last executing test programs:

4.607967637s ago: executing program 1 (id=3616):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x2, 0x8, &(0x7f00000002c0)="b800", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0)

4.422148008s ago: executing program 1 (id=3618):
r0 = perf_event_open(&(0x7f0000000b80)={0x2, 0xc4, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x400, 0x4000000, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e1204000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee500"/108, 0x6c}, {&(0x7f0000000500)="25108a32c7d4bdc542b8c9df6ceb70b094f1e124718e5504a6e20a2895b019f167c9c90e183174336e9df0dec10458f6dae623de224d1419522327262183f661e5c8531eac5b457ac2259030eb2539a1bb2b826d8818253b001e679d26b392fe43082e83d84c3f8755b2d34a", 0x6c}], 0x2}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540))
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0000e80d9324fdef48c0007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r4, 0x0, 0xffffffffffffff9e, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000000f80000000000000180000000000000000000000000000009500000000ef00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x94)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r10 = getpid()
r11 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x3, 0xd, 0x6, 0x0, 0x9, 0x40, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0x6}, 0xa, 0x101, 0x5, 0x9, 0x14f, 0x8000, 0x8f, 0x0, 0xd, 0x0, 0x6}, r9, 0x5, r0, 0x6)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7bffffff}, r10, 0xffffffffffffffff, r11, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

2.848209148s ago: executing program 0 (id=3633):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x800, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1404, 0x200, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x840)

2.759427231s ago: executing program 0 (id=3634):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="3504000041000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00400000619f4684a5acb559efbe59c4c7de8aa1fe1af8bc9922fc5a800e21796d78c6d12cd7f2d8ea5a60e3d085a95c66917102db2747df0b4afa305310558509b7bbcef9548b0885c97e01fd2e62113ee01cf2a50d32ddedfb97653b5641ccc02a3ec8c26b86e43e60e70fd461e3a9df9a20829142a1869f52cfba727aa62bf3e7a07bb75454763e7949930ef60974b97790fdfe6d6a011291c32cf3c30c21717c480876db3524a92d25e7842b1bce235caaff1c174817d5c4cd38f6d1f3117c91de4a5456b7123d7c4828a58edc75628b2ce3a21ca9e804330e7672fd62e5bff162cb51e487dc", 0x112}, {&(0x7f0000000a80)="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", 0x323}], 0x2}, 0x404c080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000006600)=ANY=[@ANYBLOB="b4000000000000007910000000000000620200000000000095000500edffffff2fd0dbfb93ba165e345a9a8317297fe0fbedeebc8636b5b44a62030a4ef448fc39d4e0dc9b369c51cec9d5c4ba41098c8b83501937f48d239b08ae30637e7339e7b001127160115df6c713acd8e665ab15f7ce8c429a0694440000acba8362ac13bd824f33f98a7819fdb685a763a5969a0ca7b02104eb65bb6bcc5f9bee9e95009c2e"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xb5, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000006fcebefd2cfb4153f00200000000200000000"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114a000000000200000000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x6, 0x1, &(0x7f0000000980)=@raw=[@exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x4004040)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x0, r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

1.774484394s ago: executing program 0 (id=3637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x800})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x20000884)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x8c180500, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0xc, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000008c00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socket$packet(0x11, 0x3, 0x300)
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x1e, 0x1f, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2a0b, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002b00), 0x10, 0x34f800}, 0x94)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000010401013100000000000000000004000500010001"], 0x24}}, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4bc}, 0x1, 0x0, 0x0, 0x8000}, 0x20008880)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x20040000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x28, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x881}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x280}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)

1.329547887s ago: executing program 1 (id=3639):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000fba6d911e133c5a96ca5d32638", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x3d, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x10665, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xffff, 0x7fffffff}, 0x201c, 0x9dd, 0x80000000, 0x6, 0x9, 0xf3a, 0x6, 0x0, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x10665, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xffff, 0x7fffffff}, 0x201c, 0x9dd, 0x80000000, 0x6, 0x9, 0xf3a, 0x6, 0x0, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000600)={<r3=>r0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0)
close(r4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x258, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_USERDATA={0xad, 0x7, 0x1, 0x0, "bd357491462de97058906ec4ec1c9eb46b99a658b3a879f265d39aeac49a5a8cc70f2c111a842ff1aabcf765906ff3387ebd36b6760416f01b8192ea46716f42a8d54b9a47121c6a76f9dc3b73270f923466a7c9a99948ff558e22ff04aa5b2c4129ec8253db72a74abba836eee326367aa167698ca423b668c777f641a56dc7b17e6e24485c19ea4e053153b128a64915c664649e91e9aec0d967413b3c68c50bf115764ca8d8abdf"}, @NFTA_RULE_USERDATA={0xb3, 0x7, 0x1, 0x0, "f8133157ae3dee42bf4a7d833da24139b2fe5962c39b45f10a40633d1296c6d28718e150e9e7518dda67f0ed4e7a0a4b2e6a55ced0b0000ff10df66ff86576010189d10d4ad5ba545e1a7394efa25fddcd6e1bde3950110e0a01589b092448b9e7b3fcf4dd86fadb6c0ff14f8b02e1afd471ebff84a5ee6e0ba4dfa2c50c22a727f07e6833a29d0c0fccfeb1512825a1de69d96c04451a481af17243a28d4ab7aa89dca60b4bb0df50694c970d52e3"}, @NFTA_RULE_USERDATA={0xc7, 0x7, 0x1, 0x0, "67b9d9f8529d02066e977e9789c3d25c136146e7c9beb14e21fe7d827ac0448097b951c761c459cb28ca93b2b542122472aa60784bb856fd9cf58bef3bf016ce19a5821d84d3108314e9ab7d36d127e7c448bfa16642d06590eae84fb0ab1e9ea9e8a5e3b8db334a6ff2879d2920e35d47855a519fb505dac85706ad75319af1e75edbb91957d536c4850ba9b73d999217dc9d8f6bf6c196025d7010d668d945400793da44a054a3651885775ccbb38d2dcc8607fa78f33a282197498295f5d33292af"}]}, @NFT_MSG_DELCHAIN={0xc0, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54e3d6d1}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9974}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_USERDATA={0x34, 0xc, "39f1c45a71b33be3b2a836c80dd09fdf4dfd552f8ee9a33cb4bee0668fd15c32b8e4895ece6e33a51d887e6cb0561297"}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x494}, 0x1, 0x0, 0x0, 0x8800}, 0x8c1)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) (async)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000cccb04eea2ac7819a68460000"], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000cccb04eea2ac7819a68460000"], 0x48)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r7], 0x24}}, 0x0)

1.329056599s ago: executing program 1 (id=3640):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e20601c8f5f200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000033000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000000000000000000000000000002000100"], 0x140}}, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000700)=@in6={0xa, 0x4e24, 0x8000, @empty, 0x7}, 0x80, 0x0}, 0x24000000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.139832711s ago: executing program 0 (id=3641):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000002f40)=""/4095, 0x38, 0xfff, 0x8}, 0x20)

1.138398172s ago: executing program 0 (id=3642):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000001900007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x86652da295c9ade7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=<r5=>0xffffffffffffffff, 0x37, 0x0, 0x5, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x3, 0x6, 0x1, 0xe, 0x20, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @generic={0x0, 0x8, 0xa, 0x9, 0x7}, @map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x495}]}, &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x4, 0x9, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r7, r5, r7, r5, r3, r1], &(0x7f0000000b40)=[{0x5, 0x1, 0x9, 0x8}], 0x10, 0x5}, 0x94)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r7, r4, 0x3, 0x0, r4, @void, @value=r11, @void, @void, r6}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, r2, 0x15, 0x0, 0x0, @void, @value=r0, @void, @void, r6}, 0x20)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="000000df8eef83e62a91c9f3f08f63af900000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000040000000795000000000000003460c5e2dcca74ac18ebc95d5adb8b2f6b344af4d13785f4912e28819698818b7706cc288dc2a0378bd8b1e4f758daff54bd365f93846ff9abd1365b4a979a5544e1286aeed2d6fe3fc959a528289823f2b4205a83d11d9443e4118c151120f550dd3d01583fa0e50f0f9f6c7bf520dc641b6cf2a13c44e7d991367c20"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10)
r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0)
openat$cgroup_subtree(r15, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES32=r17, @ANYRES32=r13, @ANYBLOB='.\x00\x00\x00!\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="496572dd93fe1dd722d771d009a0696d0f3d148b87880d2be0a7024626bfe0c3db1586bfd709c79cbc9b8fd129b67313e95c435f4000309ed198a8318c952b70300bd12173276313ea2900000000b132f518a6f7898205e8d30fb84038534b36a2e9fc127b3fb6db42e54e99d87217009a93efca2e6c92de545ad99766cbe4c46c23e7b23fd5abd520665f950b9031369a43e637e515810e29d9b4afedb9e49dd811be4fff1826255bbf047de8e864a80a307d5619b430033bfda635218d296a0c8915acbb1076cbebd74821040049e2813f02142a92", @ANYRES32=r8, @ANYRES64=r6], 0x20)

680.022883ms ago: executing program 2 (id=3644):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000009000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000140004800800014000000003080002402de8387c28000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb0}, 0x1, 0x1800000000000000, 0x0, 0x20004000}, 0x8004)

556.72779ms ago: executing program 2 (id=3645):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400}, 0x90)

405.845129ms ago: executing program 1 (id=3646):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121600000000009500000000000000ca13b6beba23d0a9ebfa4870c20a0e2be53ddd6be44915dbe5a3e86d6f83469ff642a339f2d3607d0d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg$inet_sctp(r1, &(0x7f0000001840)={&(0x7f00000005c0)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x4}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000600)="a6d0335a8f26e6f6779cf6d56e73054a840b68646931160bdbb7dbb85cd734f8be9095c26074e8ef38c6e8b5645f7db203aa47ae4d2dbccbe03db68e8a8f526a8d85d38e6cf86049", 0x48}], 0x3, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xff}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0x6, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x3, 0x8, 0x1000, 0xfffffff8, 0xb35, 0x8, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x9, 0x0, 0x751b, 0x552, 0x6, 0x7, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0xc000, 0x0, 0x3ff, 0xff}}], 0x110, 0x8040}, 0x20000010)
sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000101000000080000619993d35cb23a55280000000000000001000000110900e534344b6647d4770020000000000000aba23fbf00090000005d4e551a4a27cdd8008ae19d93002000"], 0x60}, 0x8009)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0900000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0], 0x50)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, 0x0, 0xfdef)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xfffffffffffffff5)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r5, 0x0, 0x0)
socket$kcm(0x22, 0x2, 0x21)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x8004b706, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

199.425665ms ago: executing program 2 (id=3647):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x41100, 0x65, '\x00', 0x0, @fallback=0x5}, 0x94)

196.865467ms ago: executing program 2 (id=3648):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x4000, 0x0}, 0x40000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xffffffffffffff38}, 0x48)

68.916522ms ago: executing program 2 (id=3649):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, 0x0, 0x0)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'hugetlb'}]}, 0x1c)

68.591869ms ago: executing program 2 (id=3650):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0)

67.554215ms ago: executing program 0 (id=3651):
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
socket$kcm(0x2c, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r2, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000073515b00000000008510000002000000852000000200ddca1c17e9355260fedf168f98a96c000095000000000000009500a505000000004de5dee0efd707744579ef5ddebc6bcc7e102584e94c13950ba4300179cbb6e118a84e6e4a3d6f3b69addf27d50cc842"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x47, 0x74, &(0x7f0000000280)="39041c7a7095abf1dbea9ce47dea2f1f036138c458aeb37810921b1836a321151a13e2ded4b208b345ae27c12cabac94574780dd175c16a9f24145025d03ea97ff38ceef21ed69", &(0x7f0000000300)=""/116, 0xa22b, 0x0, 0x9, 0x1c, &(0x7f0000000000)="01070c9c093fb21a07", &(0x7f0000000380)="c57c08179b934e8d7605ee02bd5f69a3b5017481ade1717b5e21a678", 0x0, 0x0, 0x3ff}, 0x50)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500000008000b40000000003400048030000180080001006c6f670024000280060002403a000000080003400000000906000140000500000800050daf6c1340000000000900010073797a300000000014000000110001000000000000000000"], 0xd0}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80820}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)

