length.
[   76.471765][ T6218] netlink: 'syz.0.128': attribute type 29 has an invalid length.
[   76.480627][ T6218] netlink: 'syz.0.128': attribute type 29 has an invalid length.
[   76.959348][ T6232] netlink: 'syz.1.134': attribute type 4 has an invalid length.
[   76.962437][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'.
[   77.035478][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.137'.
[   77.040927][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.137'.
[   77.394625][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[   77.495001][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'.
[   77.508500][ T6269] netlink: 'syz.1.151': attribute type 2 has an invalid length.
[   77.511880][ T6269] netlink: 'syz.1.151': attribute type 2 has an invalid length.
[   77.516034][ T6269] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[   77.521748][ T6269] netlink: 48 bytes leftover after parsing attributes in process `syz.1.151'.
[   77.617661][ T6274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.884678][ T6312] netlink: 144 bytes leftover after parsing attributes in process `syz.0.169'.
[   78.919260][ T6315] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.168'.
[   78.925711][ T6315] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   79.151758][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'.
[   79.202602][ T6338] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.179'.
[   79.305819][ T6339] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   81.394547][   T10] cfg80211: failed to load regulatory.db
[   81.674362][ T6411] validate_nla: 2 callbacks suppressed
[   81.674372][ T6411] netlink: 'syz.1.213': attribute type 1 has an invalid length.
[   82.001669][ T6425] __nla_validate_parse: 3 callbacks suppressed
[   82.001684][ T6425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.219'.
[   83.010100][ T6439] bridge0: port 3(veth0_vlan) entered blocking state
[   83.014345][ T6439] bridge0: port 3(veth0_vlan) entered disabled state
[   83.018734][ T6439] veth0_vlan: entered allmulticast mode
[   83.023599][ T6439] veth0_vlan: left allmulticast mode
[   83.153815][ T6448] macvtap0: refused to change device tx_queue_len
[   83.276131][ T6458] netlink: 'syz.0.235': attribute type 4 has an invalid length.
[   84.133809][ T6500] netlink: 4172 bytes leftover after parsing attributes in process `syz.2.251'.
[   84.464285][ T6513] sit0: entered promiscuous mode
[   86.120568][ T6535] lo: entered allmulticast mode
[   86.144907][ T6539] lo: entered promiscuous mode
[   86.147276][ T6539] lo: left allmulticast mode
[   86.168138][ T6537] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.175053][ T6537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   86.425250][ T6554] netlink: 'syz.1.275': attribute type 3 has an invalid length.
[   86.432153][ T6554] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.275'.
[   86.518013][ T6561] netlink: 144 bytes leftover after parsing attributes in process `syz.2.278'.
[   86.868039][ T6575] netlink: 92 bytes leftover after parsing attributes in process `syz.2.285'.
[   86.871588][ T6575] netlink: 92 bytes leftover after parsing attributes in process `syz.2.285'.
[   87.554511][ T6583] : entered promiscuous mode
[   87.676289][ T5696] syzkaller0: tun_net_xmit 76
[   87.678371][ T6588] syzkaller0: create flow: hash 3211926824 index 1
[   87.688579][ T5696] syzkaller0: tun_net_xmit 48
[   87.697202][ T5315] syzkaller0: tun_net_xmit 76
[   87.756940][ T6587] syzkaller0: delete flow: hash 3211926824 index 1
[   88.087293][ T6597] netlink: 156 bytes leftover after parsing attributes in process `syz.2.293'.
[   88.544258][ T6608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.299'.
[   88.551940][ T6608] unsupported nlmsg_type 40
[   88.807802][ T6622] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.306'.
[   89.046797][ T6629] netlink: 100 bytes leftover after parsing attributes in process `syz.2.309'.
[   89.150423][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.314'.
[   89.205221][ T6643] delete_channel: no stack
[   89.212250][ T6643] delete_channel: no stack
[   89.343009][ T6653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'.
[   89.848955][ T6685] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   90.275575][ T6716] netlink: 'syz.0.334': attribute type 21 has an invalid length.
[   90.281865][ T6716] netlink: 156 bytes leftover after parsing attributes in process `syz.0.334'.
[   90.284779][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[   90.309949][ T6718] netlink: 'syz.1.335': attribute type 7 has an invalid length.
[   92.006092][ T5859] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[   92.741970][ T6833] syz.0.387 uses obsolete (PF_INET,SOCK_PACKET)
[   92.788609][ T6836] netlink: 'syz.2.388': attribute type 21 has an invalid length.
[   93.538079][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.393'.
[   93.541242][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'.
[   93.829762][ T6865] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   93.833811][ T6865] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.400'.
[   94.685912][ T6869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.401'.
[   95.678288][ T6903] netlink: 'syz.0.417': attribute type 21 has an invalid length.
[   95.681699][ T6903] netlink: 160 bytes leftover after parsing attributes in process `syz.0.417'.
[   95.754419][ T6909] syz.2.420: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.763025][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.2.420 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[   95.763043][ T6909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.763051][ T6909] Call Trace:
[   95.763059][ T6909]  <TASK>
[   95.763067][ T6909]  dump_stack_lvl+0x189/0x250
[   95.763105][ T6909]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.763136][ T6909]  ? __pfx__printk+0x10/0x10
[   95.763164][ T6909]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.763183][ T6909]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.763209][ T6909]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   95.763238][ T6909]  warn_alloc+0x214/0x310
[   95.763268][ T6909]  ? stack_depot_save_flags+0x40/0x860
[   95.763297][ T6909]  ? __pfx_warn_alloc+0x10/0x10
[   95.763330][ T6909]  ? kasan_save_track+0x4f/0x80
[   95.763353][ T6909]  ? xskq_create+0x56/0x170
[   95.763368][ T6909]  ? xsk_init_queue+0xb0/0x110
[   95.763381][ T6909]  ? xsk_setsockopt+0x57b/0x8d0
[   95.763394][ T6909]  ? do_sock_setsockopt+0x17c/0x1b0
[   95.763412][ T6909]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   95.763422][ T6909]  ? do_syscall_64+0xfa/0x3b0
[   95.763438][ T6909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.763481][ T6909]  __vmalloc_node_range_noprof+0x125/0x12f0
[   95.763603][ T6909]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   95.763660][ T6909]  ? xskq_create+0x56/0x170
[   95.763693][ T6909]  ? __kasan_kmalloc+0x93/0xb0
[   95.763729][ T6909]  vmalloc_user_noprof+0xad/0xf0
[   95.763753][ T6909]  ? xskq_create+0xbf/0x170
[   95.763779][ T6909]  xskq_create+0xbf/0x170
[   95.763812][ T6909]  xsk_init_queue+0xb0/0x110
[   95.763843][ T6909]  xsk_setsockopt+0x57b/0x8d0
[   95.763874][ T6909]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.763894][ T6909]  ? __pfx_aa_sk_perm+0x10/0x10
[   95.763930][ T6909]  ? __fget_files+0x2a/0x420
[   95.763940][ T6909]  ? aa_sock_opt_perm+0xff/0x1b0
[   95.763968][ T6909]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   95.763981][ T6909]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.764008][ T6909]  do_sock_setsockopt+0x17c/0x1b0
[   95.764049][ T6909]  __x64_sys_setsockopt+0x13f/0x1b0
[   95.764085][ T6909]  do_syscall_64+0xfa/0x3b0
[   95.764103][ T6909]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.764123][ T6909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.764138][ T6909]  ? exc_page_fault+0x9f/0xf0
[   95.764168][ T6909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.764181][ T6909] RIP: 0033:0x7fcc4e58ebe9
[   95.764197][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.764207][ T6909] RSP: 002b:00007fcc4f350038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.764221][ T6909] RAX: ffffffffffffffda RBX: 00007fcc4e7b5fa0 RCX: 00007fcc4e58ebe9
[   95.764230][ T6909] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[   95.764238][ T6909] RBP: 00007fcc4e611e19 R08: 0000000000000004 R09: 0000000000000000
[   95.764245][ T6909] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   95.764252][ T6909] R13: 00007fcc4e7b6038 R14: 00007fcc4e7b5fa0 R15: 00007ffd326850c8
[   95.764317][ T6909]  </TASK>
[   95.764323][ T6909] Mem-Info:
[   95.905612][ T6909] active_anon:5338 inactive_anon:0 isolated_anon:0
[   95.905612][ T6909]  active_file:1319 inactive_file:38221 isolated_file:0
[   95.905612][ T6909]  unevictable:1768 dirty:258 writeback:0
[   95.905612][ T6909]  slab_reclaimable:9408 slab_unreclaimable:52035
[   95.905612][ T6909]  mapped:18102 shmem:2433 pagetables:985
[   95.905612][ T6909]  sec_pagetables:0 bounce:0
[   95.905612][ T6909]  kernel_misc_reclaimable:0
[   95.905612][ T6909]  free:297324 free_pcp:22161 free_cma:0
[   95.927616][ T6909] Node 0 active_anon:12912kB inactive_anon:0kB active_file:2956kB inactive_file:147748kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46044kB dirty:444kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5584kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.941194][ T6909] Node 1 active_anon:8440kB inactive_anon:0kB active_file:2320kB inactive_file:5136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26364kB dirty:588kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5908kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.953540][ T6909] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   95.962870][ T6909] lowmem_reserve[]: 0 811 811 811 811
[   95.965339][ T6909] Node 0 DMA32 free:260196kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12912kB inactive_anon:0kB active_file:2956kB inactive_file:147748kB unevictable:3536kB writepending:444kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:59228kB local_pcp:23824kB free_cma:0kB
[   95.980530][ T6909] lowmem_reserve[]: 0 0 0 0 0
[   95.986743][ T6909] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   96.018167][ T6909] lowmem_reserve[]: 0 0 854 854 854
[   96.020282][ T6909] Node 1 Normal free:455124kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8304kB inactive_anon:0kB active_file:2320kB inactive_file:5136kB unevictable:3536kB writepending:588kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29736kB local_pcp:10544kB free_cma:0kB
[   96.033327][ T6909] lowmem_reserve[]: 0 0 0 0 0
[   96.035457][ T6909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   96.040224][ T6909] Node 0 DMA32: 546*4kB (UM) 159*8kB (UME) 174*16kB (UME) 210*32kB (UME) 144*64kB (UME) 35*128kB (UME) 23*256kB (UM) 29*512kB (UME) 28*1024kB (UM) 12*2048kB (UM) 39*4096kB (UM) = 260384kB
[   96.047244][ T6909] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   96.052930][ T6909] Node 1 Normal: 433*4kB (UME) 656*8kB (UME) 455*16kB (UME) 199*32kB (UME) 110*64kB (UM) 45*128kB (UME) 9*256kB (UM) 9*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 96*4096kB (M) = 455060kB
[   96.065365][ T6909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.069690][ T6909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.073417][ T6909] 41973 total pagecache pages
[   96.075134][ T6909] 0 pages in swap cache
[   96.076477][ T6909] Free swap  = 124996kB
[   96.078172][ T6909] Total swap = 124996kB
[   96.080087][ T6909] 786301 pages RAM
[   96.081404][ T6909] 0 pages HighMem/MovableOnly
[   96.083089][ T6909] 241329 pages reserved
[   96.084455][ T6909] 0 pages cma reserved
[   96.399657][ T6937] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.433'.