0s ago: executing program 1 (id=3652):
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf960569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2000000000000000585451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4fffae2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b00a13e3f0e21c882c66f4f05ffb6d95e07de02205fca4f18a2eb5b63e45d01"], 0x0, 0xffff934c, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xbdc}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e20601c8f5f200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000033000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000000000000000000000000000002000100"], 0x140}}, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.net/syz1\x00', 0x200002, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000700)=@in6={0xa, 0x4e24, 0x8000, @empty, 0x7}, 0x80, 0x0}, 0x24000000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

k: 32 bytes leftover after parsing attributes in process `syz.0.437'.
[  100.155396][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.440'.
[  100.385351][ T7243] netlink: 'syz.1.442': attribute type 11 has an invalid length.
[  100.454648][ T7248] netlink: 196 bytes leftover after parsing attributes in process `syz.1.442'.
[  100.478361][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'.
[  100.482019][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'.
[  101.043888][ T7270] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.450'.
[  101.921566][ T7308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.464'.
[  102.030371][ T7314] @: renamed from bond_slave_0 (while UP)
[  102.256525][ T7330] netlink: 'syz.2.470': attribute type 1 has an invalid length.
[  102.299270][ T7330] netlink: 'syz.2.470': attribute type 2 has an invalid length.
[  103.078118][ T7348] netlink: 'syz.2.476': attribute type 21 has an invalid length.
[  104.628707][ T7421] __nla_validate_parse: 5 callbacks suppressed
[  104.628721][ T7421] netlink: 56 bytes leftover after parsing attributes in process `syz.0.497'.
[  104.634124][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.497'.
[  104.829778][ T7425] syzkaller0: entered promiscuous mode
[  104.831666][ T7425] syzkaller0: entered allmulticast mode
[  106.628332][ T7456] netlink: 67 bytes leftover after parsing attributes in process `syz.1.508'.
[  106.651340][ T7460] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.751646][ T7462] netlink: 124 bytes leftover after parsing attributes in process `syz.2.511'.
[  106.754601][ T7462] netlink: 124 bytes leftover after parsing attributes in process `syz.2.511'.
[  106.873744][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'.
[  107.191739][ T7487] lo speed is unknown, defaulting to 1000
[  107.194794][ T7487] lo speed is unknown, defaulting to 1000
[  107.207604][ T7487] lo speed is unknown, defaulting to 1000
[  107.246746][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  107.298186][ T7487] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  107.432365][ T7487] lo speed is unknown, defaulting to 1000
[  107.531215][ T7487] lo speed is unknown, defaulting to 1000
[  107.577033][ T7487] lo speed is unknown, defaulting to 1000
[  108.024956][ T7515] netlink: 10 bytes leftover after parsing attributes in process `syz.0.529'.
[  108.409480][ T7532] lo speed is unknown, defaulting to 1000
[  108.957206][ T7564] delete_channel: no stack
[  108.962422][ T7564] delete_channel: no stack
[  108.972860][ T7564] netlink: 'syz.1.546': attribute type 10 has an invalid length.
[  108.976262][ T7564] macvlan1: entered allmulticast mode
[  108.978513][ T7564] veth1_vlan: entered allmulticast mode
[  108.981022][ T7564] `: Device macvlan1 is up. Set it down before adding it as a team port
[  109.677607][ T7571] syz.1.549 uses obsolete (PF_INET,SOCK_PACKET)
[  109.682268][ T7571] netlink: 'syz.1.549': attribute type 11 has an invalid length.
[  109.687439][ T7571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.549'.
[  109.736831][ T7573] netlink: 'syz.2.550': attribute type 40 has an invalid length.
[  109.740932][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'.
[  109.917072][ T5236] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  110.030980][ T5236] Bluetooth: hci0: ISO packet for unknown connection handle 45
[  111.234842][ T7594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.405217][ T7605] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.560'.
[  111.564443][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  111.569198][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'.
[  111.589106][ T7620] netlink: 'syz.1.564': attribute type 29 has an invalid length.
[  111.592676][ T7620] netlink: 'syz.1.564': attribute type 29 has an invalid length.
[  111.620037][ T7620] netlink: 'syz.1.564': attribute type 21 has an invalid length.
[  111.624069][ T7620] netlink: 168 bytes leftover after parsing attributes in process `syz.1.564'.
[  111.821040][ T7634] netlink: 'syz.0.568': attribute type 39 has an invalid length.
[  112.701737][ T7674] netlink: 'syz.0.582': attribute type 4 has an invalid length.
[  112.877081][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.585'.
[  114.129530][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.591'.
[  114.133452][ T7707] netlink: 60 bytes leftover after parsing attributes in process `syz.2.591'.
[  114.431586][ T7718] netlink: 'syz.0.595': attribute type 2 has an invalid length.
[  114.434282][ T7718] netlink: 120 bytes leftover after parsing attributes in process `syz.0.595'.
[  114.960604][ T7735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'.
[  114.970824][ T7735] netlink: 'syz.1.599': attribute type 4 has an invalid length.
[  114.981914][ T7735] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.599'.
[  115.430784][ T7741] netlink: 17 bytes leftover after parsing attributes in process `syz.1.601'.
[  115.434616][ T7741] netlink: zone id is out of range
[  115.480108][ T7741] netlink: zone id is out of range
[  115.481948][ T7741] netlink: zone id is out of range
[  115.483943][ T7741] netlink: zone id is out of range
[  115.500591][ T7741] netlink: zone id is out of range
[  115.502981][ T7741] netlink: zone id is out of range
[  115.505392][ T7741] netlink: zone id is out of range
[  115.600537][ T7741] netlink: zone id is out of range
[  115.603869][ T7741] netlink: zone id is out of range
[  115.617283][ T7741] netlink: zone id is out of range
[  117.019139][ T7765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.609'.
[  117.094937][ T7770] netlink: 'syz.2.611': attribute type 29 has an invalid length.
[  117.099882][ T7770] netlink: 'syz.2.611': attribute type 29 has an invalid length.
[  117.103208][ T7770] netlink: 'syz.2.611': attribute type 29 has an invalid length.
[  117.113499][ T7770] netlink: 'syz.2.611': attribute type 29 has an invalid length.
[  117.466949][ T7782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.615'.
[  117.470859][ T7779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.615'.
[  117.474933][ T7782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.615'.
[  117.490059][ T7781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.615'.
[  118.318593][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[  118.657184][ T7822] netlink: 'syz.0.630': attribute type 29 has an invalid length.
[  118.663301][ T7822] netlink: 'syz.0.630': attribute type 29 has an invalid length.
[  118.670158][ T7822] netlink: 'syz.0.630': attribute type 29 has an invalid length.
[  118.677900][ T7822] netlink: 'syz.0.630': attribute type 29 has an invalid length.
[  118.723485][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.631'.
[  118.793426][ T7827] : entered promiscuous mode
[  119.822153][ T7848] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  119.972312][ T7856] validate_nla: 2 callbacks suppressed
[  119.972411][ T7856] netlink: 'syz.0.642': attribute type 29 has an invalid length.
[  119.983683][ T7856] netlink: 'syz.0.642': attribute type 29 has an invalid length.
[  120.024063][ T7856] netlink: 'syz.0.642': attribute type 29 has an invalid length.
[  120.219813][ T7865] netlink: 'syz.0.642': attribute type 29 has an invalid length.
[  120.280587][ T7869] syzkaller0: entered promiscuous mode
[  120.283154][ T7869] syzkaller0: entered allmulticast mode
[  120.320543][ T7871] __nla_validate_parse: 2 callbacks suppressed
[  120.320573][ T7871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.647'.
[  121.668176][ T7887] netlink: 332 bytes leftover after parsing attributes in process `syz.1.653'.
[  121.872676][ T7887] syzkaller0: entered promiscuous mode
[  121.874456][ T7887] syzkaller0: entered allmulticast mode
[  123.260063][ T7911] lo speed is unknown, defaulting to 1000
[  123.374799][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'.
[  123.382058][ T7929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'.
[  123.397304][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'.
[  123.439912][ T7927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.662'.
[  123.705383][ T7946] netlink: 'syz.1.669': attribute type 2 has an invalid length.
[  123.743032][ T7949] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.670'.
[  125.135404][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'.
[  125.633746][ T7988] netlink: 'syz.0.683': attribute type 25 has an invalid length.
[  125.638205][ T7988] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.683'.
[  125.899933][ T7993] netlink: 'syz.0.684': attribute type 3 has an invalid length.
[  125.903247][ T7993] netlink: 'syz.0.684': attribute type 2 has an invalid length.
[  125.916180][ T7993] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.684'.
[  126.126932][ T7999] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  126.615019][ T8004] netlink: 'syz.0.688': attribute type 29 has an invalid length.
[  126.626844][ T8004] netlink: 'syz.0.688': attribute type 29 has an invalid length.
[  126.636616][ T8004] netlink: 'syz.0.688': attribute type 29 has an invalid length.
[  126.680924][ T8004] netlink: 'syz.0.688': attribute type 29 has an invalid length.
[  126.759463][ T8004] netlink: 'syz.0.688': attribute type 2 has an invalid length.
[  126.762843][ T8004] netlink: 'syz.0.688': attribute type 9 has an invalid length.
[  126.773527][ T8011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.691'.
[  126.794712][ T8004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.688'.
[  127.032426][ T8015] netlink: 'syz.2.692': attribute type 2 has an invalid length.
[  127.287165][ T8023] net_ratelimit: 13 callbacks suppressed
[  127.287180][ T8023] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  127.935320][ T8036] netlink: 14 bytes leftover after parsing attributes in process `syz.0.699'.
[  127.953432][ T8036] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.699'.
[  128.094241][ T8036] netlink: 10 bytes leftover after parsing attributes in process `syz.0.699'.
[  129.128903][ T8043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.702'.
[  129.199955][ T5236] Bluetooth: hci0: ISO packet for unknown connection handle 3327
[  129.203314][ T5236] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  129.451070][ T8042] lo speed is unknown, defaulting to 1000
[  130.018058][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.708'.
[  130.022164][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'.
[  130.129197][ T8065] IPv6: NLM_F_CREATE should be specified when creating new route
[  130.367553][ T8059] delete_channel: no stack
[  130.561046][ T8070] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320
[  131.245262][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'.
[  131.249044][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'.
[  131.335263][ T8106] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.720'.
[  131.342184][ T8106] netlink: 'syz.0.720': attribute type 21 has an invalid length.
[  131.345301][ T8106] netlink: 164 bytes leftover after parsing attributes in process `syz.0.720'.
[  131.350527][ T8106] dvmrp1: tun_chr_ioctl cmd 1074025677
[  131.353052][ T8106] dvmrp1: linktype set to 287
[  132.516234][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.519010][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.299868][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'.
[  133.303096][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'.
[  133.494255][ T8126] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.725'.
[  133.502682][ T8126] netlink: 'syz.2.725': attribute type 64 has an invalid length.
[  133.506042][ T8126] netlink: 'syz.2.725': attribute type 5 has an invalid length.
[  133.597382][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.728'.
[  134.416654][ T8159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.737'.
[  134.421239][ T8159] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  134.890537][ T8147] lo speed is unknown, defaulting to 1000
[  135.033517][ T8176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.742'.
[  135.202792][ T8183] sctp: [Deprecated]: syz.2.743 (pid 8183) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.202792][ T8183] Use struct sctp_sack_info instead
[  135.662611][ T8197] syzkaller0: entered promiscuous mode
[  135.664385][ T8197] syzkaller0: entered allmulticast mode
[  137.152855][ T8214] netlink: 'syz.2.755': attribute type 29 has an invalid length.
[  137.159032][ T8215] netlink: 'syz.2.755': attribute type 29 has an invalid length.
[  137.164258][ T8216] netlink: 'syz.2.755': attribute type 29 has an invalid length.
[  137.362389][ T8201] lo speed is unknown, defaulting to 1000
[  137.541751][ T8229] __nla_validate_parse: 5 callbacks suppressed
[  137.541770][ T8229] netlink: 10 bytes leftover after parsing attributes in process `syz.2.759'.
[  137.801209][ T5853] Bluetooth: hci2: Malformed HCI Event
[  137.898157][ T8249] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.763'.
[  137.900992][ T8249] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  137.903563][ T8249] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  137.996024][ T8258] netlink: 10 bytes leftover after parsing attributes in process `syz.1.767'.
[  138.868172][ T8279] netlink: 10 bytes leftover after parsing attributes in process `syz.0.775'.
[  140.020133][ T8301] netlink: 'syz.2.783': attribute type 21 has an invalid length.
[  140.030829][ T8302] netlink: 'syz.2.783': attribute type 21 has an invalid length.
[  140.301106][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.787'.
[  140.404487][ T8320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.788'.
[  140.410734][ T8324] netlink: 44 bytes leftover after parsing attributes in process `syz.1.788'.
[  140.415207][ T8320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.788'.
[  141.293528][ T8344] netlink: 'syz.1.794': attribute type 1 has an invalid length.
[  141.422795][ T8353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.798'.
[  141.457915][ T8355] netlink: 60 bytes leftover after parsing attributes in process `syz.1.799'.
[  141.461041][ T8355] unsupported nlmsg_type 40
[  141.932244][ T8371] netlink: 'syz.1.806': attribute type 4 has an invalid length.
[  143.396096][ T8390] __nla_validate_parse: 1 callbacks suppressed
[  143.396107][ T8390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.813'.
[  143.403574][ T8390] netlink: 10 bytes leftover after parsing attributes in process `syz.2.813'.
[  143.510721][ T8396] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[  143.513208][ T8396] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.816'.
[  143.709826][ T8405] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.618135][ T8433] netlink: 830 bytes leftover after parsing attributes in process `syz.2.831'.
[  144.896148][ T8452] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.838'.
[  144.899901][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.0.838'.
[  146.331154][ T8467] syzkaller0: entered promiscuous mode
[  146.334976][ T8467] syzkaller0: entered allmulticast mode
[  146.436525][ T8468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.923499][ T8424] lo speed is unknown, defaulting to 1000
[  148.166094][ T8459] lo speed is unknown, defaulting to 1000
[  148.478120][ T8484] netlink: 'syz.2.850': attribute type 10 has an invalid length.
[  149.439616][ T8493] : port 1(veth0_to_bridge) entered blocking state
[  149.442497][ T8493] : port 1(veth0_to_bridge) entered disabled state
[  149.444815][ T8493] veth0_to_bridge: entered allmulticast mode
[  149.476454][ T8493] veth0_to_bridge: entered promiscuous mode
[  149.771877][ T8499] netlink: 10 bytes leftover after parsing attributes in process `syz.2.855'.
[  151.574280][ T8537] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  151.577931][ T8537] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.865'.
[  152.381339][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'.
[  152.481322][ T8557] netlink: 'syz.1.873': attribute type 1 has an invalid length.
[  152.604929][ T8566] netlink: 'syz.1.876': attribute type 27 has an invalid length.
[  152.610917][ T8566] netlink: 164 bytes leftover after parsing attributes in process `syz.1.876'.
[  152.621379][ T8569] netlink: 'syz.2.877': attribute type 1 has an invalid length.
[  152.628569][ T8569] netlink: 'syz.2.877': attribute type 21 has an invalid length.
[  152.631918][ T8569] netlink: 'syz.2.877': attribute type 20 has an invalid length.
[  152.739350][ T8576] netlink: 'syz.2.880': attribute type 21 has an invalid length.
[  152.742520][ T8576] netlink: 128 bytes leftover after parsing attributes in process `syz.2.880'.
[  152.765201][ T8576] netlink: 3 bytes leftover after parsing attributes in process `syz.2.880'.
[  152.777609][ T8576] netlink: 198328 bytes leftover after parsing attributes in process `syz.2.880'.
[  152.781277][ T8576] netlink: 'syz.2.880': attribute type 1 has an invalid length.
[  152.796056][ T8576] netlink: 'syz.2.880': attribute type 2 has an invalid length.
[  152.870208][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.880'.
[  153.610433][ T8614] netlink: 'syz.2.891': attribute type 29 has an invalid length.
[  154.059392][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[  154.062710][ T8631] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  154.712907][ T8633] netlink: 10 bytes leftover after parsing attributes in process `syz.1.897'.
[  154.932750][ T8645] __nla_validate_parse: 1 callbacks suppressed
[  154.932844][ T8645] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.903'.
[  154.933769][ T8653] netlink: 216 bytes leftover after parsing attributes in process `syz.0.904'.
[  155.398959][ T8678] netlink: 156 bytes leftover after parsing attributes in process `syz.2.914'.
[  155.481978][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[  155.596616][ T8689] : entered promiscuous mode
[  155.764130][ T8694] syzkaller0: tun_chr_ioctl cmd 2147767520
[  156.824636][ T8699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'.
[  156.828548][ T8698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'.
[  156.831625][ T8701] validate_nla: 13 callbacks suppressed
[  156.831638][ T8701] netlink: 'syz.0.920': attribute type 25 has an invalid length.
[  156.844132][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.0.920'.
[  156.915112][ T8716] netlink: 76 bytes leftover after parsing attributes in process `syz.0.923'.
[  157.049561][ T8726] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.926'.
[  157.118695][ T8727] netlink: 180 bytes leftover after parsing attributes in process `syz.1.926'.
[  158.017407][ T8738] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  158.775889][ T8742] netlink: 'syz.0.933': attribute type 29 has an invalid length.
[  158.779742][ T8743] netlink: 'syz.0.933': attribute type 29 has an invalid length.
[  158.787896][ T8744] netlink: 'syz.0.933': attribute type 29 has an invalid length.
[  158.850972][ T8747] cgroup: fork rejected by pids controller in /syz1
[  159.066474][ T8763] netlink: 'syz.0.941': attribute type 29 has an invalid length.
[  159.070739][ T8763] netlink: 'syz.0.941': attribute type 29 has an invalid length.
[  159.074751][ T8763] netlink: 'syz.0.941': attribute type 29 has an invalid length.
[  159.604612][ T8775] netlink: 'syz.2.948': attribute type 29 has an invalid length.
[  159.611502][ T8775] netlink: 'syz.2.948': attribute type 29 has an invalid length.
[  159.864158][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.868677][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.875067][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.889822][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.894638][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  160.019550][ T8794] __nla_validate_parse: 4 callbacks suppressed
[  160.019603][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  160.117246][ T8791] lo speed is unknown, defaulting to 1000
[  160.809575][ T8808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.958'.
[  160.954299][ T8815] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.960'.
[  161.327266][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'.
[  161.336774][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'.
[  161.408299][ T8791] chnl_net:caif_netlink_parms(): no params data found
[  161.511659][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.514370][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.518097][ T8791] bridge_slave_0: entered allmulticast mode
[  161.521599][ T8791] bridge_slave_0: entered promiscuous mode
[  161.527036][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.529443][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.531961][ T8791] bridge_slave_1: entered allmulticast mode
[  161.535187][ T8791] bridge_slave_1: entered promiscuous mode
[  161.569571][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.577494][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.630582][ T8791] team0: Port device team_slave_0 added
[  161.636487][ T8791] team0: Port device team_slave_1 added
[  161.687045][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.689225][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.700215][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.705030][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.709869][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.724095][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.795323][ T8791] hsr_slave_0: entered promiscuous mode
[  161.799297][ T8791] hsr_slave_1: entered promiscuous mode
[  161.801954][ T8791] debugfs: 'hsr0' already exists in 'hsr'
[  161.804492][ T8791] Cannot create hsr debugfs directory
[  161.840321][ T8835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.966'.
[  161.866071][ T8835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.966'.
[  161.881337][ T8835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.966'.
[  161.919061][ T8844] validate_nla: 5 callbacks suppressed
[  161.919074][ T8844] netlink: 'syz.2.969': attribute type 10 has an invalid length.
[  161.945812][ T5236] Bluetooth: hci2: command tx timeout
[  162.003632][ T8791] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.061004][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'.
[  162.064631][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.973'.
[  162.112280][ T8791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.202006][ T8791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.288731][ T8791] batman_adv: batadv0: Removing interface: netdevsim0
[  162.312241][ T8791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.401162][ T8876] lo speed is unknown, defaulting to 1000
[  162.453934][ T8791] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  162.464077][ T8889] netlink: 'syz.2.981': attribute type 16 has an invalid length.
[  162.466029][ T8791] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  162.488778][ T8791] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  162.555700][ T8791] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  162.561571][ T5853] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  162.654708][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.673544][ T8791] 8021q: adding VLAN 0 to HW filter on device team0
[  162.689903][ T3139] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.692547][ T3139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.699396][ T3139] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.701815][ T3139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.860919][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.903890][ T8791] veth0_vlan: entered promiscuous mode
[  162.912768][ T8791] veth1_vlan: entered promiscuous mode
[  162.942797][ T8791] veth0_macvtap: entered promiscuous mode
[  162.950052][ T8791] veth1_macvtap: entered promiscuous mode
[  162.962962][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.972527][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.984271][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.991603][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.999175][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.004745][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.061203][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.062082][ T8921] hsr0: entered promiscuous mode
[  163.063705][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.127104][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.131021][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.469024][ T8938] netlink: 'syz.1.995': attribute type 10 has an invalid length.
[  163.479002][ T8938] veth1_macvtap: left promiscuous mode
[  163.734753][ T8945] netlink: 'syz.0.998': attribute type 39 has an invalid length.
[  164.026093][ T5853] Bluetooth: hci2: command tx timeout
[  164.181598][ T8954] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  165.100631][ T8969] netlink: 'syz.2.1006': attribute type 2 has an invalid length.
[  165.108612][ T8969] __nla_validate_parse: 25 callbacks suppressed
[  165.108629][ T8969] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1006'.
[  165.122612][ T8969] nbd: must specify an index to disconnect
[  165.323899][ T8982] netlink: 'syz.2.1011': attribute type 10 has an invalid length.
[  165.326750][ T8982] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1011'.
[  165.924677][ T9007] netlink: 'syz.2.1018': attribute type 29 has an invalid length.
[  165.934509][ T9007] netlink: 'syz.2.1018': attribute type 29 has an invalid length.
[  165.938241][ T9007] netlink: 'syz.2.1018': attribute type 29 has an invalid length.
[  166.106238][ T5853] Bluetooth: hci2: command tx timeout
[  166.833429][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1029'.
[  167.015102][ T9053] validate_nla: 6 callbacks suppressed
[  167.015120][ T9053] netlink: 'syz.2.1030': attribute type 21 has an invalid length.
[  167.023668][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1030'.
[  168.073203][ T9063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1034'.
[  168.090945][ T9066] netlink: 'syz.1.1035': attribute type 2 has an invalid length.
[  168.094271][ T9066] netlink: 'syz.1.1035': attribute type 8 has an invalid length.
[  168.098688][ T9066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'.
[  168.194655][ T5853] Bluetooth: hci2: command tx timeout
[  168.195391][ T9070] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1036'.
[  169.054126][ T9080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1041'.
[  169.199242][ T9084] can: request_module (can-proto-0) failed.
[  169.470549][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.773114][ T9110] netlink: 'syz.2.1053': attribute type 2 has an invalid length.
[  169.779018][ T9110] netlink: 'syz.2.1053': attribute type 1 has an invalid length.
[  169.782526][ T9110] netlink: 'syz.2.1053': attribute type 8 has an invalid length.
[  169.790018][ T9110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1053'.
[  171.278469][ T9141] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1061'.
[  171.311434][ T9136] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1061'.
[  172.767760][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'.
[  173.537941][ T9202] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  173.541441][ T9202] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  173.544795][ T9202] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  173.550853][ T9202] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  173.849268][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'.
[  173.852777][ T9218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'.
[  173.856858][ T9217] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1085'.
[  173.985096][ T9221] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  174.177598][ T9226] netlink: 'syz.1.1088': attribute type 10 has an invalid length.
[  174.211187][ T9226] batman_adv: batadv0: Adding interface: netdevsim0
[  174.213997][ T9226] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.226903][ T9226] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  174.297581][ T9227] netlink: 'syz.0.1089': attribute type 6 has an invalid length.
[  175.441541][ T5874] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.853154][ T9272] netlink: 'syz.0.1104': attribute type 10 has an invalid length.
[  175.868866][ T9272] bond0: (slave bond_slave_0): Releasing backup interface
[  176.187757][ T9276] netlink: 'syz.2.1106': attribute type 29 has an invalid length.
[  176.540386][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'.
[  176.638544][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'.
[  177.003989][ T9286] netlink: 'syz.2.1110': attribute type 1 has an invalid length.
[  177.309813][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'.
[  180.319878][ T9311] netlink: 'syz.2.1118': attribute type 1 has an invalid length.
[  180.322586][ T9311] netlink: 'syz.2.1118': attribute type 1 has an invalid length.
[  180.676510][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  180.676556][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  180.791252][ T9327] netlink: 'syz.2.1122': attribute type 2 has an invalid length.
[  180.794381][ T9327] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  180.809937][ T9327] netlink: 'syz.2.1122': attribute type 8 has an invalid length.
[  180.814301][ T9327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1122'.
[  181.169507][ T9359] netlink: 'syz.2.1130': attribute type 4 has an invalid length.
[  181.199669][ T9359] netlink: 'syz.2.1130': attribute type 10 has an invalid length.
[  181.207117][ T9359] 8021q: adding VLAN 0 to HW filter on device `
[  181.211269][ T9359] bond0: (slave `): Enslaving as an active interface with an up link
[  181.475860][ T9377] can: request_module (can-proto-5) failed.
[  181.479338][ T9377] netlink: 'syz.2.1137': attribute type 9 has an invalid length.
[  181.485869][ T9377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'.
[  181.629880][ T9393] syzkaller0: entered promiscuous mode
[  181.631752][ T9393] syzkaller0: entered allmulticast mode
[  182.758138][ T9425] netlink: 'syz.2.1148': attribute type 39 has an invalid length.
[  183.453117][ T9434] netlink: 'syz.0.1157': attribute type 5 has an invalid length.
[  183.456697][ T9434] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1157'.
[  183.531981][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'.
[  183.647749][ T9451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1162'.
[  183.687027][ T9452] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1163'.
[  183.764662][ T5859] bridge_slave_1: left allmulticast mode
[  183.768173][ T5859] bridge_slave_1: left promiscuous mode
[  183.771539][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.778425][ T5859] bridge_slave_0: left allmulticast mode
[  183.780230][ T5859] bridge_slave_0: left promiscuous mode
[  183.782079][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.923298][ T9463] blkio.reset_stats is deprecated
[  184.203981][ T5859] `: Port device bond0 removed
[  184.208917][ T5859] bond0 (unregistering): (slave 5@): Releasing backup interface
[  184.216186][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.221973][ T5859] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  184.227647][ T5859] bond0 (unregistering): Released all slaves
[  184.494064][ T5859] : left promiscuous mode
[  184.506786][ T9477] bond_slave_1: mtu less than device minimum
[  184.599297][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'.
[  184.701127][ T9494] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  184.815085][ T9496] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1177'.
[  184.820660][ T9496] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1177'.
[  184.887562][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1179'.
[  185.054765][ T9503] netlink: 824 bytes leftover after parsing attributes in process `syz.1.1179'.
[  185.086159][ T5859] hsr_slave_0: left promiscuous mode
[  185.105459][ T5859] hsr_slave_1: left promiscuous mode
[  185.112776][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.136339][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.165049][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.174736][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.552259][ T5859] veth1_macvtap: left promiscuous mode
[  185.555072][ T5859] veth0_macvtap: left promiscuous mode
[  185.561820][ T5859] veth1_vlan: left allmulticast mode
[  185.564464][ T5859] veth1_vlan: left promiscuous mode
[  185.570458][ T5859] veth0_vlan: left promiscuous mode
[  186.024637][ T5859] ` (unregistering): Port device team_slave_1 removed
[  186.068499][ T5859] ` (unregistering): Port device team_slave_0 removed
[  186.074626][   T28] smc: removing ib device syz!
[  186.779838][ T9550] validate_nla: 6 callbacks suppressed
[  186.779861][ T9550] netlink: 'syz.1.1192': attribute type 4 has an invalid length.
[  186.786522][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'.
[  187.415144][ T9569] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  187.565421][ T9573] netlink: 'syz.2.1198': attribute type 21 has an invalid length.
[  187.570548][ T9573] netlink: 'syz.2.1198': attribute type 4 has an invalid length.
[  187.578309][ T9573] netlink: 'syz.2.1198': attribute type 5 has an invalid length.
[  188.784265][ T9620] netlink: 'syz.2.1214': attribute type 2 has an invalid length.
[  188.788716][ T9620] __nla_validate_parse: 7 callbacks suppressed
[  188.788730][ T9620] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1214'.
[  188.794444][ T9620] nbd: must specify a device to reconfigure
[  188.891361][ T9629] netlink: 'syz.0.1218': attribute type 11 has an invalid length.
[  188.893854][ T9629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1218'.
[  188.977234][ T9638] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1221'.
[  189.463887][ T9653] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1228'.
[  189.540844][ T9651] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1227'.
[  189.725647][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'.
[  189.728755][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1232'.
[  189.731708][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1232'.