[   96.404458][ T6937] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   96.684485][ T6949] netlink: 10 bytes leftover after parsing attributes in process `syz.0.438'.
[   96.837648][ T6960] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.439'.
[   97.051994][ T6970] netlink: 'syz.1.448': attribute type 4 has an invalid length.
[   97.327051][ T6979] bpf: Bad value for 'mode'
[   97.502516][ T6983] netlink: 56 bytes leftover after parsing attributes in process `syz.0.454'.
[   97.860477][ T6998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.879498][ T7000] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[   97.884013][ T7000] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.462'.
[   97.899006][ T7002] netlink: 'syz.1.463': attribute type 5 has an invalid length.
[   98.646756][ T7017] netlink: 'syz.1.469': attribute type 11 has an invalid length.
[   98.649946][ T7017] __nla_validate_parse: 4 callbacks suppressed
[   98.649957][ T7017] netlink: 168 bytes leftover after parsing attributes in process `syz.1.469'.
[   98.705422][ T7019] netlink: 26 bytes leftover after parsing attributes in process `syz.2.470'.
[   98.706191][ T7021] netlink: 'syz.1.471': attribute type 29 has an invalid length.
[   98.714104][ T7021] netlink: 'syz.1.471': attribute type 29 has an invalid length.
[   98.718445][ T7021] netlink: 'syz.1.471': attribute type 29 has an invalid length.
[   99.020641][ T7034] netlink: 'syz.1.477': attribute type 21 has an invalid length.
[   99.023180][ T7034] netlink: 168 bytes leftover after parsing attributes in process `syz.1.477'.
[   99.126774][ T7045] Driver unsupported XDP return value 0 on prog  (id 171) dev N/A, expect packet loss!
[   99.200893][ T7051] netlink: 'syz.1.484': attribute type 21 has an invalid length.
[   99.203917][ T7051] netlink: 128 bytes leftover after parsing attributes in process `syz.1.484'.
[   99.207918][ T7051] netlink: 3 bytes leftover after parsing attributes in process `syz.1.484'.
[   99.308607][ T5859] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[   99.931753][ T7097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.776121][ T7179] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.538'.
[  102.019863][ T7190] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.545'.
[  102.055050][ T7193] netlink: 56 bytes leftover after parsing attributes in process `syz.0.544'.
[  102.235144][ T7206] validate_nla: 1 callbacks suppressed
[  102.235159][ T7206] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  102.345047][ T7215] netlink: 'syz.0.553': attribute type 29 has an invalid length.
[  102.351730][ T7215] netlink: 'syz.0.553': attribute type 29 has an invalid length.
[  103.015937][ T7258] netlink: 'syz.0.575': attribute type 29 has an invalid length.
[  103.021372][ T7258] netlink: 'syz.0.575': attribute type 29 has an invalid length.
[  103.029850][ T7258] netlink: 'syz.0.575': attribute type 29 has an invalid length.
[  103.069299][ T7258] netlink: 'syz.0.575': attribute type 29 has an invalid length.
[  104.258424][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.585'.
[  104.331262][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'.
[  104.642264][ T7316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.599'.
[  105.064846][ T7332] netlink: 'syz.1.607': attribute type 10 has an invalid length.
[  105.068392][ T7332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'.
[  105.072238][ T7332] dummy0: entered promiscuous mode
[  105.075073][ T7332] dummy0: entered allmulticast mode
[  105.081742][ T7332] bridge0: port 4(dummy0) entered blocking state
[  105.084623][ T7332] bridge0: port 4(dummy0) entered disabled state
[  105.090217][ T7332] bridge0: port 4(dummy0) entered blocking state
[  105.093057][ T7332] bridge0: port 4(dummy0) entered forwarding state
[  105.195538][ T7339] netlink: 'syz.0.608': attribute type 40 has an invalid length.
[  105.293822][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.311071][ T7338] sit0: left promiscuous mode
[  105.313178][ T7338] sit0: entered allmulticast mode
[  105.340474][ T7343] sit0: entered promiscuous mode
[  106.068660][ T7350] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.612'.
[  106.618853][ T7401] netlink: 'syz.0.636': attribute type 2 has an invalid length.
[  106.690388][ T7409] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.640'.
[  106.694006][ T7409] nbd: couldn't find device at index 16
[  106.792652][ T7423] netlink: 64 bytes leftover after parsing attributes in process `syz.2.647'.
[  106.935138][ T7433] netlink: 55 bytes leftover after parsing attributes in process `syz.0.652'.
[  108.060959][ T7455] validate_nla: 3 callbacks suppressed
[  108.061115][ T7455] netlink: 'syz.2.660': attribute type 10 has an invalid length.
[  108.281140][ T7455] team0: Device ipvlan1 failed to register rx_handler
[  108.396543][ T7465] C: renamed from team_slave_0 (while UP)
[  108.401659][ T7465] netlink: 'syz.0.664': attribute type 3 has an invalid length.
[  108.405124][ T7465] netlink: 152 bytes leftover after parsing attributes in process `syz.0.664'.
[  108.412701][ T7465] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  108.534051][ T7473] netlink: 'syz.0.668': attribute type 31 has an invalid length.
[  108.615554][ T7481] netlink: 'syz.0.672': attribute type 2 has an invalid length.
[  108.872634][ T7497] netlink: 324 bytes leftover after parsing attributes in process `syz.1.680'.
[  108.882329][ T7495] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  108.885659][ T7495] netlink: 'syz.0.679': attribute type 2 has an invalid length.
[  108.889288][ T7495] netlink: 'syz.0.679': attribute type 4 has an invalid length.
[  108.892610][ T7495] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  108.896114][ T7495] netlink: 'syz.0.679': attribute type 2 has an invalid length.
[  108.899595][ T7495] netlink: 'syz.0.679': attribute type 1 has an invalid length.
[  109.742824][ T7543] __nla_validate_parse: 2 callbacks suppressed
[  109.742833][ T7543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.701'.
[  110.263347][ T7543] wg0 speed is unknown, defaulting to 1000
[  110.815803][ T7581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.717'.
[  110.828877][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.867589][ T7581] bridge_slave_0 (unregistering): left allmulticast mode
[  110.872638][ T7581] bridge_slave_0 (unregistering): left promiscuous mode
[  110.875674][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.991209][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'.
[  113.039095][ T7657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.747'.
[  113.042899][ T7653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.747'.
[  113.048389][ T7657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.747'.
[  113.086369][ T7659] batman_adv: batadv0: Adding interface: netdevsim0
[  113.089210][ T7659] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.100001][ T7659] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  113.209273][ T7666] netlink: 211 bytes leftover after parsing attributes in process `syz.1.752'.
[  113.741533][ T7683] validate_nla: 7 callbacks suppressed
[  113.741542][ T7683] netlink: 'syz.1.759': attribute type 21 has an invalid length.
[  113.933633][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'.
[  114.038009][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'.
[  114.301735][ T7711] netlink: 'syz.0.772': attribute type 11 has an invalid length.
[  114.524330][ T5859] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  114.722791][ T7740] netlink: 'syz.0.786': attribute type 3 has an invalid length.
[  114.734786][ T7740] netlink: 'syz.0.786': attribute type 1 has an invalid length.
[  114.739608][ T7740] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.786'.
[  115.139361][ T7762] netlink: 14 bytes leftover after parsing attributes in process `syz.1.794'.
[  115.194419][ T7764] netlink: 'syz.0.795': attribute type 6 has an invalid length.
[  115.199656][ T7764] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.795'.
[  115.994050][ T7813] lo speed is unknown, defaulting to 1000
[  116.001020][ T7813] lo speed is unknown, defaulting to 1000
[  116.014619][ T7813] lo speed is unknown, defaulting to 1000
[  116.047864][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'.