[  189.736992][ T9668] netlink: 'syz.1.1232': attribute type 3 has an invalid length.
[  189.739762][ T9668] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1232'.
[  189.826800][ T5853] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  189.834998][ T9670] netlink: 'syz.0.1233': attribute type 13 has an invalid length.
[  189.838078][ T9670] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1233'.
[  190.297828][ T9685] netlink: 'syz.2.1238': attribute type 1 has an invalid length.
[  191.799065][ T9739] @: renamed from bond_slave_0
[  191.817242][ T9739] netlink: 'syz.2.1254': attribute type 21 has an invalid length.
[  191.820089][ T9739] netlink: 'syz.2.1254': attribute type 4 has an invalid length.
[  192.149221][ T9752] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  192.298389][ T9754] netlink: 'syz.1.1261': attribute type 13 has an invalid length.
[  192.351072][ T9757] netlink: 'syz.1.1261': attribute type 13 has an invalid length.
[  192.401570][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.404733][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.527818][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.552217][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.760405][ T5874] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.763263][ T5874] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.777800][ T5874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.785606][ T5874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.807516][ T9773] netlink: 'syz.2.1266': attribute type 4 has an invalid length.
[  192.829490][ T9783] netlink: 'syz.0.1268': attribute type 1 has an invalid length.
[  193.684839][ T9824] netlink: 'syz.1.1279': attribute type 12 has an invalid length.
[  193.824797][ T9828] __nla_validate_parse: 11 callbacks suppressed
[  193.824815][ T9828] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1280'.
[  193.831514][ T9828] tc_dump_action: action bad kind
[  193.974043][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.976927][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.076902][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1281'.
[  194.176910][ T9841] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1283'.
[  194.298513][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'.
[  194.301814][ T9851] openvswitch: netlink: Flow actions attr not present in new flow.
[  195.017459][ T9879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.142231][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'.
[  195.154216][ T9887] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  195.528351][ T9898] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1303'.
[  196.858267][ T9913] netlink: 56847 bytes leftover after parsing attributes in process `syz.2.1307'.
[  196.923361][ T9919] netlink: 'syz.2.1309': attribute type 2 has an invalid length.
[  196.926128][ T9919] netlink: 'syz.2.1309': attribute type 9 has an invalid length.
[  196.928660][ T9919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1309'.
[  197.026031][ T5853] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  198.194541][ T9931] netlink: 'syz.1.1313': attribute type 1 has an invalid length.
[  198.224297][ T9933] netlink: 'syz.0.1314': attribute type 1 has an invalid length.
[  198.227512][ T9933] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1314'.
[  199.067289][ T5853] Bluetooth: hci2: command tx timeout
[  199.164234][ T9953] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1321'.
[  199.269153][ T9963] netlink: 'syz.0.1324': attribute type 8 has an invalid length.
[  199.271722][ T9963] netlink: 'syz.0.1324': attribute type 6 has an invalid length.
[  199.274237][ T9963] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1324'.
[  199.338259][ T9966] lo speed is unknown, defaulting to 1000
[  200.274040][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'.
[  200.342526][T10009] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1337'.
[  200.517902][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1341'.
[  200.782958][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'.
[  200.921203][T10029] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  201.053249][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'.
[  201.106895][T10031] netlink: 'syz.1.1345': attribute type 11 has an invalid length.
[  201.209165][T10035] netlink: 8044 bytes leftover after parsing attributes in process `syz.1.1346'.
[  201.279889][T10036] openvswitch: netlink: Duplicate or invalid key (type 0).
[  201.282858][T10036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.829745][T10050] netlink: 'syz.1.1349': attribute type 4 has an invalid length.
[  202.353940][T10057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1351'.
[  203.213288][T10070] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1355'.
[  205.686311][T10136] __nla_validate_parse: 2 callbacks suppressed
[  205.686329][T10136] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1372'.
[  205.700214][T10136] netlink: 'syz.0.1372': attribute type 10 has an invalid length.
[  205.712666][T10136] veth0_vlan: left promiscuous mode
[  205.715624][T10136] veth0_vlan: entered promiscuous mode
[  205.720485][T10136] team0: Device veth0_vlan failed to register rx_handler
[  205.805189][T10145] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1372'.
[  205.815201][T10145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1372'.
[  206.043357][ T5853] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  206.054470][T10164] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1382'.
[  206.141281][T10168] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1385'.
[  206.149253][T10168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.696549][T10190] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1392'.
[  207.115465][T10217] netlink: 'syz.2.1399': attribute type 21 has an invalid length.
[  207.390443][T10230] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1403'.
[  207.406807][T10230] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1403'.
[  208.759843][T10253] netlink: 'syz.1.1412': attribute type 1 has an invalid length.
[  208.762536][T10253] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  208.765079][T10253] netlink: 'syz.1.1412': attribute type 7 has an invalid length.
[  208.769772][T10253] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1412'.
[  208.772726][T10253] netlink: 101636 bytes leftover after parsing attributes in process `syz.1.1412'.
[  208.779779][T10253] netlink: 'syz.1.1412': attribute type 1 has an invalid length.
[  208.787980][T10253] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  208.791176][T10253] netlink: 'syz.1.1412': attribute type 7 has an invalid length.
[  209.242966][T10293] netlink: 'syz.2.1425': attribute type 39 has an invalid length.
[  209.753270][ T5236] Bluetooth: hci0: ISO packet for unknown connection handle 255
[  209.911160][T10321] netlink: 'syz.0.1434': attribute type 28 has an invalid length.
[  211.134642][T10343] __nla_validate_parse: 7 callbacks suppressed
[  211.134657][T10343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1441'.
[  211.392731][T10362] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1449'.
[  211.397125][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.400882][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.404642][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.449183][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.453013][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.457649][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.461563][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  211.465460][T10356] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1446'.
[  213.300519][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.303165][T10425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.310332][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.313383][T10425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.490519][T10437] validate_nla: 1 callbacks suppressed
[  213.490834][T10437] netlink: 'syz.2.1470': attribute type 40 has an invalid length.
[  215.892621][T10525] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  216.846388][T10552] netlink: 'syz.1.1502': attribute type 13 has an invalid length.
[  216.933040][T10558] __nla_validate_parse: 65 callbacks suppressed
[  216.933062][T10558] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1504'.
[  217.232758][T10572] lo speed is unknown, defaulting to 1000
[  217.299959][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'.
[  217.303596][T10581] netlink: 'syz.0.1511': attribute type 10 has an invalid length.
[  217.308183][T10581] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1511'.
[  217.311627][T10581] bond0: entered promiscuous mode
[  217.314723][T10581] bond_slave_1: entered promiscuous mode
[  217.317756][T10581] bridge0: port 3(bond0) entered blocking state
[  217.320493][T10581] bridge0: port 3(bond0) entered disabled state
[  217.323196][T10581] bond0: entered allmulticast mode
[  217.325434][T10581] bond_slave_1: entered allmulticast mode
[  217.330096][T10581] bridge0: port 3(bond0) entered blocking state
[  217.332981][T10581] bridge0: port 3(bond0) entered forwarding state
[  217.347209][T10581] netlink: 'syz.0.1511': attribute type 4 has an invalid length.
[  217.349858][T10581] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1511'.
[  217.464949][T10585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1512'.
[  217.757330][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1516'.
[  217.812025][T10601] lo speed is unknown, defaulting to 1000
[  218.191174][T10618] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1523'.
[  218.393284][T10628] pim6reg1: entered allmulticast mode
[  218.927626][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'.
[  218.931476][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'.
[  219.108535][T10655] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1535'.
[  220.152900][T10685] tc_dump_action: action bad kind
[  220.369853][T10698] IPv6: NLM_F_CREATE should be specified when creating new route
[  220.402873][T10698] syzkaller0: entered promiscuous mode
[  220.404738][T10698] syzkaller0: entered allmulticast mode
[  221.771678][T10706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.713411][T10730] __nla_validate_parse: 2 callbacks suppressed
[  222.713427][T10730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1563'.
[  222.849398][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1564'.
[  223.181339][T10749] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1567'.
[  224.471618][T10766] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.1573'.
[  225.045425][T10776] netlink: 'syz.1.1577': attribute type 21 has an invalid length.
[  225.050034][T10776] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1577'.
[  225.053219][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'.
[  226.249219][T10794] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1583'.
[  226.306526][T10799] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1584'.
[  226.336052][T10801] netlink: 'syz.1.1585': attribute type 4 has an invalid length.
[  226.342068][T10801] netlink: 'syz.1.1585': attribute type 16 has an invalid length.
[  226.344953][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1585'.
[  227.898611][T10816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1588'.
[  228.521107][T10831] : renamed from hsr0 (while UP)
[  228.942074][T10848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1598'.
[  229.090302][T10855] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1599'.
[  229.095266][T10855] openvswitch: netlink: Message has 6 unknown bytes.
[  229.144604][T10853] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.149359][T10853] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.176197][T10855] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1599'.
[  229.660080][T10869] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1603'.
[  229.999521][T10853] syz.0.1599 (10853) used greatest stack depth: 18704 bytes left
[  230.078537][T10883] netlink: 'syz.0.1608': attribute type 10 has an invalid length.
[  230.081904][T10883] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1608'.
[  230.092293][T10883] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  230.140614][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'.
[  231.465357][T10930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1623'.
[  231.469225][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1623'.
[  231.472714][T10930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1623'.
[  231.679204][ T5236] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[  232.643016][T10962] lo speed is unknown, defaulting to 1000
[  233.348792][T10996] __nla_validate_parse: 2 callbacks suppressed
[  233.348816][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'.
[  233.355061][T10996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'.
[  233.401881][T10996] netlink: 'syz.1.1643': attribute type 3 has an invalid length.
[  233.404937][T10996] netlink: 'syz.1.1643': attribute type 1 has an invalid length.
[  233.407736][T10996] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1643'.
[  233.483623][T11006] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'.
[  233.509864][T11005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'.
[  233.516966][T11006] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'.
[  233.527002][T11005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'.
[  233.868768][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'.
[  233.890226][T11010] delete_channel: no stack
[  233.993963][T11015] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  234.122626][T11025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1652'.
[  234.469148][T11042] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1657'.
[  234.474207][T11042] netlink: zone id is out of range
[  234.535364][T11042] netlink: zone id is out of range
[  234.537621][T11042] netlink: zone id is out of range
[  234.539519][T11042] netlink: zone id is out of range
[  234.546723][T11042] netlink: zone id is out of range
[  234.548860][T11042] netlink: zone id is out of range
[  234.550622][T11042] netlink: zone id is out of range
[  234.553612][T11042] netlink: zone id is out of range
[  234.558521][T11042] netlink: zone id is out of range
[  234.563398][T11042] netlink: zone id is out of range
[  235.666100][T11092] syzkaller0: entered promiscuous mode
[  235.668499][T11092] syzkaller0: entered allmulticast mode
[  239.681440][T11231] __nla_validate_parse: 8 callbacks suppressed
[  239.681459][T11231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1708'.
[  239.690575][T11228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1708'.
[  240.496776][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'.
[  240.500443][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'.
[  240.503947][T11263] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1718'.
[  240.531345][T11263] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.534398][T11263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.548140][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1718'.
[  240.554589][T11263] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1718'.
[  240.654469][T11271] net_ratelimit: 74 callbacks suppressed
[  240.654482][T11271] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  240.886447][T11287] netlink: 4220 bytes leftover after parsing attributes in process `syz.0.1726'.
[  240.903363][T11287] netlink: 'syz.0.1726': attribute type 10 has an invalid length.
[  241.162928][T11301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1729'.
[  241.394159][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'.
[  241.861213][T11315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.136352][T11330] netlink: 'syz.1.1739': attribute type 11 has an invalid length.
[  243.681567][T11385] netlink: 'syz.2.1754': attribute type 10 has an invalid length.
[  243.685309][T11385] veth0_vlan: left promiscuous mode
[  243.690191][T11385] veth0_vlan: entered promiscuous mode
[  243.698762][T11385] `: Device veth0_vlan failed to register rx_handler
[  244.788460][T11413] __nla_validate_parse: 5 callbacks suppressed
[  244.788523][T11413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1761'.
[  244.827591][T11413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1761'.
[  245.441312][T11421] netlink: 'syz.0.1765': attribute type 3 has an invalid length.
[  245.606812][T11425] netlink: 'syz.1.1767': attribute type 29 has an invalid length.
[  245.610444][T11425] netlink: 'syz.1.1767': attribute type 29 has an invalid length.
[  245.613945][T11425] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1767'.
[  245.632804][T11423] netlink: 'syz.0.1766': attribute type 10 has an invalid length.
[  245.693954][T11423] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  245.698992][T11423] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  245.712687][T11423] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  245.963198][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  246.356738][T11446] tc_dump_action: action bad kind
[  249.439303][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'.
[  249.456912][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1801'.
[  249.595596][   T33] audit: type=1107 audit(1755880900.400:2): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  249.672909][   T33] audit: type=1107 audit(1755880900.410:3): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  251.331072][T11578] openvswitch: netlink: Message has 8 unknown bytes.