[  116.202254][ T7813] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  116.438548][ T7813] lo speed is unknown, defaulting to 1000
[  116.461124][ T7813] lo speed is unknown, defaulting to 1000
[  116.483331][ T7813] lo speed is unknown, defaulting to 1000
[  116.542282][ T7827] netlink: 'syz.1.817': attribute type 2 has an invalid length.
[  116.639393][ T7827] : port 1(vlan0) entered blocking state
[  116.644346][ T7827] : port 1(vlan0) entered disabled state
[  116.650760][ T7827] vlan0: entered allmulticast mode
[  116.655059][ T7827] veth0_vlan: entered allmulticast mode
[  116.690519][ T7827] vlan0: entered promiscuous mode
[  116.696518][ T7833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.818'.
[  116.744677][ T7827] : port 1(vlan0) entered blocking state
[  116.748622][ T7827] : port 1(vlan0) entered forwarding state
[  116.908876][ T7839] syzkaller0: refused to change device tx_queue_len
[  116.948457][ T7843] netlink: 104 bytes leftover after parsing attributes in process `syz.1.823'.
[  118.064887][ T7865] netlink: 'syz.1.831': attribute type 10 has an invalid length.
[  118.069399][ T7865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.831'.
[  118.074328][ T7865] bridge0: port 1(veth0_vlan) entered blocking state
[  118.078050][ T7865] bridge0: port 1(veth0_vlan) entered disabled state
[  118.089180][ T7865] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  118.096831][ T7861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.830'.
[  118.271517][ T7884] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.840'.
[  118.319338][ T7891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.843'.
[  118.322201][ T7891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.843'.
[  119.317448][ T5859] Bluetooth: hci1: SCO packet too small
[  122.610992][ T7936] __nla_validate_parse: 3 callbacks suppressed
[  122.611107][ T7936] netlink: 17 bytes leftover after parsing attributes in process `syz.0.864'.
[  122.621368][ T7936] netlink: zone id is out of range
[  122.623511][ T7936] netlink: zone id is out of range
[  122.632727][ T7936] netlink: zone id is out of range
[  122.634927][ T7936] netlink: zone id is out of range
[  122.639302][ T7936] netlink: zone id is out of range
[  122.641551][ T7936] netlink: zone id is out of range
[  122.643875][ T7936] netlink: zone id is out of range
[  122.646088][ T7936] netlink: zone id is out of range
[  122.651106][ T7936] netlink: zone id is out of range
[  122.767418][ T7943] netlink: 'syz.2.867': attribute type 3 has an invalid length.
[  123.406024][ T7956] netlink: 'syz.0.872': attribute type 10 has an invalid length.
[  123.804602][ T7956] bond0: (slave bond_slave_0): Releasing backup interface
[  123.933905][ T7980] netlink: 'syz.1.881': attribute type 29 has an invalid length.
[  123.939217][ T7980] netlink: 'syz.1.881': attribute type 29 has an invalid length.
[  123.942506][ T7980] netlink: 500 bytes leftover after parsing attributes in process `syz.1.881'.
[  123.945741][ T7980] unsupported nla_type 58
[  123.991325][ T7982] netlink: 'syz.0.883': attribute type 13 has an invalid length.
[  123.994564][ T7982] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.883'.
[  124.064059][ T7986] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.885'.
[  124.261211][ T7998] tun0: tun_chr_ioctl cmd 1074025675
[  124.296065][ T7998] tun0: persist enabled
[  124.309185][ T7998] tun0: tun_chr_ioctl cmd 1074025675
[  124.312451][ T7998] tun0: persist disabled
[  124.578232][ T8011] netlink: 'syz.0.896': attribute type 11 has an invalid length.
[  124.583466][ T8011] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.896'.
[  124.591612][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.644417][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'.
[  124.760251][ T8025] net_ratelimit: 77 callbacks suppressed
[  124.760260][ T8025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.142164][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.149280][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.160075][ T8054] bridge0: entered allmulticast mode
[  125.178881][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.181433][ T8054] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.184833][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.187618][ T8054] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.196389][ T8054] bridge0: entered promiscuous mode
[  125.642166][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.0.929'.
[  127.155561][ T8125] netlink: 'syz.0.944': attribute type 10 has an invalid length.
[  127.161708][ T8125] netlink: 55 bytes leftover after parsing attributes in process `syz.0.944'.
[  127.187972][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.947'.
[  127.208574][ T8130] delete_channel: no stack
[  128.119901][ T8147] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  128.122496][ T8147] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  128.391483][ T8168] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  128.395079][ T8168] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  128.398763][ T8168] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  128.402529][ T8168] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  128.924474][ T8203] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.980'.
[  129.701312][ T8212] delete_channel: no stack
[  129.805735][ T8215] netlink: 'syz.0.985': attribute type 29 has an invalid length.
[  129.811245][ T8215] netlink: 'syz.0.985': attribute type 29 has an invalid length.
[  129.815427][ T8215] netlink: 'syz.0.985': attribute type 29 has an invalid length.
[  129.823097][ T8215] netlink: 'syz.0.985': attribute type 29 has an invalid length.
[  129.878401][ T8219] netlink: 'syz.0.986': attribute type 10 has an invalid length.
[  129.883215][ T8219] geneve0: entered promiscuous mode
[  129.900227][ T8219] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  130.004911][ T8227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.991'.
[  130.065823][ T8232] netlink: 'syz.2.993': attribute type 21 has an invalid length.
[  130.074059][ T8232] netlink: 132 bytes leftover after parsing attributes in process `syz.2.993'.
[  130.124053][ T8236] netlink: 272 bytes leftover after parsing attributes in process `syz.1.996'.
[  130.253686][ T8247] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1000'.
[  130.261200][ T8247] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1000'.
[  130.345621][ T8257] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1005'.
[  130.372234][ T8261] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.1007'.
[  130.377980][ T8261] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  130.382998][ T8261] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  130.390111][ T8259] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1006'.
[  131.415646][ T8288] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  131.544748][ T8298] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1025'.
[  131.560328][ T8298] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  132.601809][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.604482][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.437562][ T8435] validate_nla: 5 callbacks suppressed
[  133.437576][ T8435] netlink: 'syz.0.1082': attribute type 10 has an invalid length.
[  133.482693][ T8435] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  133.540376][ T8443] veth1_macvtap: left promiscuous mode
[  133.542752][ T8443] macsec0: entered allmulticast mode
[  133.552936][ T8443] veth1_macvtap: entered promiscuous mode
[  133.555418][ T8443] veth1_macvtap: entered allmulticast mode
[  133.559343][ T8443] macsec0: entered promiscuous mode
[  133.810036][ T8455] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  133.818449][ T8455] netlink: 'syz.2.1091': attribute type 3 has an invalid length.
[  133.914870][ T8463] netlink: 'syz.2.1094': attribute type 21 has an invalid length.
[  134.251725][ T8467] __nla_validate_parse: 7 callbacks suppressed
[  134.251817][ T8467] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1095'.
[  134.358106][ T8479] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1101'.
[  134.981851][ T8520] netlink: 'syz.0.1121': attribute type 33 has an invalid length.
[  134.985288][ T8520] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1121'.
[  135.135379][ T8532] netlink: 'syz.2.1126': attribute type 10 has an invalid length.
[  135.163581][ T8532] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  136.084404][ T8574] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1147'.
[  136.259012][ T8589] netlink: 'syz.1.1155': attribute type 29 has an invalid length.
[  136.386163][ T8602] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[  137.255708][ T8636] wg0 speed is unknown, defaulting to 1000
[  137.260246][ T8636] lo speed is unknown, defaulting to 1000
[  137.351108][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  137.354106][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  137.357758][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'.
[  138.319244][ T8673] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1189'.
[  138.355845][ T8677] netlink: 'syz.0.1192': attribute type 40 has an invalid length.
[  138.584546][ T8686] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.1195'.
[  138.990905][ T8704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1202'.
[  139.818526][ T8708] tap0: tun_chr_ioctl cmd 2147767521
[  140.101228][ T8714] netlink: 'syz.1.1207': attribute type 29 has an invalid length.
[  140.127125][ T8714] netlink: 'syz.1.1207': attribute type 29 has an invalid length.
[  141.093442][ T5859] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5
[  141.383237][ T8761] raw_sendmsg: syz.2.1229 forgot to set AF_INET. Fix it!
[  141.542407][ T8771] syzkaller0: entered promiscuous mode
[  141.544856][ T8771] syzkaller0: entered allmulticast mode
[  143.131152][ T8795] bridge_slave_1: left allmulticast mode
[  143.133611][ T8795] bridge_slave_1: left promiscuous mode
[  143.136085][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.141730][ T8795] bridge_slave_0: left promiscuous mode
[  143.144294][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.195285][ T8798] netlink: 'syz.0.1244': attribute type 41 has an invalid length.
[  143.466364][ T8816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1253'.
[  143.524518][ T8818] netlink: 'syz.0.1254': attribute type 46 has an invalid length.
[  143.588270][ T8820] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1255'.
[  143.694576][ T8823] netlink: 'syz.0.1256': attribute type 16 has an invalid length.
[  143.698145][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1256'.
[  144.375890][ T8847] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1268'.
[  144.616345][ T8865] : port 1(vlan0) entered disabled state
[  145.106894][ T8865] : port 1(vlan0) entered blocking state
[  145.111121][ T8865] : port 1(vlan0) entered forwarding state
[  145.937986][ T8902] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1291'.
[  146.778880][ T8962] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1317'.
[  147.712929][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  147.820476][ T8989] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.824656][ T8989] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.878437][ T8993] netlink: 'syz.2.1330': attribute type 21 has an invalid length.
[  147.881878][ T8993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1330'.
[  147.911100][ T8993] netlink: 'syz.2.1330': attribute type 5 has an invalid length.
[  148.669203][ T9007] netdevsim0: mtu greater than device maximum
[  148.706039][ T9009] netlink: 'syz.1.1338': attribute type 12 has an invalid length.
[  148.709582][ T9009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1338'.
[  148.862428][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'.
[  148.886439][ T9021] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  148.910871][ T9017] netlink: 'syz.2.1342': attribute type 1 has an invalid length.
[  149.111222][ T9032] netlink: 'syz.1.1348': attribute type 10 has an invalid length.
[  149.115108][ T9032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1348'.
[  149.121257][ T9032] team0: entered promiscuous mode
[  149.123641][ T9032] team_slave_0: entered promiscuous mode
[  149.128093][ T9032] team_slave_1: entered promiscuous mode
[  149.132277][ T9032] team0: entered allmulticast mode
[  149.134699][ T9032] team_slave_0: entered allmulticast mode
[  149.147591][ T9032] team_slave_1: entered allmulticast mode
[  149.162708][ T9040] netlink: 'syz.0.1353': attribute type 3 has an invalid length.
[  149.167802][ T9032] bridge0: port 1(team0) entered blocking state
[  149.172036][ T9032] bridge0: port 1(team0) entered disabled state
[  149.209199][ T9032] bridge0: port 1(team0) entered blocking state
[  149.212788][ T9032] bridge0: port 1(team0) entered forwarding state
[  150.405992][ T9064] netlink: 'syz.0.1362': attribute type 21 has an invalid length.
[  150.880579][ T9096] syzkaller0: entered promiscuous mode
[  150.882758][ T9096] syzkaller0: entered allmulticast mode
[  151.060555][ T9104] netlink: 'syz.2.1380': attribute type 10 has an invalid length.
[  151.063617][ T9104] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1380'.
[  151.070229][ T9104] bond0: (slave dummy0): Releasing backup interface
[  151.075008][ T9104] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  151.360185][ T9114] syzkaller0: entered promiscuous mode
[  151.362535][ T9114] syzkaller0: entered allmulticast mode
[  151.405419][ T9120] netlink: 'syz.2.1388': attribute type 21 has an invalid length.
[  152.343795][ T9132] netlink: 'syz.1.1393': attribute type 21 has an invalid length.
[  152.381477][ T9137] netlink: 802 bytes leftover after parsing attributes in process `syz.0.1395'.
[  154.010239][ T9208] IPv6: NLM_F_CREATE should be specified when creating new route
[  154.120496][ T9213] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1430'.
[  155.494037][ T9221] netlink: 'syz.0.1434': attribute type 2 has an invalid length.
[  155.583982][ T9228] netlink: 'syz.0.1437': attribute type 10 has an invalid length.
[  155.863731][ T9228] bond0: (slave netdevsim0): Releasing backup interface
[  155.919694][ T9228] bridge0: port 3(netdevsim0) entered blocking state
[  155.930992][ T9228] bridge0: port 3(netdevsim0) entered disabled state
[  155.940365][ T9228] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  155.955314][ T9228] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  157.365636][ T9249] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1444'.
[  157.452885][ T9253] netlink: 'syz.2.1445': attribute type 4 has an invalid length.
[  157.455860][ T9253] netlink: 'syz.2.1445': attribute type 1 has an invalid length.
[  157.459746][ T9253] netlink: 'syz.2.1445': attribute type 2 has an invalid length.
[  157.462390][ T9253] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.1445'.
[  157.515614][ T9248] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  157.708453][ T9268] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1449'.
[  157.824803][ T9273] netlink: 'syz.2.1454': attribute type 3 has an invalid length.
[  157.828433][ T9273] netlink: 'syz.2.1454': attribute type 1 has an invalid length.
[  157.831662][ T9273] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1454'.
[  159.896770][   T33] audit: type=1107 audit(1755512280.964:2): pid=9319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  160.444262][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1485'.
[  160.448844][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1485'.
[  160.452160][ T9356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1485'.
[  161.467942][ T9359] netlink: 'syz.1.1489': attribute type 2 has an invalid length.
[  161.470545][ T9359] netlink: 'syz.1.1489': attribute type 8 has an invalid length.
[  161.473206][ T9359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1489'.
[  161.553666][ T9365] netlink: 'syz.0.1492': attribute type 11 has an invalid length.
[  161.597802][ T9365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1492'.
[  162.149201][ T9391] netlink: 'syz.0.1503': attribute type 9 has an invalid length.
[  162.152492][ T9391] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1503'.
[  162.389662][ T9412] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1514'.
[  162.615554][ T9422] netlink: 'syz.2.1517': attribute type 39 has an invalid length.
[  163.580263][ T9448] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1528'.
[  163.623865][ T9450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.627320][ T9450] IPv6: NLM_F_CREATE should be set when creating new route
[  163.630549][ T9450] IPv6: NLM_F_CREATE should be set when creating new route
[  163.633622][ T9450] IPv6: NLM_F_CREATE should be set when creating new route
[  163.755055][ T9460] netlink: 'syz.1.1534': attribute type 1 has an invalid length.
[  163.757563][ T9460] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1534'.
[  163.833835][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1536'.
[  164.017296][ T9478] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  164.020057][ T9478] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  164.349102][ T9473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.573267][ T5859] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  165.573485][ T5859] Bluetooth: hci0: connection err: -111
[  165.583594][ T9521] @: renamed from bond_slave_0 (while UP)
[  166.042316][ T9545] __nla_validate_parse: 6 callbacks suppressed
[  166.042326][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  166.048229][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  166.321100][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1566'.
[  166.364921][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1568'.
[  166.401290][ T9558] netlink: 'syz.2.1571': attribute type 15 has an invalid length.
[  166.404113][ T9558] netlink: 'syz.2.1571': attribute type 7 has an invalid length.
[  166.409211][ T9558] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1571'.
[  166.480599][ T5859] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7
[  166.559092][ T9568] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  166.609193][ T9568] : port 1(vlan0) entered disabled state
[  166.629795][ T9568] : port 1(vlan0) entered blocking state
[  166.632307][ T9568] : port 1(vlan0) entered forwarding state
[  166.644663][ T9568] team0: Device veth0_vlan failed to register rx_handler
[  166.703859][ T9568] : port 1(vlan0) entered disabled state
[  166.881035][ T9579] netlink: 'syz.0.1580': attribute type 16 has an invalid length.
[  166.883900][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'.
[  167.385966][ T9568] syz.1.1572 (9568) used greatest stack depth: 18488 bytes left
[  167.864467][ T9592] netlink: 'syz.2.1585': attribute type 10 has an invalid length.
[  167.870783][ T9592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.878080][ T9592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.884039][ T9592] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  167.931095][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'.
[  168.052437][ T9605] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1588'.
[  168.331944][ T9613] netlink: 'syz.2.1593': attribute type 21 has an invalid length.
[  168.335403][ T9613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1593'.
[  168.340538][ T9613] netlink: 'syz.2.1593': attribute type 5 has an invalid length.
[  168.343857][ T9613] netlink: 'syz.2.1593': attribute type 6 has an invalid length.
[  168.347407][ T9613] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1593'.
[  169.778420][ T9668] syzkaller0: create flow: hash 3211926824 index 1
[  170.016691][ T9663] syzkaller0: delete flow: hash 3211926824 index 1
[  171.063162][ T9700] __nla_validate_parse: 5 callbacks suppressed
[  171.063172][ T9700] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1628'.
[  171.115868][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'.
[  171.121035][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'.
[  171.397412][ T9723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.931026][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'.
[  172.306464][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'.
[  172.644057][ T9785] netlink: 'syz.2.1667': attribute type 10 has an invalid length.
[  172.669034][ T9785] team0: Port device hsr0 added
[  173.221401][ T9818] tap0: tun_chr_ioctl cmd 1074025672
[  173.223602][ T9818] tap0: ignored: set checksum enabled
[  173.263661][ T9822] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1681'.
[  173.270210][ T9822] bond_slave_1: entered promiscuous mode
[  173.282126][ T9822] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1681'.
[  175.218353][ T9886] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  175.231155][ T9887] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  175.257638][ T5859] Bluetooth: hci2: Dropping invalid advertising data
[  175.260215][ T5859] Bluetooth: hci2: unknown advertising packet type: 0xff
[  175.458845][ T9899] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.474605][ T9899] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.506375][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1718'.
[  175.530217][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'.
[  175.651377][ T9921] netlink: 'syz.2.1728': attribute type 2 has an invalid length.
[  175.653983][ T9921] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1728'.
[  178.915351][ T9953] __nla_validate_parse: 3 callbacks suppressed
[  178.915366][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'.
[  180.332230][ T9974] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1751'.
[  180.435851][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'.
[  180.801647][T10003] netlink: 'syz.2.1765': attribute type 21 has an invalid length.
[  180.805073][T10003] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1765'.
[  180.950076][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1772'.
[  181.465364][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'.
[  181.575357][T10047] bpf: Bad value for 'gid'
[  181.575667][T10048] netlink: 'syz.2.1787': attribute type 1 has an invalid length.
[  181.974773][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'.
[  181.978664][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1791'.
[  181.982706][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1791'.
[  181.999229][T10062] : entered promiscuous mode
[  182.197010][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1801'.
[  182.640782][T10110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  183.256857][T10151] syzkaller1: tun_chr_ioctl cmd 1074025677
[  183.258886][T10151] syzkaller1: linktype set to 780
[  183.721503][ T5881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.742776][T10184] netlink: 'syz.0.1850': attribute type 4 has an invalid length.