[  252.160236][T11584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.371048][T11595] netlink: 'syz.0.1820': attribute type 2 has an invalid length.
[  252.373466][T11595] netlink: 'syz.0.1820': attribute type 4 has an invalid length.
[  252.376512][T11595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1820'.
[  253.266641][T11628] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  253.270044][T11628] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  253.983186][T11658] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1838'.
[  253.991399][T11656] lo speed is unknown, defaulting to 1000
[  254.142655][T11670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1841'.
[  254.645185][T11689] netlink: 'syz.1.1846': attribute type 10 has an invalid length.
[  254.704286][T11690] delete_channel: no stack
[  254.712532][T11690] delete_channel: no stack
[  254.798815][T11693] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1847'.
[  254.868988][T11692] C: renamed from team_slave_0
[  254.873668][T11692] netlink: 'syz.2.1847': attribute type 3 has an invalid length.
[  254.877786][T11692] netlink: 'syz.2.1847': attribute type 1 has an invalid length.
[  254.880617][T11692] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1847'.
[  254.883780][T11692] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  254.890295][T11693] : left promiscuous mode
[  254.999908][T11696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1848'.
[  255.018800][T11701] syzkaller0: entered promiscuous mode
[  255.020599][T11701] syzkaller0: entered allmulticast mode
[  255.089725][T11709] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1853'.
[  255.316641][T11716] tc_dump_action: action bad kind
[  255.391554][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.393607][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.536730][T11731] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1861'.
[  255.539755][T11731] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1861'.
[  255.815184][T11744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1863'.
[  257.510421][T11789] __nla_validate_parse: 36 callbacks suppressed
[  257.510442][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'.
[  257.524886][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'.
[  257.531573][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'.
[  257.540891][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'.
[  257.548889][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'.
[  257.553263][T11786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1879'.
[  257.604236][T11795] netlink: 'syz.1.1881': attribute type 10 has an invalid length.
[  257.607422][T11795] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1881'.
[  257.635042][T11798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1882'.
[  257.791321][T11811] netlink: 'syz.2.1887': attribute type 39 has an invalid length.
[  258.327457][T11815] delete_channel: no stack
[  258.464159][T11824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1890'.
[  258.492519][T11831] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1891'.
[  258.553087][T11834] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  258.609084][T11843] netlink: 'syz.0.1893': attribute type 10 has an invalid length.
[  258.654629][T11839] netlink: 'syz.2.1894': attribute type 27 has an invalid length.
[  258.654629][T11840] netlink: 'syz.2.1894': attribute type 27 has an invalid length.
[  258.768874][T11850] netlink: 'syz.1.1895': attribute type 11 has an invalid length.
[  263.142701][T11928] __nla_validate_parse: 9 callbacks suppressed
[  263.142715][T11928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1917'.
[  263.160763][T11928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1917'.
[  263.164674][T11928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1917'.
[  263.235351][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1919'.
[  263.246215][T11938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1919'.
[  263.606179][T11973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1931'.
[  264.452022][T11982] netlink: 'syz.2.1933': attribute type 1 has an invalid length.
[  264.455772][T11982] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1933'.
[  264.959270][T11998] lo speed is unknown, defaulting to 1000
[  265.174425][ T5236] Bluetooth: hci2: SCO packet too small
[  265.468157][T12018] netlink: 'syz.1.1944': attribute type 33 has an invalid length.
[  265.471599][T12018] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1944'.
[  265.562063][T12022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1945'.
[  265.734332][T12029] netlink: 'syz.0.1947': attribute type 3 has an invalid length.
[  265.737140][T12029] netlink: 192312 bytes leftover after parsing attributes in process `syz.0.1947'.
[  266.303740][T12060] netlink: 'syz.2.1956': attribute type 2 has an invalid length.
[  266.309910][T12060] netlink: 'syz.2.1956': attribute type 8 has an invalid length.
[  266.469970][T12076] : renamed from gre0
[  267.260167][T12081] netlink: 'syz.1.1961': attribute type 13 has an invalid length.
[  268.379053][T12106] netlink: 'syz.0.1969': attribute type 10 has an invalid length.
[  268.792975][T12128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.132729][T12145] lo speed is unknown, defaulting to 1000
[  269.258060][T12152] __nla_validate_parse: 6 callbacks suppressed
[  269.258079][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'.
[  269.426395][T12161] netlink: 'syz.2.1985': attribute type 10 has an invalid length.
[  269.434162][T12161] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  269.552840][T12164] syzkaller0: entered promiscuous mode
[  269.554724][T12164] syzkaller0: entered allmulticast mode
[  269.715326][T12175] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1990'.
[  271.324110][T12192] netlink: 'syz.0.1994': attribute type 27 has an invalid length.
[  271.325445][T12195] netlink: 'syz.2.1996': attribute type 9 has an invalid length.
[  271.644793][T12205] syzkaller0: entered promiscuous mode
[  271.649042][T12205] syzkaller0: entered allmulticast mode
[  271.654323][T12205] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  271.945871][T12223] IPv6: NLM_F_CREATE should be specified when creating new route
[  272.138231][T12237] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2010'.
[  272.227196][T12241] netlink: 'syz.0.2011': attribute type 29 has an invalid length.
[  272.232128][T12241] netlink: 'syz.0.2011': attribute type 29 has an invalid length.
[  272.236245][T12241] netlink: 'syz.0.2011': attribute type 29 has an invalid length.
[  272.239346][T12241] netlink: 'syz.0.2011': attribute type 29 has an invalid length.
[  272.712105][T12254] syzkaller0: entered promiscuous mode
[  272.714363][T12254] syzkaller0: entered allmulticast mode
[  273.067171][T12275] netlink: 'syz.0.2023': attribute type 7 has an invalid length.
[  273.316970][T12294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2029'.
[  273.379565][T12295] lo speed is unknown, defaulting to 1000
[  273.520517][ T5236] Bluetooth: hci2: ISO packet for unknown connection handle 1
[  274.214543][T12335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2040'.
[  274.293068][T12340] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.2042'.
[  274.299544][T12340] netlink: 62227 bytes leftover after parsing attributes in process `syz.0.2042'.
[  274.439319][T12354] netlink: 'syz.0.2046': attribute type 29 has an invalid length.
[  274.744961][T12372] netlink: 'syz.0.2051': attribute type 11 has an invalid length.
[  274.748487][T12372] netlink: 'syz.0.2051': attribute type 11 has an invalid length.
[  274.794436][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2052'.
[  274.798047][T12377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.828153][T12377] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2052'.
[  275.029848][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2055'.
[  275.095305][T12396] netlink: 'syz.1.2058': attribute type 1 has an invalid length.
[  275.098490][T12396] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2058'.
[  275.487435][T12412] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.2063'.
[  276.094032][T12435] netlink: 'syz.1.2071': attribute type 1 has an invalid length.
[  276.130675][T12437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2072'.
[  276.134150][T12437] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2072'.
[  276.307471][T12442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.393855][T12447] validate_nla: 2 callbacks suppressed
[  276.393873][T12447] netlink: 'syz.0.2074': attribute type 10 has an invalid length.
[  276.418837][T12447] 8021q: adding VLAN 0 to HW filter on device team0
[  276.424801][T12447] team0: entered promiscuous mode
[  276.427613][T12447] team_slave_0: entered promiscuous mode
[  276.430261][T12447] team_slave_1: entered promiscuous mode
[  276.433113][T12447] team0: entered allmulticast mode
[  276.435219][T12447] team_slave_0: entered allmulticast mode
[  276.438437][T12447] team_slave_1: entered allmulticast mode
[  276.442954][T12447] bond0: (slave team0): Enslaving as an active interface with an up link
[  276.583121][T12452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2076'.
[  276.586341][T12452] tc_dump_action: action bad kind
[  276.864538][T12465] netlink: 'syz.0.2081': attribute type 39 has an invalid length.
[  276.864550][T12466] netlink: 'syz.0.2081': attribute type 39 has an invalid length.
[  277.035213][T12471] netlink: 'syz.2.2082': attribute type 2 has an invalid length.
[  277.038528][T12471] netlink: 'syz.2.2082': attribute type 9 has an invalid length.
[  277.799853][T12525] netlink: 'syz.1.2100': attribute type 10 has an invalid length.
[  277.803889][T12525] team0: Device hsr_slave_0 failed to register rx_handler
[  278.192438][T12533] delete_channel: no stack
[  278.194673][T12533] delete_channel: no stack
[  278.661170][T12546] netlink: 'syz.1.2108': attribute type 27 has an invalid length.
[  278.974134][T12569] openvswitch: netlink: IP tunnel dst address not specified
[  279.407482][T12589] netlink: 'syz.2.2124': attribute type 27 has an invalid length.
[  279.410833][T12589] __nla_validate_parse: 6 callbacks suppressed
[  279.410848][T12589] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2124'.
[  279.455841][T12593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2126'.
[  279.486556][T12596] netlink: 'syz.2.2127': attribute type 10 has an invalid length.
[  279.489622][T12596] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2127'.
[  279.530762][T12598] syzkaller0: entered promiscuous mode
[  279.533145][T12598] syzkaller0: entered allmulticast mode
[  280.031096][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  280.033917][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'.
[  280.043444][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2130'.
[  281.255177][T12629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2136'.
[  281.395163][T12633] syzkaller0: entered promiscuous mode
[  281.406434][T12633] syzkaller0: entered allmulticast mode
[  281.863457][T12652] netlink: 'syz.1.2138': attribute type 21 has an invalid length.
[  281.866507][T12652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2138'.
[  282.130534][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'.
[  282.133990][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'.
[  283.078367][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  283.515728][T12652] netlink: 'syz.1.2138': attribute type 4 has an invalid length.
[  283.518923][T12652] netlink: 'syz.1.2138': attribute type 5 has an invalid length.
[  283.781498][T12651] lo speed is unknown, defaulting to 1000
[  283.871111][T12683] netlink: 'syz.0.2147': attribute type 16 has an invalid length.
[  283.919933][T12683] netlink: 'syz.0.2147': attribute type 13 has an invalid length.
[  284.060462][T12683] bridge0: port 3(bond0) entered disabled state
[  284.062583][T12683] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.065101][T12683] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.440875][ T5859] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.444594][ T5859] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.645547][ T5859] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.981413][T12702] __nla_validate_parse: 3 callbacks suppressed
[  284.981428][T12702] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2152'.
[  285.341540][T12711] netlink: 'syz.2.2156': attribute type 29 has an invalid length.
[  285.347540][T12711] netlink: 'syz.2.2156': attribute type 29 has an invalid length.
[  285.368316][T12711] netlink: 'syz.2.2156': attribute type 29 has an invalid length.
[  285.456550][T12717] netlink: 'syz.2.2156': attribute type 29 has an invalid length.
[  285.598366][T12720] netlink: 'syz.2.2158': attribute type 29 has an invalid length.
[  287.084499][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'.
[  287.864747][T12772] : entered promiscuous mode
[  288.103514][T12777] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2174'.
[  288.331919][T12792] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2178'.
[  288.801960][T12803] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2182'.
[  288.818440][T12803] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2182'.
[  289.645138][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1129456071 wd_nsec: 1129456327
[  289.751641][T12814] validate_nla: 1 callbacks suppressed
[  289.751788][T12814] netlink: 'syz.2.2185': attribute type 1 has an invalid length.
[  291.974385][T12824] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2188'.
[  292.011465][T12819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'.
[  293.451826][T12872] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2199'.
[  294.145267][T12879] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2201'.
[  294.653322][T12905] netlink: 'syz.2.2208': attribute type 21 has an invalid length.
[  294.659017][T12905] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2208'.
[  294.663324][T12905] netlink: 'syz.2.2208': attribute type 4 has an invalid length.
[  294.760170][T12910] netlink: 'syz.1.2209': attribute type 10 has an invalid length.
[  294.763255][T12910] team0: Device hsr_slave_0 failed to register rx_handler
[  295.087855][T12924] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2215'.
[  295.258174][T12932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2217'.
[  295.501457][T12946] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2222'.
[  295.534514][T12949] netlink: 'syz.2.2223': attribute type 10 has an invalid length.
[  295.768251][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2224'.
[  296.139068][T12964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2226'.
[  296.568451][T12979] netlink: 'syz.1.2233': attribute type 29 has an invalid length.
[  296.577501][T12979] netlink: 'syz.1.2233': attribute type 29 has an invalid length.
[  296.932402][T13001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  296.937273][T13001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  296.940589][T13001] hsr0: entered promiscuous mode
[  297.041688][T13003] __nla_validate_parse: 4 callbacks suppressed
[  297.041745][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'.
[  297.360840][T13017] netlink: 'syz.1.2246': attribute type 11 has an invalid length.
[  297.364359][T13017] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2246'.
[  297.374865][T13016] netlink: 'syz.1.2246': attribute type 11 has an invalid length.
[  297.379529][T13016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2246'.
[  297.509153][T13026] veth0: entered promiscuous mode
[  297.511431][T13026] veth0: entered allmulticast mode
[  297.560560][T13024] netlink: 'syz.0.2249': attribute type 29 has an invalid length.
[  297.583620][T13024] netlink: 'syz.0.2249': attribute type 29 has an invalid length.
[  297.589431][T13024] netlink: 'syz.0.2249': attribute type 29 has an invalid length.
[  297.656720][T13024] netlink: 'syz.0.2249': attribute type 29 has an invalid length.
[  298.621655][T13053] : entered promiscuous mode
[  298.623954][T13053] : entered allmulticast mode
[  298.714638][T13058] syzkaller0: entered promiscuous mode
[  298.719263][T13058] syzkaller0: entered allmulticast mode
[  298.884512][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'.
[  298.888201][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'.
[  300.271305][T13073] netlink: 'syz.0.2266': attribute type 21 has an invalid length.
[  300.473858][T13084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'.
[  300.621167][ T5853] Bluetooth: hci2: Malformed Event: 0x13
[  301.176814][T13105] netlink: 'syz.2.2278': attribute type 2 has an invalid length.
[  301.181381][T13105] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.185189][T13105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.323068][T13110] netlink: 'syz.1.2279': attribute type 2 has an invalid length.
[  301.326339][T13110] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2279'.
[  301.330177][T13110] nbd: must specify a device to reconfigure
[  301.362079][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'.
[  301.368065][T13112] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  301.371205][T13112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.026312][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'.