[  184.100229][T10212] netlink: 'syz.1.1862': attribute type 21 has an invalid length.
[  184.103192][T10212] __nla_validate_parse: 8 callbacks suppressed
[  184.103201][T10212] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1862'.
[  184.221515][T10224] =======================================================
[  184.221515][T10224] WARNING: The mand mount option has been deprecated and
[  184.221515][T10224]          and is ignored by this kernel. Remove the mand
[  184.221515][T10224]          option from the mount to silence this warning.
[  184.221515][T10224] =======================================================
[  185.867916][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  185.870562][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  185.873165][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  187.468553][T10262] IPv6: NLM_F_REPLACE set, but no existing node found!
[  187.518532][T10264] syzkaller0: entered promiscuous mode
[  187.520325][T10264] syzkaller0: entered allmulticast mode
[  187.620575][T10278] sock: sock_set_timeout: `syz.1.1888' (pid 10278) tries to set negative timeout
[  187.654626][T10280] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.1889'.
[  188.615944][T10305] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1900'.
[  188.653764][T10310] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1903'.
[  188.938667][T10329] netlink: 'syz.0.1911': attribute type 10 has an invalid length.
[  189.798878][T10373] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1932'.
[  190.080266][T10385] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1937'.
[  190.173427][T10394] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.1941'.
[  190.330743][T10405] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1946'.
[  190.379916][T10407] netlink: 'syz.1.1948': attribute type 2 has an invalid length.
[  190.382786][T10407] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1948'.
[  190.510242][T10419] netlink: 'syz.0.1953': attribute type 29 has an invalid length.
[  190.514179][T10419] netlink: 'syz.0.1953': attribute type 29 has an invalid length.
[  190.524751][T10419] netlink: 'syz.0.1953': attribute type 27 has an invalid length.
[  191.361454][T10467] openvswitch: netlink: Flow actions attr not present in new flow.
[  191.532238][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1983'.
[  191.550122][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1983'.
[  191.554918][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1983'.
[  191.754516][T10496] netlink: ct family unspecified
[  191.756545][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.408774][T10514] netlink: 'syz.1.1996': attribute type 10 has an invalid length.
[  192.446811][T10514] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  192.449533][T10514] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  192.453020][T10514] team0: Port device netdevsim0 added
[  192.578909][T10520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1999'.
[  192.581881][T10520] tc_dump_action: action bad kind
[  192.632951][T10526] netlink: 'syz.2.2002': attribute type 2 has an invalid length.
[  192.635721][T10526] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.2002'.
[  192.666374][T10523] netlink: 'syz.1.2001': attribute type 10 has an invalid length.
[  192.680599][T10523] team0: Device ipvlan1 failed to register rx_handler
[  192.795594][T10523] netlink: 'syz.1.2001': attribute type 29 has an invalid length.
[  192.799351][T10523] netlink: 'syz.1.2001': attribute type 3 has an invalid length.
[  193.720440][T10569] syzkaller0: entered promiscuous mode
[  193.722790][T10569] syzkaller0: entered allmulticast mode
[  194.031290][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.033604][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  195.038340][T10598] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  195.041273][T10598] __nla_validate_parse: 2 callbacks suppressed
[  195.041283][T10598] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2030'.
[  196.404253][T10642] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2051'.
[  196.417185][T10642] netlink: 'syz.2.2051': attribute type 28 has an invalid length.
[  196.420024][T10642] netlink: 'syz.2.2051': attribute type 29 has an invalid length.
[  196.423721][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2051'.
[  196.431274][T10642] netlink: 'syz.2.2051': attribute type 9 has an invalid length.
[  196.434334][T10642] netlink: 'syz.2.2051': attribute type 8 has an invalid length.
[  196.437332][T10642] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.2051'.
[  196.486062][T10650] lo speed is unknown, defaulting to 1000
[  196.592289][T10660] nbd: must specify an index to disconnect
[  198.701820][T10754] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2104'.
[  198.804523][T10754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.828321][T10754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.848393][T10754] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  198.853799][T10754] bond0 (unregistering): Released all slaves
[  199.395604][T10797] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.2124'.
[  199.399286][T10797] netlink: 61827 bytes leftover after parsing attributes in process `syz.1.2124'.
[  199.427673][T10800] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  199.500443][T10803] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2126'.
[  199.532518][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2127'.
[  199.535657][T10805] tc_dump_action: action bad kind
[  199.622126][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2130'.
[  200.049323][T10827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.122398][T10832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2140'.
[  200.151983][T10830] netlink: 'syz.1.2139': attribute type 10 has an invalid length.
[  200.206270][T10830] geneve1: entered promiscuous mode
[  200.212696][T10830] geneve1: entered allmulticast mode
[  200.223237][T10830] team0: Port device geneve1 added
[  200.227567][T10792] delete_channel: no stack
[  200.619488][T10862] netlink: 'syz.1.2154': attribute type 10 has an invalid length.
[  200.714863][T10862] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  200.725642][T10862] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  200.786520][T10876] netlink: 'syz.0.2161': attribute type 10 has an invalid length.
[  200.840373][T10862] team0: Port device netdevsim0 removed
[  200.919291][T10862] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  200.922652][T10862] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  200.929435][T10862] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  200.940794][T10876] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.945594][T10876] batadv0: entered promiscuous mode
[  200.948802][T10876] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  200.984111][T10882] netlink: 'syz.0.2164': attribute type 10 has an invalid length.
[  200.987315][T10882] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2164'.
[  201.110318][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'.
[  201.208585][T10903] netlink: 'syz.2.2174': attribute type 10 has an invalid length.
[  201.506264][ T5859] Bluetooth: hci1: Malformed LE Event: 0x02
[  201.822998][T10942] siw: device registration error -23
[  202.378992][T10971] netlink: 'syz.0.2202': attribute type 3 has an invalid length.
[  202.644894][ T5859] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  202.744747][T10995] netlink: 798 bytes leftover after parsing attributes in process `syz.1.2214'.
[  202.808281][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2217'.
[  202.811446][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2217'.
[  202.814544][T11001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2217'.
[  202.945832][T11012] sock: sock_timestamping_bind_phc: sock not bind to device
[  203.750728][T11048] netlink: 'syz.2.2238': attribute type 8 has an invalid length.
[  203.755277][T11048] netlink: 'syz.2.2238': attribute type 3 has an invalid length.
[  203.764082][T11048] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2238'.
[  203.849016][T11052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2239'.
[  204.190383][   T33] audit: type=1107 audit(1755512325.264:3): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  204.190383][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  204.190383][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  204.190383][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  204.411811][T11069] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2248'.
[  204.752805][ T5859] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  204.943787][T11104] tun0: tun_chr_ioctl cmd 1074025677
[  204.946211][T11104] tun0: linktype set to 774
[  205.341155][T11124] netlink: 'syz.0.2274': attribute type 4 has an invalid length.
[  205.344063][T11124] __nla_validate_parse: 3 callbacks suppressed
[  205.344074][T11124] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2274'.
[  205.732997][T11152] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2285'.
[  206.215210][T11174] netlink: 'syz.2.2296': attribute type 2 has an invalid length.
[  206.219234][T11174] netlink: 8196 bytes leftover after parsing attributes in process `syz.2.2296'.
[  208.832558][T11196] netlink: 'syz.2.2305': attribute type 21 has an invalid length.
[  208.846797][T11196] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2305'.
[  209.381923][T11230] netlink: 'syz.2.2321': attribute type 46 has an invalid length.
[  209.420330][T11232] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2322'.
[  209.553143][T11239] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  209.754216][T11250] netlink: 'syz.1.2330': attribute type 1 has an invalid length.
[  210.421432][T11281] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2344'.
[  210.421546][T11282] netlink: 'syz.2.2343': attribute type 15 has an invalid length.
[  210.425428][T11281] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2344'.
[  210.437899][T11282] netlink: 'syz.2.2343': attribute type 7 has an invalid length.
[  210.440999][T11282] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2343'.
[  210.466149][T11284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2345'.
[  210.495874][T11284] bond_slave_1: left promiscuous mode
[  210.501560][T11284] batadv0: left promiscuous mode
[  210.613328][T11284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.633637][T11284] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  210.712401][T11284] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  210.756136][T11284] bond0 (unregistering): Released all slaves
[  210.769199][T11298] netlink: 'syz.1.2352': attribute type 29 has an invalid length.
[  210.772575][T11300] netlink: 'syz.1.2352': attribute type 29 has an invalid length.
[  210.776883][T11298] netlink: 'syz.1.2352': attribute type 29 has an invalid length.
[  210.828450][T11302] veth1_macvtap: left promiscuous mode
[  210.844696][T11302] macsec0: entered allmulticast mode
[  211.243225][ T5859] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7
[  211.485295][T11325] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2361'.
[  211.684679][T11335] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.2366'.
[  211.688648][T11335] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.2366'.
[  213.123423][T11437] netlink: 'syz.2.2393': attribute type 2 has an invalid length.
[  213.126513][T11437] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2393'.
[  213.220969][T11449] netlink: 'syz.0.2397': attribute type 11 has an invalid length.
[  213.229337][T11449] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2397'.
[  214.810804][T11487] netlink: 'syz.2.2411': attribute type 1 has an invalid length.
[  214.814177][T11487] netlink: 376 bytes leftover after parsing attributes in process `syz.2.2411'.
[  214.874224][T11491] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.970453][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.974137][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.978042][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.981752][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.984601][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.027491][T11497] lo speed is unknown, defaulting to 1000
[  215.150223][T11497] chnl_net:caif_netlink_parms(): no params data found
[  215.247293][T11497] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.249933][T11497] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.252327][T11497] bridge_slave_0: entered allmulticast mode
[  215.255095][T11497] bridge_slave_0: entered promiscuous mode
[  215.268011][T11497] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.270318][T11497] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.274196][T11497] bridge_slave_1: entered allmulticast mode
[  215.277280][T11497] bridge_slave_1: entered promiscuous mode
[  215.289104][   T54] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  215.316080][T11497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.322614][T11497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.344693][T11497] team0: Port device team_slave_0 added
[  215.348645][T11497] team0: Port device team_slave_1 added
[  215.371773][T11497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.374222][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.384334][T11497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.393327][T11497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.396068][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.407553][T11497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.432279][T11497] hsr_slave_0: entered promiscuous mode
[  215.434659][T11497] hsr_slave_1: entered promiscuous mode
[  215.438094][T11497] debugfs: 'hsr0' already exists in 'hsr'
[  215.440100][T11497] Cannot create hsr debugfs directory
[  215.600359][T11497] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  215.608810][T11497] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  215.613071][T11497] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  215.619048][T11497] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  215.718195][T11497] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.742792][T11497] 8021q: adding VLAN 0 to HW filter on device team0
[  215.755790][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.758474][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.791312][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.794422][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.835657][T11596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.904879][T11602] netlink: 'syz.2.2439': attribute type 21 has an invalid length.
[  215.926136][T11602] __nla_validate_parse: 3 callbacks suppressed
[  215.926150][T11602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2439'.
[  215.980834][T11497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.050492][T11497] veth0_vlan: entered promiscuous mode
[  216.068267][T11497] veth1_vlan: entered promiscuous mode
[  216.095408][T11497] veth0_macvtap: entered promiscuous mode
[  216.104131][T11497] veth1_macvtap: entered promiscuous mode
[  216.129130][T11497] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.142023][T11497] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.159141][ T5696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.163050][ T5696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.171245][ T5696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.174491][ T5696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.227373][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.235086][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.250834][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.253365][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.312522][T11631] netlink: 'syz.2.2451': attribute type 2 has an invalid length.
[  216.320822][T11631] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2451'.
[  216.381263][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'.
[  216.719865][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2465'.
[  216.724564][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2465'.
[  216.737658][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2465'.
[  216.762694][T11663] bpf: Bad value for 'uid'
[  217.022233][T11688] netlink: 'syz.3.2478': attribute type 9 has an invalid length.
[  217.024851][T11688] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.2478'.
[  217.066819][   T54] Bluetooth: hci2: command tx timeout
[  217.136277][T11696] lo speed is unknown, defaulting to 1000
[  217.538637][T11720] can: request_module (can-proto-0) failed.
[  218.260238][T11755] lo speed is unknown, defaulting to 1000
[  218.849629][T11769] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2509'.
[  219.157237][   T54] Bluetooth: hci2: command tx timeout
[  219.458696][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.501899][T11784] netlink: 'syz.2.2517': attribute type 29 has an invalid length.
[  219.511754][T11786] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2516'.
[  219.548829][T11790] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2518'.
[  220.482174][T11863] netlink: 'syz.3.2555': attribute type 2 has an invalid length.
[  220.486301][T11863] netlink: 'syz.3.2555': attribute type 2 has an invalid length.
[  220.844683][T11883] netlink: 'syz.3.2563': attribute type 21 has an invalid length.
[  221.286762][   T54] Bluetooth: hci2: command tx timeout
[  221.788370][T11912] __nla_validate_parse: 6 callbacks suppressed
[  221.788385][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2576'.
[  221.873812][T11918] netlink: 'syz.1.2578': attribute type 33 has an invalid length.
[  221.878665][T11918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2578'.
[  221.913680][T11916] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2579'.
[  222.139064][T11939] netlink: 'syz.1.2589': attribute type 4 has an invalid length.
[  222.142293][T11939] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.2589'.
[  222.407825][T11953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.040977][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2596'.
[  223.044659][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2596'.
[  223.048763][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2596'.
[  223.306755][   T54] Bluetooth: hci2: command tx timeout
[  223.452252][T11978] netlink: 'syz.1.2606': attribute type 22 has an invalid length.
[  223.455802][T11978] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2606'.
[  223.471277][T11976] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.063520][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'.
[  224.237353][T12011] syzkaller0: entered promiscuous mode
[  224.239201][T12011] syzkaller0: entered allmulticast mode
[  224.542485][T12034] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2628'.
[  224.995420][T12059] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.015355][T12059] bridge_slave_0 (unregistering): left allmulticast mode
[  225.018591][T12059] bridge_slave_0 (unregistering): left promiscuous mode
[  225.021481][T12059] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.130120][T12062] C: renamed from team_slave_0 (while UP)
[  225.134989][T12062] netlink: 'syz.3.2644': attribute type 3 has an invalid length.
[  225.139370][T12062] netlink: 'syz.3.2644': attribute type 1 has an invalid length.
[  225.271369][   T54] Bluetooth: hci2: Unable to find connection for big 0x00
[  226.454569][   T54] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  227.151152][T12134] netlink: 'syz.2.2674': attribute type 2 has an invalid length.
[  227.155934][T12134] netlink: 'syz.2.2674': attribute type 1 has an invalid length.
[  227.159503][T12134] __nla_validate_parse: 9 callbacks suppressed
[  227.159510][T12134] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2674'.
[  227.444642][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2685'.
[  227.474331][T12155] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2684'.
[  227.507364][T12160] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.2686'.
[  228.219993][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'.
[  228.223370][T12194] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2702'.
[  228.370735][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'.
[  228.374510][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'.
[  228.489300][T12210] netlink: 'syz.2.2709': attribute type 1 has an invalid length.
[  228.491910][T12210] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2709'.
[  228.507743][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  228.622525][   T54] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  228.682915][T12228] netlink: 'syz.2.2717': attribute type 1 has an invalid length.
[  228.691225][T12228] netlink: 'syz.2.2717': attribute type 3 has an invalid length.
[  228.694512][T12228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2717'.
[  229.299095][T12244] openvswitch: netlink: Missing key (keys=40, expected=100)
[  229.722789][T12262] IPv6: NLM_F_CREATE should be specified when creating new route
[  231.180591][   T54] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[  231.180617][   T54] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  231.233966][T12313] netlink: 'syz.3.2756': attribute type 3 has an invalid length.
[  231.242778][T12313] netlink: 'syz.3.2756': attribute type 1 has an invalid length.
[  232.010993][T12389] netlink: 'syz.2.2788': attribute type 10 has an invalid length.
[  232.933037][T12421] netlink: 'syz.1.2803': attribute type 10 has an invalid length.
[  232.937735][T12421] __nla_validate_parse: 11 callbacks suppressed
[  232.937775][T12421] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2803'.
[  233.708309][T12416] delete_channel: no stack
[  233.839737][T12421] vlan0 (unregistering): left allmulticast mode
[  233.842828][T12421] veth0_vlan (unregistering): left allmulticast mode
[  233.849767][T12421] vlan0 (unregistering): left promiscuous mode
[  233.852668][T12421] : port 1(vlan0) entered disabled state
[  235.608579][T12476] netlink: 'syz.1.2827': attribute type 21 has an invalid length.
[  235.703486][T12480] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2829'.
[  236.672461][T12425] Set syz1 is full, maxelem 65536 reached
[  239.773934][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'.
[  239.879906][T12541] netlink: 531 bytes leftover after parsing attributes in process `syz.2.2857'.
[  241.973483][T12580] netlink: 'syz.2.2875': attribute type 11 has an invalid length.
[  242.204232][T12596] netlink: 'syz.2.2883': attribute type 6 has an invalid length.
[  242.208337][T12596] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2883'.
[  242.242725][T12594] netlink: 11318 bytes leftover after parsing attributes in process `syz.3.2882'.
[  242.568367][T12622] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2892'.
[  242.686456][T12632] netlink: 'syz.3.2897': attribute type 10 has an invalid length.
[  242.699311][T12632] team0: Device veth1_macvtap failed to register rx_handler
[  242.732614][T12637] netlink: 'syz.2.2898': attribute type 10 has an invalid length.
[  242.736135][T12637] macsec0: left promiscuous mode
[  242.784112][T12637] macsec0: left allmulticast mode
[  242.786540][T12637] veth1_macvtap: left allmulticast mode
[  242.990874][T12653] netlink: 'syz.1.2906': attribute type 12 has an invalid length.
[  242.994130][T12653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2906'.
[  243.047255][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.050623][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.053757][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.057217][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.063500][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.069229][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.073277][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.076420][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.079522][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  243.082686][T12663] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  244.224379][T12683] lo speed is unknown, defaulting to 1000
[  244.257579][T12684] netlink: 'syz.2.2917': attribute type 39 has an invalid length.
[  244.803454][T12697] netlink: 'syz.1.2923': attribute type 5 has an invalid length.
[  244.891973][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  244.895905][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  244.971664][T12695] : renamed from hsr0 (while UP)
[  245.112361][T12705] syzkaller0: entered promiscuous mode
[  245.114605][T12705] syzkaller0: entered allmulticast mode
[  246.323878][T12720] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2934'.
[  246.377584][T12727] netlink: 'syz.1.2936': attribute type 64 has an invalid length.
[  246.460495][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'.
[  246.758701][T12755] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2949'.
[  247.409630][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2958'.