[  302.029102][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'.
[  302.141496][T13124] netlink: 'syz.0.2284': attribute type 1 has an invalid length.
[  302.147554][T13124] netlink: 'syz.0.2284': attribute type 1 has an invalid length.
[  302.933255][T13158] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2293'.
[  303.680978][T13178] syzkaller0: tun_chr_ioctl cmd 1074025677
[  303.682936][T13178] syzkaller0: linktype set to 801
[  303.851842][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'.
[  303.885397][T13195] @: renamed from bond_slave_0
[  303.888212][ T5853] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  303.888606][ T5853] Bluetooth: hci0: connection err: -111
[  304.644978][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'.
[  304.709508][T13214] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2310'.
[  306.477690][T13268] netlink: 'syz.1.2321': attribute type 39 has an invalid length.
[  306.613710][T13276] netlink: 'syz.0.2324': attribute type 21 has an invalid length.
[  306.632158][T13276] netlink: 'syz.0.2324': attribute type 1 has an invalid length.
[  306.644058][T13276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2324'.
[  306.873452][T13298] netlink: 'syz.0.2329': attribute type 9 has an invalid length.
[  306.881265][T13298] netlink: 146452 bytes leftover after parsing attributes in process `syz.0.2329'.
[  307.114614][T13314] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  307.133293][T13317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2335'.
[  307.137800][T13317] netlink: 'syz.1.2335': attribute type 11 has an invalid length.
[  308.167050][T13355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2347'.
[  309.013556][T13396] syzkaller0: tun_chr_ioctl cmd 1074812117
[  310.346985][T13447] netlink: 'syz.0.2376': attribute type 21 has an invalid length.
[  310.982096][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'.
[  311.333718][T13488] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2391'.
[  311.343976][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'.
[  311.349083][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'.
[  311.458143][T13489] netlink: 'syz.2.2391': attribute type 21 has an invalid length.
[  311.461437][T13489] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2391'.
[  311.752993][T13494] netlink: 'syz.2.2393': attribute type 1 has an invalid length.
[  311.756288][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'.
[  312.604524][T13515] @: renamed from veth0_vlan
[  313.931017][T13532] netlink: 'syz.0.2404': attribute type 4 has an invalid length.
[  313.935334][T13532] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2404'.
[  314.202504][T13464] Set syz1 is full, maxelem 65536 reached
[  314.582936][T13558] netlink: 'syz.0.2411': attribute type 7 has an invalid length.
[  314.768538][T13568] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2415'.
[  314.898997][T13581] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2420'.
[  314.962730][T13583] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2421'.
[  316.830628][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.833344][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.054451][T13652] netlink: 'syz.2.2443': attribute type 13 has an invalid length.
[  317.058781][T13652] netlink: 'syz.2.2443': attribute type 17 has an invalid length.
[  317.474812][T13652] sit0: left promiscuous mode
[  317.477913][T13652] sit0: left allmulticast mode
[  317.629269][T13652] bridge0: entered promiscuous mode
[  317.651293][T13652] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.676063][T13652] dummy0: entered promiscuous mode
[  317.702887][T13652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.712530][   T10] lo speed is unknown, defaulting to 1000
[  317.714754][   T10] syz2: Port: 1 Link ACTIVE
[  317.724057][T13652] syz.2.2443 (13652) used greatest stack depth: 17912 bytes left
[  318.608970][T13718] netlink: 'syz.0.2462': attribute type 39 has an invalid length.
[  318.634747][T13720] netlink: 'syz.1.2464': attribute type 2 has an invalid length.
[  318.640283][T13720] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2464'.
[  319.151629][T13735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2469'.
[  319.191753][T13737] openvswitch: netlink: EtherType 50a is less than min 600
[  319.261448][T13733] delete_channel: no stack
[  319.390932][T13755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2476'.
[  319.602167][T13781] netlink: 'syz.0.2483': attribute type 29 has an invalid length.
[  319.658771][T13786] lo speed is unknown, defaulting to 1000
[  319.731949][T13786] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  320.458595][T13809] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2491'.
[  320.807586][T13839] syzkaller0: entered promiscuous mode
[  320.809354][T13839] syzkaller0: entered allmulticast mode
[  321.830506][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2504'.
[  322.783178][T13871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2509'.
[  323.007732][T13878] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2513'.
[  324.102509][T13920] netlink: 'syz.2.2526': attribute type 10 has an invalid length.
[  324.110859][T13920] geneve1: entered promiscuous mode
[  324.113985][T13920] `: Port device geneve1 added
[  324.117878][ T5908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.121649][ T5908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.131190][ T5908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.156141][T13921] netlink: 'syz.2.2526': attribute type 29 has an invalid length.
[  324.160362][T13920] netlink: 'syz.2.2526': attribute type 29 has an invalid length.
[  324.262892][T13925] lo speed is unknown, defaulting to 1000
[  324.294756][T13927] netlink: 'syz.2.2527': attribute type 1 has an invalid length.
[  324.457508][T13936] lo speed is unknown, defaulting to 1000
[  324.527791][T13940] netlink: 'syz.2.2530': attribute type 1 has an invalid length.
[  324.531052][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'.
[  325.204485][T13982] netlink: 'syz.0.2545': attribute type 10 has an invalid length.
[  325.211765][T13982] dummy0: entered promiscuous mode
[  325.214094][T13982] dummy0: entered allmulticast mode
[  325.216718][T13982] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  325.956545][T14017] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2556'.
[  325.969955][T14017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.379478][T14035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.383440][T14035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  326.418870][T14036] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2563'.
[  326.434302][T14037] netlink: 'syz.2.2564': attribute type 29 has an invalid length.
[  326.468274][T14040] netlink: 'syz.0.2565': attribute type 10 has an invalid length.
[  326.645146][T14043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2566'.
[  326.775035][T14051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2569'.
[  327.040519][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2571'.
[  327.278672][T14061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2572'.
[  327.283031][T14061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2572'.
[  327.446228][T14066] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2574'.
[  327.487086][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2574'.
[  327.754129][T14073] netlink: 'syz.1.2576': attribute type 10 has an invalid length.
[  328.982705][T14115] netlink: 'syz.0.2589': attribute type 1 has an invalid length.
[  329.199490][T14112] syzkaller0: entered promiscuous mode
[  329.201582][T14112] syzkaller0: entered allmulticast mode
[  329.414550][T14130] netlink: 'syz.0.2593': attribute type 10 has an invalid length.
[  330.533460][T14136] __nla_validate_parse: 4 callbacks suppressed
[  330.533480][T14136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2595'.
[  330.714687][T14138] syzkaller0: entered promiscuous mode
[  330.718253][T14138] syzkaller0: entered allmulticast mode
[  330.861101][T14140] can: request_module (can-proto-5) failed.
[  330.866056][T14150] netlink: 'syz.2.2600': attribute type 16 has an invalid length.
[  330.866085][T14150] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2600'.
[  331.200411][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'.
[  332.496726][T14171] Set syz1 is full, maxelem 65536 reached
[  332.696757][T14183] syzkaller0: entered promiscuous mode
[  332.698554][T14183] syzkaller0: entered allmulticast mode
[  332.812954][T14201] netlink: 'syz.2.2618': attribute type 2 has an invalid length.
[  332.815680][T14201] netlink: 'syz.2.2618': attribute type 3 has an invalid length.
[  332.818045][T14201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2618'.
[  332.821126][T14205] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2617'.
[  332.825380][T14198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2617'.
[  332.929292][T14214] netlink: 'syz.0.2620': attribute type 10 has an invalid length.
[  332.936096][T14214] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2620'.
[  332.953426][T14214] 8021q: adding VLAN 0 to HW filter on device team0
[  332.979063][T14214] bond0: (slave team0): Releasing backup interface
[  332.990715][T14214] team0: left allmulticast mode
[  332.992421][T14214] team_slave_0: left allmulticast mode
[  332.996246][T14214] team_slave_1: left allmulticast mode
[  333.013128][T14218] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2622'.
[  333.017271][T14218] netlink: zone id is out of range
[  333.019221][T14218] netlink: zone id is out of range
[  333.021358][T14218] netlink: zone id is out of range
[  333.023477][T14218] netlink: zone id is out of range
[  333.029211][T14218] netlink: zone id is out of range
[  333.031744][T14218] netlink: zone id is out of range
[  333.033367][T14214] bridge0: port 4(team0) entered blocking state
[  333.033784][T14218] netlink: zone id is out of range
[  333.033902][T14218] netlink: zone id is out of range
[  333.037945][T14214] bridge0: port 4(team0) entered disabled state
[  333.039953][T14218] netlink: zone id is out of range
[  333.043250][T14214] team0: entered allmulticast mode
[  333.052334][T14214] team_slave_0: entered allmulticast mode
[  333.054527][T14214] team_slave_1: entered allmulticast mode
[  333.628559][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'.
[  333.638365][T14257] netlink: 'syz.1.2634': attribute type 37 has an invalid length.
[  333.659878][T14252] netlink: 'syz.2.2633': attribute type 10 has an invalid length.
[  334.469554][T14275] netlink: 'syz.2.2640': attribute type 10 has an invalid length.
[  335.108005][T14285] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  335.177356][T14305] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2647'.
[  335.312960][T14313] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  335.317947][T14313] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  335.324766][T14313] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  335.335454][T14313] netlink: 'syz.2.2650': attribute type 29 has an invalid length.
[  336.113653][T14342] netlink: 'syz.2.2659': attribute type 11 has an invalid length.
[  336.116541][T14342] __nla_validate_parse: 3 callbacks suppressed
[  336.116549][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'.
[  336.887458][T14385] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2673'.
[  337.113389][T14390] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  337.127120][T14390] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  337.239298][T14393] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  337.486575][T14393] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  337.739788][T14409] team0: left allmulticast mode
[  337.742159][T14409] team_slave_0: left allmulticast mode
[  337.744342][T14409] team_slave_1: left allmulticast mode
[  337.748232][T14409] team0: left promiscuous mode
[  337.750305][T14409] team_slave_0: left promiscuous mode
[  337.752679][T14409] team_slave_1: left promiscuous mode
[  337.755238][T14409] bridge0: port 4(team0) entered disabled state
[  337.776852][T14409] team0: Cannot enslave team device to itself
[  338.091017][T14424] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2687'.
[  338.219834][T14426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2688'.
[  339.605200][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  339.649076][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'.
[  339.706621][T14489] validate_nla: 6 callbacks suppressed
[  339.706637][T14489] netlink: 'syz.1.2708': attribute type 10 has an invalid length.
[  339.717737][T14489] macvlan1: entered allmulticast mode
[  339.723690][T14489] veth1_vlan: entered allmulticast mode
[  339.728040][T14489] team0: Port device macvlan1 added
[  340.626504][T14537] netlink: 'syz.0.2724': attribute type 10 has an invalid length.
[  340.630108][T14537] 8021q: adding VLAN 0 to HW filter on device team0
[  340.633924][T14537] team0: entered promiscuous mode
[  340.636145][T14537] team_slave_0: entered promiscuous mode
[  340.638580][T14537] team_slave_1: entered promiscuous mode
[  340.641239][T14537] team0: entered allmulticast mode
[  340.643432][T14537] team_slave_0: entered allmulticast mode
[  340.645789][T14537] team_slave_1: entered allmulticast mode
[  340.647899][T14537] bond0: (slave team0): Enslaving as an active interface with an up link
[  340.908172][T14544] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2727'.
[  341.128112][T14554] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2731'.
[  341.597569][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'.
[  342.276321][T14578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2739'.
[  342.667698][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'.
[  342.705003][T14601] netlink: 'syz.1.2748': attribute type 2 has an invalid length.
[  342.708374][T14601] netlink: 'syz.1.2748': attribute type 2 has an invalid length.
[  342.710733][T14601] netlink: 'syz.1.2748': attribute type 2 has an invalid length.
[  342.715399][T14601] netlink: 'syz.1.2748': attribute type 2 has an invalid length.
[  342.746823][T14604] net_ratelimit: 78 callbacks suppressed
[  342.746843][T14604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.787406][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2750'.
[  342.869788][T14602] syzkaller0: entered promiscuous mode
[  342.872341][T14602] syzkaller0: entered allmulticast mode
[  342.898212][T14601] lo speed is unknown, defaulting to 1000
[  343.180947][T14620] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2753'.
[  344.121914][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2763'.
[  345.071063][T14668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2770'.
[  345.074340][T14668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2770'.
[  345.080360][T14668] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2770'.
[  345.101704][T14668] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.117055][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.123251][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.128589][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.135137][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.141404][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.145152][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.158200][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.197120][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  345.202058][T14669] netlink: 'syz.1.2770': attribute type 29 has an invalid length.
[  346.537623][T14674] __nla_validate_parse: 30 callbacks suppressed
[  346.537641][T14674] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.2771'.
[  346.749818][T14690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2777'.
[  347.311694][T14723] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2784'.
[  347.317040][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'.
[  347.987254][T14747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2792'.
[  348.007816][T14748] sctp: [Deprecated]: syz.0.2790 (pid 14748) Use of int in max_burst socket option deprecated.
[  348.007816][T14748] Use struct sctp_assoc_value instead
[  348.275819][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2794'.
[  348.470658][T14769] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  348.599919][T14772] netlink: 201660 bytes leftover after parsing attributes in process `syz.2.2798'.
[  348.749238][T14782] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2801'.
[  349.122382][T14804] x_tables: (null)_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 16
[  349.492946][T14813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2809'.
[  350.653339][T14811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2809'.
[  350.693046][T14822] validate_nla: 7 callbacks suppressed
[  350.693061][T14822] netlink: 'syz.2.2813': attribute type 12 has an invalid length.
[  350.732772][T14824] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  351.775705][T14873] __nla_validate_parse: 7 callbacks suppressed
[  351.775723][T14873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2831'.
[  352.124490][T14881] netlink: 'syz.2.2834': attribute type 7 has an invalid length.
[  352.440992][T14892] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2837'.
[  353.415302][T14901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2839'.
[  353.743839][T14923] lo speed is unknown, defaulting to 1000
[  353.795346][T14934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2846'.
[  354.251444][T14950] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2851'.
[  354.389679][T14959] netlink: 'syz.0.2855': attribute type 11 has an invalid length.
[  354.393143][T14959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2855'.
[  354.656136][T14985] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2862'.
[  354.778483][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2865'.
[  354.792259][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2865'.
[  355.272519][T15024] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2874'.
[  356.037072][T15049] netlink: 'syz.2.2881': attribute type 29 has an invalid length.
[  356.054296][T15049] netlink: 'syz.2.2881': attribute type 29 has an invalid length.
[  356.076073][T15049] netlink: 'syz.2.2881': attribute type 29 has an invalid length.
[  356.092433][T15049] netlink: 'syz.2.2881': attribute type 29 has an invalid length.
[  356.168090][T15051] netlink: 'syz.2.2881': attribute type 2 has an invalid length.
[  356.170976][T15051] netlink: 'syz.2.2881': attribute type 9 has an invalid length.
[  356.874724][T15078] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  356.889985][T15078] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  357.298027][T15100] netlink: 'syz.1.2900': attribute type 27 has an invalid length.
[  357.300540][T15100] netlink: 'syz.1.2900': attribute type 3 has an invalid length.
[  357.303236][T15100] __nla_validate_parse: 1 callbacks suppressed
[  357.303243][T15100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2900'.
[  358.102276][T15129] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2908'.
[  358.186245][T15134] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2911'.
[  358.969617][T15175] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2926'.
[  359.390532][T15190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2931'.
[  359.661166][T15198] nft_compat: unsupported protocol 0
[  359.663961][T15198] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2933'.
[  360.055930][T15215] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2940'.
[  360.200723][T15210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2939'.
[  360.736235][T15245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2948'.
[  360.811487][T15223] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2943'.
[  361.156458][T15258] validate_nla: 2 callbacks suppressed
[  361.156477][T15258] netlink: 'syz.2.2953': attribute type 10 has an invalid length.
[  361.161844][T15258] geneve1: left promiscuous mode
[  361.209221][T15259] bpf: Bad value for 'gid'
[  361.440828][T15258] bond0: (slave `): Releasing backup interface
[  361.452527][T15258] ` (unregistering): Port device C removed
[  361.458724][T15258] ` (unregistering): Port device team_slave_1 removed
[  361.472690][T15258] ` (unregistering): Port device geneve1 removed
[  361.500067][ T5859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.504052][ T5859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.509894][ T5859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.334136][ T5853] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  362.334191][ T5853] Bluetooth: hci0: connection err: -111
[  362.661599][T15320] __nla_validate_parse: 2 callbacks suppressed
[  362.661621][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2973'.
[  362.813209][T15332] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  362.946533][T15331] delete_channel: no stack
[  363.060389][T15343] netlink: 464 bytes leftover after parsing attributes in process `syz.2.2979'.
[  363.332872][T15372] netlink: 'syz.0.2988': attribute type 29 has an invalid length.
[  363.515024][T15380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.564870][T15385] veth0_vlan: left promiscuous mode
[  363.567892][T15385] veth0_vlan: entered promiscuous mode
[  363.570229][T15385] veth0_vlan: entered allmulticast mode
[  363.610979][T15387] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.2994'.
[  363.729938][T15394] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2996'.
[  363.759203][T15390] netlink: 'syz.0.2995': attribute type 21 has an invalid length.
[  363.763034][T15390] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2995'.
[  363.768514][T15390] netlink: 'syz.0.2995': attribute type 4 has an invalid length.
[  363.900284][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'.
[  363.904769][T15396] netlink: 125 bytes leftover after parsing attributes in process `syz.2.2996'.
[  363.909682][T15396] netlink: 142 bytes leftover after parsing attributes in process `syz.2.2996'.
[  363.914147][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'.
[  363.929918][T15396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2996'.
[  364.199984][T15398] netlink: 'syz.1.2997': attribute type 2 has an invalid length.
[  364.199984][T15399] netlink: 'syz.1.2997': attribute type 2 has an invalid length.
[  364.200016][T15398] netlink: 'syz.1.2997': attribute type 3 has an invalid length.
[  364.202744][T15399] netlink: 'syz.1.2997': attribute type 3 has an invalid length.
[  364.974395][T15435] netlink: 'syz.2.3007': attribute type 21 has an invalid length.
[  364.977244][T15435] netlink: 'syz.2.3007': attribute type 4 has an invalid length.
[  365.237095][T15444] lo speed is unknown, defaulting to 1000
[  365.596530][T15450] syzkaller0: entered promiscuous mode
[  365.602753][T15450] syzkaller0: entered allmulticast mode
[  367.290035][T15464] netlink: zone id is out of range
[  367.292155][T15464] netlink: zone id is out of range
[  367.294308][T15464] netlink: zone id is out of range
[  367.296749][T15464] netlink: zone id is out of range
[  367.298812][T15464] netlink: zone id is out of range
[  367.301010][T15464] netlink: zone id is out of range
[  367.303154][T15464] netlink: zone id is out of range
[  367.306299][T15464] netlink: del zone limit has 4 unknown bytes
[  368.070502][T15459] @: renamed from veth0_vlan (while UP)
[  368.497046][T15477] cgroup: fork rejected by pids controller in /syz0
[  368.611903][T15525] delete_channel: no stack
[  368.614039][T15525] delete_channel: no stack
[  368.672868][T15531] __nla_validate_parse: 5 callbacks suppressed
[  368.672883][T15531] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3026'.
[  369.069322][T15537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3030'.
[  369.077082][T15537] netlink: 'syz.1.3030': attribute type 4 has an invalid length.
[  369.081221][T15537] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3030'.
[  369.345168][T15560] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3038'.
[  369.374910][T15563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3039'.
[  369.388557][T15562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.469183][T15570] lo speed is unknown, defaulting to 1000
[  373.709601][T15602] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3047'.
[  374.774616][T15604] Can't find ip_set type bitmap:ip,mac
[  374.814509][T15612] netlink: 'syz.1.3049': attribute type 10 has an invalid length.
[  374.839465][T15612] 8021q: adding VLAN 0 to HW filter on device team0
[  374.843174][T15612] bond0: (slave team0): Enslaving as an active interface with an up link
[  375.464344][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'.
[  375.474520][T15655] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3061'.
[  376.172633][T15669] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3065'.
[  378.039392][T15698] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3070'.
[  378.100051][T15698] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3070'.
[  378.104121][T15698] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.3070'.
[  378.108365][T15698] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3070'.
[  378.271132][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  378.274074][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  378.502879][T15718] netlink: 'syz.0.3077': attribute type 4 has an invalid length.
[  378.507246][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3077'.
[  379.108338][T15755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3086'.
[  379.173343][T15750] syzkaller1: tun_chr_ioctl cmd 1074025677
[  379.177821][T15750] syzkaller1: linktype set to 823
[  379.230507][ T5853] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  379.565253][T15764] netlink: 'syz.1.3095': attribute type 1 has an invalid length.
[  379.774248][T15778] lo speed is unknown, defaulting to 1000
[  379.892432][T15785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3099'.
[  379.903998][T15785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3099'.
[  380.103683][T15785] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  380.500393][T15795] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3103'.
[  380.824319][T15805] sctp: [Deprecated]: syz.0.3106 (pid 15805) Use of int in maxseg socket option.
[  380.824319][T15805] Use struct sctp_assoc_value instead
[  381.098038][T15817] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3110'.
[  381.508619][T15823] lo speed is unknown, defaulting to 1000
[  381.768904][T15838] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.3117'.
[  381.827563][T15849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3120'.
[  382.154090][T15870] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.3126'.
[  383.620915][T15882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3130'.
[  383.625364][T15882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3130'.
[  383.633057][T15882] netlink: 'syz.0.3130': attribute type 10 has an invalid length.
[  383.668522][T15884] netlink: 'syz.2.3131': attribute type 1 has an invalid length.
[  383.873986][T15899] netlink: 'syz.0.3136': attribute type 21 has an invalid length.
[  383.932977][T15901] netlink: 'syz.1.3138': attribute type 10 has an invalid length.
[  383.937156][T15901] team0: Device veth1_vlan is already a lower device of the team interface
[  384.001202][T15903] syzkaller0: entered promiscuous mode
[  384.003130][T15903] syzkaller0: entered allmulticast mode
[  386.949038][T15944] __nla_validate_parse: 3 callbacks suppressed
[  386.949070][T15944] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3150'.
[  386.988640][T15944] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3150'.
[  386.991553][T15944] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.3150'.
[  386.995065][T15944] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3150'.
[  387.397453][T15955] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3154'.
[  387.580502][T15960] netlink: 'syz.0.3156': attribute type 3 has an invalid length.
[  387.589591][T15960] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.3156'.
[  387.611715][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'.
[  387.657541][T15960] : entered promiscuous mode
[  388.044757][T15974] netlink: 'syz.0.3161': attribute type 1 has an invalid length.
[  388.196705][T15979] C: renamed from team_slave_0
[  388.200188][T15979] netlink: 'syz.0.3163': attribute type 1 has an invalid length.
[  388.202745][T15979] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3163'.
[  388.354321][T15987] : entered promiscuous mode
[  388.366384][T15985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3166'.
[  388.483338][T15989] lo speed is unknown, defaulting to 1000
[  388.536848][T15999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3168'.
[  388.580019][ T5853] Bluetooth: hci0: ISO packet for unknown connection handle 3327
[  388.582629][ T5853] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  388.585213][ T5853] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  389.891777][T16042] netlink: 'syz.2.3184': attribute type 39 has an invalid length.
[  390.631644][T16091] netlink: 'syz.0.3201': attribute type 10 has an invalid length.
[  390.887033][T16108] netlink: 'syz.1.3207': attribute type 10 has an invalid length.
[  391.024825][T16108] bond0: (slave bond_slave_0): Releasing backup interface
[  392.509740][T16145] netlink: 'syz.2.3219': attribute type 6 has an invalid length.
[  392.513749][T16145] __nla_validate_parse: 23 callbacks suppressed
[  392.513878][T16145] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3219'.
[  392.750691][T16164] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3225'.
[  392.767650][T16166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3223'.
[  392.770477][T16166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'.
[  392.865932][T16159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  392.870437][T16159] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  392.883238][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3227'.
[  392.899897][T16174] netlink: 'syz.0.3226': attribute type 21 has an invalid length.
[  392.903106][T16174] netlink: 'syz.0.3226': attribute type 4 has an invalid length.
[  393.104147][T16189] nft_compat: unsupported protocol 1
[  393.359211][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'.
[  393.437150][T16199] netlink: 'syz.0.3235': attribute type 5 has an invalid length.
[  393.439742][T16199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3235'.
[  393.444659][T16201] netlink: 'syz.0.3235': attribute type 5 has an invalid length.
[  393.449043][T16201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3235'.
[  393.561401][T16210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3238'.
[  393.568122][T16210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3238'.
[  393.574459][T16210] netlink: 'syz.2.3238': attribute type 2 has an invalid length.
[  393.587849][T16210] netlink: 'syz.2.3238': attribute type 23 has an invalid length.
[  393.734511][T16218] lo speed is unknown, defaulting to 1000
[  394.969269][T16251] netlink: 'syz.2.3250': attribute type 10 has an invalid length.
[  395.248878][T16279] netlink: 'syz.1.3258': attribute type 10 has an invalid length.
[  395.251683][T16279] veth0_vlan: left promiscuous mode
[  395.254068][T16279] veth0_vlan: entered promiscuous mode
[  395.259780][T16279] team0: Device veth0_vlan failed to register rx_handler
[  395.339093][T16283] lo speed is unknown, defaulting to 1000
[  396.974784][T16362] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  397.791916][T16379] __nla_validate_parse: 12 callbacks suppressed
[  397.791932][T16379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3291'.
[  398.139204][T16400] lo speed is unknown, defaulting to 1000
[  398.177515][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3297'.
[  398.188141][ T5853] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  398.490569][T16407] netlink: 'syz.2.3298': attribute type 29 has an invalid length.
[  398.503212][T16407] netlink: 'syz.2.3298': attribute type 29 has an invalid length.
[  398.512792][T16407] netlink: 'syz.2.3298': attribute type 29 has an invalid length.
[  398.520902][T16407] netlink: 'syz.2.3298': attribute type 29 has an invalid length.
[  398.552437][T16409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3300'.
[  398.626714][T16412] netlink: 'syz.1.3301': attribute type 3 has an invalid length.
[  398.629542][T16412] netlink: 'syz.1.3301': attribute type 3 has an invalid length.
[  398.632264][T16412] netlink: 130500 bytes leftover after parsing attributes in process `syz.1.3301'.
[  399.211779][T16432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3307'.
[  399.281173][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'.
[  399.284007][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'.
[  399.289035][T16439] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3310'.
[  399.291951][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'.
[  399.294636][T16439] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3310'.
[  400.263301][T16462] netlink: 'syz.0.3317': attribute type 2 has an invalid length.
[  400.267310][T16462] netlink: 'syz.0.3317': attribute type 8 has an invalid length.
[  400.315389][T16464] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  401.056165][T16490] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  401.129750][T16497] netlink: 'syz.1.3330': attribute type 10 has an invalid length.
[  401.133130][T16497] bond0: entered promiscuous mode
[  401.135171][T16497] bond_slave_1: entered promiscuous mode
[  401.141576][T16497] dummy0: entered promiscuous mode
[  401.143925][T16497] team0: entered promiscuous mode
[  401.146428][T16497] team_slave_0: entered promiscuous mode
[  401.149165][T16497] team_slave_1: entered promiscuous mode
[  401.151542][T16497] macvlan1: entered promiscuous mode
[  401.157019][T16497] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.162490][T16497] bridge0: port 3(bond0) entered blocking state
[  401.165259][T16497] bridge0: port 3(bond0) entered disabled state
[  401.168586][T16497] bond0: entered allmulticast mode
[  401.170647][T16497] bond_slave_1: entered allmulticast mode
[  401.172814][T16497] dummy0: entered allmulticast mode
[  401.175068][T16497] team0: entered allmulticast mode
[  401.178500][T16497] team_slave_0: entered allmulticast mode
[  401.182503][T16497] team_slave_1: entered allmulticast mode
[  401.186439][T16500] netlink: 'syz.1.3330': attribute type 4 has an invalid length.
[  401.988294][T16549] openvswitch: netlink: Flow actions attr not present in new flow.
[  402.164862][T16561] batadv_slave_1: entered promiscuous mode
[  402.174254][T16561] batadv_slave_1: entered allmulticast mode
[  402.222184][T16580] netlink: 'syz.2.3355': attribute type 2 has an invalid length.
[  402.225687][T16580] netlink: 'syz.2.3355': attribute type 9 has an invalid length.
[  402.451608][T16591] syzkaller0: tun_chr_ioctl cmd 1074025677