[  247.822565][T12779] netlink: 'syz.2.2959': attribute type 3 has an invalid length.
[  247.825728][T12779] netlink: 'syz.2.2959': attribute type 1 has an invalid length.
[  247.829075][T12779] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2959'.
[  248.141966][T12793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.145022][T12793] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.160020][T12793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.163287][T12793] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.173165][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'.
[  248.860397][T12805] netlink: 'syz.2.2968': attribute type 64 has an invalid length.
[  250.657877][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'.
[  250.891764][T12868] ==================================================================
[  250.895013][T12868] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  250.897978][T12868] Read of size 1 at addr ffff888110dc34b0 by task syz.1.2996/12868
[  250.901910][T12868] 
[  250.902899][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.1.2996 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  250.902916][T12868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.902923][T12868] Call Trace:
[  250.902952][T12868]  <TASK>
[  250.902957][T12868]  dump_stack_lvl+0x189/0x250
[  250.902975][T12868]  ? __virt_addr_valid+0x1c8/0x5c0
[  250.902990][T12868]  ? rcu_is_watching+0x15/0xb0
[  250.903001][T12868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.903014][T12868]  ? rcu_is_watching+0x15/0xb0
[  250.903025][T12868]  ? lock_release+0x4b/0x3e0
[  250.903040][T12868]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  250.903055][T12868]  ? __virt_addr_valid+0x1c8/0x5c0
[  250.903069][T12868]  ? __virt_addr_valid+0x4a5/0x5c0
[  250.903082][T12868]  print_report+0xca/0x240
[  250.903093][T12868]  ? __xfrm_state_insert+0x8af/0x1450
[  250.903105][T12868]  kasan_report+0x118/0x150
[  250.903122][T12868]  ? __xfrm_state_insert+0x8af/0x1450
[  250.903135][T12868]  __xfrm_state_insert+0x8af/0x1450
[  250.903154][T12868]  ? xfrm_state_insert+0x44/0x60
[  250.903165][T12868]  xfrm_state_insert+0x54/0x60
[  250.903176][T12868]  ipcomp6_init_state+0x655/0x900
[  250.903194][T12868]  __xfrm_init_state+0xa76/0x13f0
[  250.903207][T12868]  ? __xfrm_init_state+0x7ef/0x13f0
[  250.903222][T12868]  xfrm_add_sa+0x2f5b/0x4070
[  250.903237][T12868]  ? __pfx_xfrm_add_sa+0x10/0x10
[  250.903250][T12868]  ? __nla_parse+0x40/0x60
[  250.903268][T12868]  xfrm_user_rcv_msg+0x7a3/0xab0
[  250.903282][T12868]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  250.903304][T12868]  ? __pfx___mutex_trylock_common+0x10/0x10
[  250.903317][T12868]  ? rcu_is_watching+0x15/0xb0
[  250.903329][T12868]  ? trace_contention_end+0x39/0x120
[  250.903341][T12868]  ? __mutex_lock+0x335/0x1360
[  250.903358][T12868]  netlink_rcv_skb+0x208/0x470
[  250.903374][T12868]  ? rcu_is_watching+0x15/0xb0
[  250.903385][T12868]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  250.903398][T12868]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  250.903417][T12868]  ? netlink_deliver_tap+0x2e/0x1b0
[  250.903433][T12868]  xfrm_netlink_rcv+0x79/0x90
[  250.903445][T12868]  netlink_unicast+0x82f/0x9e0
[  250.903461][T12868]  ? __pfx_netlink_unicast+0x10/0x10
[  250.903475][T12868]  ? netlink_sendmsg+0x642/0xb30
[  250.903489][T12868]  ? skb_put+0x11b/0x210
[  250.903499][T12868]  netlink_sendmsg+0x805/0xb30
[  250.903517][T12868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.903535][T12868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.903550][T12868]  __sock_sendmsg+0x21c/0x270
[  250.903565][T12868]  ____sys_sendmsg+0x505/0x830
[  250.903578][T12868]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.903591][T12868]  ? import_iovec+0x74/0xa0
[  250.903604][T12868]  ___sys_sendmsg+0x21f/0x2a0
[  250.903615][T12868]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.903625][T12868]  ? perf_trace_preemptirq_template+0xa3/0x340
[  250.903646][T12868]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.903665][T12868]  ? kasan_check_range+0x9f/0x2c0
[  250.903683][T12868]  __x64_sys_sendmsg+0x19b/0x260
[  250.903695][T12868]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.903705][T12868]  ? perf_trace_preemptirq_template+0xa3/0x340
[  250.903722][T12868]  ? rcu_is_watching+0x15/0xb0
[  250.903734][T12868]  ? do_syscall_64+0xbe/0x3b0
[  250.903749][T12868]  do_syscall_64+0xfa/0x3b0
[  250.903765][T12868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.903775][T12868]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  250.903788][T12868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.903799][T12868] RIP: 0033:0x7ff3cc58ebe9
[  250.903810][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.903820][T12868] RSP: 002b:00007ff3cd4a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.903833][T12868] RAX: ffffffffffffffda RBX: 00007ff3cc7b5fa0 RCX: 00007ff3cc58ebe9
[  250.903841][T12868] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000008
[  250.903848][T12868] RBP: 00007ff3cc611e19 R08: 0000000000000000 R09: 0000000000000000
[  250.903856][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.903863][T12868] R13: 00007ff3cc7b6038 R14: 00007ff3cc7b5fa0 R15: 00007ffc063e45e8
[  250.903875][T12868]  </TASK>
[  250.903880][T12868] 
[  250.909182][T12871] netlink: 'syz.2.2998': attribute type 1 has an invalid length.
[  250.912524][T12868] Allocated by task 10803:
[  250.912535][T12868]  kasan_save_track+0x3e/0x80
[  250.912551][T12868]  __kasan_slab_alloc+0x6c/0x80
[  250.912565][T12868]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  250.912581][T12868]  xfrm_state_alloc+0x24/0x2f0
[  250.915465][T12871] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2998'.
[  250.916780][T12868]  __find_acq_core+0x8a7/0x1c00
[  250.916795][T12868]  xfrm_find_acq+0x78/0xa0
[  250.916805][T12868]  xfrm_alloc_userspi+0x6b3/0xc90
[  250.916818][T12868]  xfrm_user_rcv_msg+0x7a3/0xab0
[  250.916830][T12868]  netlink_rcv_skb+0x208/0x470
[  250.916845][T12868]  xfrm_netlink_rcv+0x79/0x90
[  250.916857][T12868]  netlink_unicast+0x82f/0x9e0
[  250.916866][T12868]  netlink_sendmsg+0x805/0xb30
[  251.085381][T12868]  __sock_sendmsg+0x21c/0x270
[  251.087104][T12868]  ____sys_sendmsg+0x505/0x830
[  251.088667][T12868]  ___sys_sendmsg+0x21f/0x2a0
[  251.090195][T12868]  __x64_sys_sendmsg+0x19b/0x260
[  251.092101][T12868]  do_syscall_64+0xfa/0x3b0
[  251.093840][T12868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.095991][T12868] 
[  251.096947][T12868] Freed by task 920:
[  251.098468][T12868]  kasan_save_track+0x3e/0x80
[  251.100029][T12868]  kasan_save_free_info+0x46/0x50
[  251.101683][T12868]  __kasan_slab_free+0x5b/0x80
[  251.103363][T12868]  kmem_cache_free+0x18f/0x400
[  251.105104][T12868]  xfrm_state_gc_task+0x52d/0x6b0
[  251.106981][T12868]  process_scheduled_works+0xae1/0x17b0
[  251.108944][T12868]  worker_thread+0x8a0/0xda0
[  251.110638][T12868]  kthread+0x711/0x8a0
[  251.112115][T12868]  ret_from_fork+0x3fc/0x770
[  251.113702][T12868]  ret_from_fork_asm+0x1a/0x30
[  251.115503][T12868] 
[  251.116400][T12868] The buggy address belongs to the object at ffff888110dc3180
[  251.116400][T12868]  which belongs to the cache xfrm_state of size 928
[  251.121343][T12868] The buggy address is located 816 bytes inside of
[  251.121343][T12868]  freed 928-byte region [ffff888110dc3180, ffff888110dc3520)
[  251.126138][T12868] 
[  251.127024][T12868] The buggy address belongs to the physical page:
[  251.129211][T12868] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888110dc3180 pfn:0x110dc0
[  251.132674][T12868] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  251.135879][T12868] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  251.138729][T12868] page_type: f5(slab)
[  251.140250][T12868] raw: 057ff00000000040 ffff888104f4e280 dead000000000122 0000000000000000
[  251.143234][T12868] raw: ffff888110dc3180 00000000800e000d 00000000f5000000 0000000000000000
[  251.146379][T12868] head: 057ff00000000040 ffff888104f4e280 dead000000000122 0000000000000000
[  251.149488][T12868] head: ffff888110dc3180 00000000800e000d 00000000f5000000 0000000000000000
[  251.152619][T12868] head: 057ff00000000002 ffffea0004437001 00000000ffffffff 00000000ffffffff
[  251.155828][T12868] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  251.159083][T12868] page dumped because: kasan: bad access detected
[  251.161344][T12868] page_owner tracks the page as allocated
[  251.163482][T12868] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6017, tgid 6015 (syz.1.43), ts 68044749267, free_ts 66788611264
[  251.170079][T12868]  post_alloc_hook+0x240/0x2a0
[  251.171793][T12868]  get_page_from_freelist+0x21e4/0x22c0
[  251.173740][T12868]  __alloc_frozen_pages_noprof+0x181/0x370
[  251.175951][T12868]  alloc_pages_mpol+0x232/0x4a0
[  251.177872][T12868]  allocate_slab+0x8a/0x370
[  251.179524][T12868]  ___slab_alloc+0xbeb/0x1410
[  251.181249][T12868]  kmem_cache_alloc_noprof+0x283/0x3c0
[  251.183113][T12868]  xfrm_state_alloc+0x24/0x2f0
[  251.184748][T12868]  pfkey_add+0x6e4/0x2e00
[  251.186393][T12868]  pfkey_sendmsg+0xbfe/0x1090
[  251.188229][T12868]  __sock_sendmsg+0x21c/0x270
[  251.189895][T12868]  ____sys_sendmsg+0x505/0x830
[  251.191648][T12868]  ___sys_sendmsg+0x21f/0x2a0
[  251.193372][T12868]  __x64_sys_sendmsg+0x19b/0x260
[  251.195213][T12868]  do_syscall_64+0xfa/0x3b0
[  251.197020][T12868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.198915][T12868] page last free pid 5853 tgid 5853 stack trace:
[  251.201084][T12868]  __free_frozen_pages+0xbc4/0xd30
[  251.202940][T12868]  __put_partials+0x156/0x1a0
[  251.204716][T12868]  put_cpu_partial+0x17c/0x250
[  251.206485][T12868]  __slab_free+0x2d5/0x3c0
[  251.208085][T12868]  qlist_free_all+0x97/0x140
[  251.209605][T12868]  kasan_quarantine_reduce+0x148/0x160
[  251.211372][T12868]  __kasan_slab_alloc+0x22/0x80
[  251.212960][T12868]  __kmalloc_noprof+0x224/0x4f0
[  251.214542][T12868]  tomoyo_realpath_from_path+0xe3/0x5d0
[  251.216335][T12868]  tomoyo_path_perm+0x213/0x4b0
[  251.217908][T12868]  security_inode_getattr+0x12f/0x330
[  251.219677][T12868]  vfs_fstatat+0xb1/0x170
[  251.221108][T12868]  __x64_sys_newfstatat+0x116/0x190
[  251.222856][T12868]  do_syscall_64+0xfa/0x3b0
[  251.224380][T12868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.226285][T12868] 
[  251.227061][T12868] Memory state around the buggy address:
[  251.228867][T12868]  ffff888110dc3380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  251.231696][T12868]  ffff888110dc3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  251.234610][T12868] >ffff888110dc3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  251.237477][T12868]                                      ^
[  251.239512][T12868]  ffff888110dc3500: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  251.242518][T12868]  ffff888110dc3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  251.245272][T12868] ==================================================================
[  251.248723][T12868] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  251.251501][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.1.2996 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  251.255838][T12868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.259317][T12868] Call Trace:
[  251.260576][T12868]  <TASK>
[  251.261698][T12868]  dump_stack_lvl+0x99/0x250
[  251.263224][T12868]  ? __asan_memcpy+0x40/0x70
[  251.264754][T12868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.266637][T12868]  ? __pfx__printk+0x10/0x10
[  251.268410][T12868]  vpanic+0x281/0x750
[  251.269870][T12868]  ? __pfx_vpanic+0x10/0x10
[  251.271378][T12868]  ? irqentry_exit+0x74/0x90
[  251.272970][T12868]  panic+0xb9/0xc0
[  251.274364][T12868]  ? __pfx_panic+0x10/0x10
[  251.276095][T12868]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  251.278312][T12868]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  251.280352][T12868]  ? is_module_address+0x17/0xf0
[  251.282082][T12868]  ? __xfrm_state_insert+0x8af/0x1450
[  251.283771][T12868]  check_panic_on_warn+0x89/0xb0
[  251.285525][T12868]  ? __xfrm_state_insert+0x8af/0x1450
[  251.287491][T12868]  end_report+0x78/0x160
[  251.288874][T12868]  kasan_report+0x129/0x150
[  251.290370][T12868]  ? __xfrm_state_insert+0x8af/0x1450
[  251.292125][T12868]  __xfrm_state_insert+0x8af/0x1450
[  251.293808][T12868]  ? xfrm_state_insert+0x44/0x60
[  251.295606][T12868]  xfrm_state_insert+0x54/0x60
[  251.297331][T12868]  ipcomp6_init_state+0x655/0x900
[  251.299239][T12868]  __xfrm_init_state+0xa76/0x13f0
[  251.301149][T12868]  ? __xfrm_init_state+0x7ef/0x13f0
[  251.303129][T12868]  xfrm_add_sa+0x2f5b/0x4070
[  251.304786][T12868]  ? __pfx_xfrm_add_sa+0x10/0x10
[  251.306600][T12868]  ? __nla_parse+0x40/0x60
[  251.308351][T12868]  xfrm_user_rcv_msg+0x7a3/0xab0
[  251.310212][T12868]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  251.312058][T12868]  ? __pfx___mutex_trylock_common+0x10/0x10
[  251.313948][T12868]  ? rcu_is_watching+0x15/0xb0
[  251.315663][T12868]  ? trace_contention_end+0x39/0x120
[  251.317577][T12868]  ? __mutex_lock+0x335/0x1360
[  251.319311][T12868]  netlink_rcv_skb+0x208/0x470
[  251.321156][T12868]  ? rcu_is_watching+0x15/0xb0
[  251.323036][T12868]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  251.324856][T12868]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  251.326562][T12868]  ? netlink_deliver_tap+0x2e/0x1b0
[  251.328296][T12868]  xfrm_netlink_rcv+0x79/0x90
[  251.329882][T12868]  netlink_unicast+0x82f/0x9e0
[  251.331596][T12868]  ? __pfx_netlink_unicast+0x10/0x10
[  251.333377][T12868]  ? netlink_sendmsg+0x642/0xb30
[  251.335096][T12868]  ? skb_put+0x11b/0x210
[  251.336616][T12868]  netlink_sendmsg+0x805/0xb30
[  251.338663][T12868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.340809][T12868]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.342601][T12868]  __sock_sendmsg+0x21c/0x270
[  251.344327][T12868]  ____sys_sendmsg+0x505/0x830
[  251.346058][T12868]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.348112][T12868]  ? import_iovec+0x74/0xa0
[  251.349804][T12868]  ___sys_sendmsg+0x21f/0x2a0
[  251.351410][T12868]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.353337][T12868]  ? perf_trace_preemptirq_template+0xa3/0x340
[  251.355679][T12868]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.357627][T12868]  ? kasan_check_range+0x9f/0x2c0
[  251.359530][T12868]  __x64_sys_sendmsg+0x19b/0x260
[  251.361313][T12868]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.363166][T12868]  ? perf_trace_preemptirq_template+0xa3/0x340
[  251.365467][T12868]  ? rcu_is_watching+0x15/0xb0
[  251.367195][T12868]  ? do_syscall_64+0xbe/0x3b0
[  251.368947][T12868]  do_syscall_64+0xfa/0x3b0
[  251.370510][T12868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.372698][T12868]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  251.374842][T12868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.376816][T12868] RIP: 0033:0x7ff3cc58ebe9
[  251.378551][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.385655][T12868] RSP: 002b:00007ff3cd4a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.388814][T12868] RAX: ffffffffffffffda RBX: 00007ff3cc7b5fa0 RCX: 00007ff3cc58ebe9
[  251.392063][T12868] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000008
[  251.394645][T12868] RBP: 00007ff3cc611e19 R08: 0000000000000000 R09: 0000000000000000
[  251.397226][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.400069][T12868] R13: 00007ff3cc7b6038 R14: 00007ff3cc7b5fa0 R15: 00007ffc063e45e8
[  251.402740][T12868]  </TASK>
[  251.404383][T12868] Kernel Offset: disabled
[  251.406088][T12868] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:19:32  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820911c7 RBX=0000000000034779 RCX=ffff8880212a8000 RDX=0000000000000000
RSI=0000000000012a44 RDI=0000000000034779 RBP=ffffc900031af600 RSP=ffffc900031af360
R8 =ffff88801c16566b R9 =1ffff1100382cacd R10=dffffc0000000000 R11=ffffed100382cace
R12=ffff888027221800 R13=000000000013ffff R14=0000000000012a44 R15=8400000034779805
RIP=ffffffff81bfabb8 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555700a500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc4f2e56c0 CR3=000000001ff3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8174859b ffffffff8133c57e
XMM02=00007f5ae1f87498 ffffffff8133c57e XMM03=00007f5ae1f874a8 00007f5ae1f874a0
XMM04=00007f5ae2aed100 00007f5ae1f87460 XMM05=00007f5ae1f87478 00007f5ae1f874c0
XMM06=00007f5ae1f874b8 00007f5ae1f874b0 XMM07=00007f5ae1f874a8 00007f5ae1f874a0
XMM08=e8781fad3d24b7e3 dd79e986b3279739 XMM09=0000000000000000 00007f5ae1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001a00 RDI=0000000000001a01 RBP=00000000000003f8 RSP=ffffc90004f7e9f0
R8 =ffff888020df8237 R9 =1ffff110041bf046 R10=dffffc0000000000 R11=ffffffff854ef730
R12=dffffc0000000000 R13=ffffffff99af98fe R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef7ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff3cd4a16c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc4f34ffc8 CR3=0000000110b62000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5ae1e12e53
XMM06=0000000000000000 00007f5ae1e12e4d XMM07=0000000000000000 00007f5ae1e12e61
XMM08=0000000000000000 00007f5ae1e12ee7 XMM09=0000000000000000 00007f5ae1e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