[  402.453759][T16591] syzkaller0: linktype set to 801
[  403.145041][T16598] __nla_validate_parse: 24 callbacks suppressed
[  403.145091][T16598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3361'.
[  403.313198][T16606] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3364'.
[  403.568354][T16617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3369'.
[  403.839899][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'.
[  404.244938][T16640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3376'.
[  404.479742][T16646] netlink: 'syz.2.3378': attribute type 21 has an invalid length.
[  405.472091][T16670] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  406.537219][T16684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3391'.
[  406.616472][T16685] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3391'.
[  406.619872][T16685] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.3391'.
[  406.623348][T16685] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3391'.
[  406.688121][T16691] nbd: must specify an index to disconnect
[  407.161051][T16705] syzkaller0: entered promiscuous mode
[  407.170173][T16705] syzkaller0: entered allmulticast mode
[  407.325741][T16711] netlink: 'syz.1.3399': attribute type 10 has an invalid length.
[  407.709259][T16717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3402'.
[  409.080474][T16722] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  409.514956][T16739] __nla_validate_parse: 1 callbacks suppressed
[  409.514971][T16739] netlink: 26 bytes leftover after parsing attributes in process `syz.0.3409'.
[  410.677941][T16759] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3414'.
[  412.103137][T16788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3422'.
[  412.119694][T16788] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  412.817238][T16807] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3428'.
[  414.026827][T16831] netlink: 'syz.0.3438': attribute type 2 has an invalid length.
[  414.029441][T16831] netlink: 'syz.0.3438': attribute type 1 has an invalid length.
[  414.045464][T16835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  414.097412][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3441'.
[  414.100398][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3441'.
[  414.104911][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3441'.
[  414.109771][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3441'.
[  414.114162][T16839] netlink: 'syz.0.3441': attribute type 10 has an invalid length.
[  414.690372][T16852] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3445'.
[  415.385463][T16871] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3451'.
[  415.466959][T16874] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3451'.
[  415.469976][T16874] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.3451'.
[  415.483084][T16874] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.3451'.
[  416.013083][T16885] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3457'.
[  416.417576][T16896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3462'.
[  416.638190][T16912] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3465'.
[  416.643934][T16912] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3465'.
[  416.647554][T16912] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.3465'.
[  417.703152][T16945] netlink: 'syz.2.3478': attribute type 21 has an invalid length.
[  418.783081][T16963] netlink: 'syz.2.3485': attribute type 1 has an invalid length.
[  418.818763][T16963] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  419.010301][T16966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  419.471209][T16983] netlink: 'syz.2.3493': attribute type 1 has an invalid length.
[  420.088790][T17012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.179605][T17012] __nla_validate_parse: 16 callbacks suppressed
[  420.179663][T17012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3501'.
[  420.558221][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3503'.
[  420.697504][T17023] netlink: 824 bytes leftover after parsing attributes in process `syz.2.3505'.
[  421.277131][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'.
[  421.390465][T17040] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  421.394495][T17040] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  422.489372][T17058] lo speed is unknown, defaulting to 1000
[  422.577583][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'.
[  422.580719][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3517'.
[  422.994151][T17093] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.3525'.
[  423.003622][T17093] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.3525'.
[  423.015439][T17093] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.3525'.
[  424.369223][T17181] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.3550'.
[  424.378577][T17182] pim6reg1: entered promiscuous mode
[  424.380892][T17182] pim6reg1: entered allmulticast mode
[  424.556908][T17188] sctp: [Deprecated]: syz.2.3553 (pid 17188) Use of struct sctp_assoc_value in delayed_ack socket option.
[  424.556908][T17188] Use struct sctp_sack_info instead
[  425.908729][T17215] __nla_validate_parse: 3 callbacks suppressed
[  425.908743][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3558'.
[  426.162310][T17220] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3561'.
[  426.167367][T17220] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3561'.
[  426.251046][T17223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3562'.
[  426.577513][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3564'.
[  427.032117][T17258] netlink: 'syz.2.3570': attribute type 10 has an invalid length.
[  427.870254][T17288] netlink: 'syz.0.3579': attribute type 1 has an invalid length.
[  429.555456][T17306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3585'.
[  429.848626][T17321] netlink: 'syz.1.3590': attribute type 6 has an invalid length.
[  429.851954][T17321] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3590'.
[  430.612846][T17323] netlink: 'syz.0.3591': attribute type 1 has an invalid length.
[  430.668230][T17326] netlink: 'syz.0.3592': attribute type 6 has an invalid length.
[  430.671428][T17326] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3592'.
[  430.680389][T17326] netlink: 'syz.0.3592': attribute type 28 has an invalid length.
[  430.683645][T17326] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3592'.
[  430.791269][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3596'.
[  430.873741][T17341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  430.879897][T17341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  430.956597][T17345] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3600'.
[  431.007550][T17345] netlink: 'syz.2.3600': attribute type 10 has an invalid length.
[  431.238743][T17361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3605'.
[  431.317132][T17363] netlink: 'syz.2.3606': attribute type 10 has an invalid length.
[  431.628302][T17381] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3612'.
[  431.632979][T17381] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3612'.
[  432.083346][T17401] netlink: 'syz.1.3618': attribute type 16 has an invalid length.
[  432.096300][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3618'.
[  432.419824][T17412] netlink: 'syz.0.3622': attribute type 1 has an invalid length.
[  432.775440][T17424] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3625'.
[  432.961410][T17426] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3626'.
[  432.969567][T17426] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3626'.
[  432.973321][T17426] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3626'.
[  433.308044][T17437] netlink: 'syz.2.3629': attribute type 11 has an invalid length.
[  433.656931][T17450] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3634'.
[  433.660602][T17450] netlink: zone id is out of range
[  433.663379][T17450] netlink: zone id is out of range
[  433.665098][T17450] netlink: zone id is out of range
[  433.710225][T17450] netlink: zone id is out of range
[  433.712718][T17450] netlink: zone id is out of range
[  433.715353][T17450] netlink: zone id is out of range
[  433.718474][T17450] netlink: zone id is out of range
[  433.721383][T17450] netlink: zone id is out of range
[  433.724402][T17450] netlink: zone id is out of range
[  433.732284][T17450] netlink: zone id is out of range
[  436.182181][T17489] netlink: 'syz.1.3646': attribute type 1 has an invalid length.
[  436.185406][T17489] __nla_validate_parse: 4 callbacks suppressed
[  436.185420][T17489] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3646'.
[  436.339027][T17488] delete_channel: no stack
[  436.420470][T17504] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3652'.
[  436.451971][T17504] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.3652'.
[  436.456275][T17504] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.3652'.
[  436.486590][T17508] ==================================================================
[  436.489832][T17508] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  436.490952][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3651'.
[  436.492946][T17508] Read of size 2 at addr ffff888028931c42 by task syz.2.3653/17508
[  436.501574][T17508] 
[  436.502629][T17508] CPU: 0 UID: 0 PID: 17508 Comm: syz.2.3653 Not tainted syzkaller #0 PREEMPT(full) 
[  436.502647][T17508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  436.502658][T17508] Call Trace:
[  436.502667][T17508]  <TASK>
[  436.502694][T17508]  dump_stack_lvl+0x189/0x250
[  436.502715][T17508]  ? __kasan_check_byte+0x12/0x40
[  436.502736][T17508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.502751][T17508]  ? lock_release+0x4b/0x3e0
[  436.502773][T17508]  ? __virt_addr_valid+0x4a5/0x5c0
[  436.502819][T17508]  print_report+0xca/0x240
[  436.502833][T17508]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  436.502853][T17508]  kasan_report+0x118/0x150
[  436.502871][T17508]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  436.502892][T17508]  __xfrm_state_lookup+0x6ad/0x8d0
[  436.502914][T17508]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  436.502935][T17508]  ? xfrm_state_lookup+0x45/0x1e0
[  436.502949][T17508]  xfrm_state_lookup+0x11e/0x1e0
[  436.502962][T17508]  ipcomp4_init_state+0x205/0xb20
[  436.502979][T17508]  ? __xfrm_init_state+0x7ef/0x13f0
[  436.502992][T17508]  __xfrm_init_state+0xa76/0x13f0
[  436.503003][T17508]  ? __xfrm_init_state+0x7ef/0x13f0
[  436.503015][T17508]  xfrm_add_sa+0x2f5b/0x4070
[  436.503029][T17508]  ? __pfx_xfrm_add_sa+0x10/0x10
[  436.503038][T17508]  ? apparmor_capable+0x137/0x1b0
[  436.503052][T17508]  ? __nla_parse+0x40/0x60
[  436.503067][T17508]  xfrm_user_rcv_msg+0x7a3/0xab0
[  436.503082][T17508]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  436.503094][T17508]  ? bpf_trace_run2+0x322/0x4b0
[  436.503122][T17508]  ? rcu_is_watching+0x15/0xb0
[  436.503133][T17508]  ? trace_contention_end+0x39/0x120
[  436.503145][T17508]  ? __mutex_lock+0x335/0x1360
[  436.503169][T17508]  netlink_rcv_skb+0x208/0x470
[  436.503187][T17508]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  436.503199][T17508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.503217][T17508]  ? netlink_deliver_tap+0x2e/0x1b0
[  436.503230][T17508]  ? netlink_deliver_tap+0x2e/0x1b0
[  436.503245][T17508]  xfrm_netlink_rcv+0x79/0x90
[  436.503257][T17508]  netlink_unicast+0x82f/0x9e0
[  436.503273][T17508]  ? __pfx_netlink_unicast+0x10/0x10
[  436.503286][T17508]  ? netlink_sendmsg+0x642/0xb30
[  436.503302][T17508]  ? skb_put+0x11b/0x210
[  436.503313][T17508]  netlink_sendmsg+0x805/0xb30
[  436.503331][T17508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.503347][T17508]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.503366][T17508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.503381][T17508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.503396][T17508]  __sock_sendmsg+0x21c/0x270
[  436.503414][T17508]  ____sys_sendmsg+0x505/0x830
[  436.503430][T17508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.503444][T17508]  ? import_iovec+0x74/0xa0
[  436.503462][T17508]  ___sys_sendmsg+0x21f/0x2a0
[  436.503474][T17508]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.503497][T17508]  ? __fget_files+0x2a/0x420
[  436.503509][T17508]  ? __fget_files+0x3a0/0x420
[  436.503524][T17508]  __x64_sys_sendmsg+0x19b/0x260
[  436.503538][T17508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  436.503553][T17508]  ? rcu_is_watching+0x15/0xb0
[  436.503568][T17508]  ? do_syscall_64+0xbe/0x3b0
[  436.503588][T17508]  do_syscall_64+0xfa/0x3b0
[  436.503605][T17508]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.503622][T17508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.503635][T17508]  ? exc_page_fault+0x9f/0xf0
[  436.503652][T17508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.503664][T17508] RIP: 0033:0x7f03c0b8ebe9
[  436.503679][T17508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.503691][T17508] RSP: 002b:00007f03c1964038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.503707][T17508] RAX: ffffffffffffffda RBX: 00007f03c0db6090 RCX: 00007f03c0b8ebe9
[  436.503717][T17508] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000005
[  436.503726][T17508] RBP: 00007f03c0c11e19 R08: 0000000000000000 R09: 0000000000000000
[  436.503734][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  436.503743][T17508] R13: 00007f03c0db6128 R14: 00007f03c0db6090 R15: 00007ffe400d57a8
[  436.503758][T17508]  </TASK>
[  436.503763][T17508] 
[  436.664100][T17508] Allocated by task 15310:
[  436.665893][T17508]  kasan_save_track+0x3e/0x80
[  436.667826][T17508]  __kasan_slab_alloc+0x6c/0x80
[  436.669805][T17508]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  436.672009][T17508]  xfrm_state_alloc+0x24/0x2f0
[  436.673935][T17508]  __find_acq_core+0x8a7/0x1c00
[  436.675902][T17508]  xfrm_find_acq+0x78/0xa0
[  436.677667][T17508]  pfkey_getspi+0x65d/0xee0
[  436.679559][T17508]  pfkey_sendmsg+0xbfe/0x1090
[  436.681460][T17508]  __sock_sendmsg+0x21c/0x270
[  436.683373][T17508]  ____sys_sendmsg+0x505/0x830
[  436.685319][T17508]  ___sys_sendmsg+0x21f/0x2a0
[  436.687218][T17508]  __x64_sys_sendmsg+0x19b/0x260
[  436.689224][T17508]  do_syscall_64+0xfa/0x3b0
[  436.691100][T17508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.693486][T17508] 
[  436.694462][T17508] Freed by task 13943:
[  436.696102][T17508]  kasan_save_track+0x3e/0x80
[  436.698012][T17508]  kasan_save_free_info+0x46/0x50
[  436.700080][T17508]  __kasan_slab_free+0x5b/0x80
[  436.702011][T17508]  kmem_cache_free+0x18f/0x400
[  436.703977][T17508]  xfrm_state_gc_task+0x52d/0x6b0
[  436.706035][T17508]  process_scheduled_works+0xae1/0x17b0
[  436.708262][T17508]  worker_thread+0x8a0/0xda0
[  436.710139][T17508]  kthread+0x711/0x8a0
[  436.711823][T17508]  ret_from_fork+0x3fc/0x770
[  436.713735][T17508]  ret_from_fork_asm+0x1a/0x30
[  436.715713][T17508] 
[  436.716730][T17508] The buggy address belongs to the object at ffff888028931b00
[  436.716730][T17508]  which belongs to the cache xfrm_state of size 928
[  436.722252][T17508] The buggy address is located 322 bytes inside of
[  436.722252][T17508]  freed 928-byte region [ffff888028931b00, ffff888028931ea0)
[  436.727722][T17508] 
[  436.728581][T17508] The buggy address belongs to the physical page:
[  436.730740][T17508] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028930480 pfn:0x28930
[  436.734012][T17508] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  436.737342][T17508] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  436.739832][T17508] page_type: f5(slab)
[  436.741190][T17508] raw: 00fff00000000040 ffff888104f5eb40 dead000000000122 0000000000000000
[  436.743928][T17508] raw: ffff888028930480 00000000800e0009 00000000f5000000 0000000000000000
[  436.746702][T17508] head: 00fff00000000040 ffff888104f5eb40 dead000000000122 0000000000000000
[  436.749521][T17508] head: ffff888028930480 00000000800e0009 00000000f5000000 0000000000000000
[  436.752373][T17508] head: 00fff00000000002 ffffea0000a24c01 00000000ffffffff 00000000ffffffff
[  436.755235][T17508] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  436.758361][T17508] page dumped because: kasan: bad access detected
[  436.760437][T17508] page_owner tracks the page as allocated
[  436.762308][T17508] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6409, tgid 6408 (syz.2.160), ts 73430153835, free_ts 60349386940
[  436.768185][T17508]  post_alloc_hook+0x240/0x2a0
[  436.769756][T17508]  get_page_from_freelist+0x21e4/0x22c0
[  436.771631][T17508]  __alloc_frozen_pages_noprof+0x181/0x370
[  436.773511][T17508]  alloc_pages_mpol+0x232/0x4a0
[  436.775142][T17508]  allocate_slab+0x8a/0x370
[  436.776959][T17508]  ___slab_alloc+0xbeb/0x1410
[  436.778475][T17508]  kmem_cache_alloc_noprof+0x283/0x3c0
[  436.780227][T17508]  xfrm_state_alloc+0x24/0x2f0
[  436.781862][T17508]  xfrm_add_sa+0x17d1/0x4070
[  436.783353][T17508]  xfrm_user_rcv_msg+0x7a3/0xab0
[  436.785013][T17508]  netlink_rcv_skb+0x208/0x470
[  436.786588][T17508]  xfrm_netlink_rcv+0x79/0x90
[  436.788134][T17508]  netlink_unicast+0x82f/0x9e0
[  436.789702][T17508]  netlink_sendmsg+0x805/0xb30
[  436.791335][T17508]  __sock_sendmsg+0x21c/0x270
[  436.792850][T17508]  ____sys_sendmsg+0x505/0x830
[  436.794384][T17508] page last free pid 5296 tgid 5296 stack trace:
[  436.796848][T17508]  __free_frozen_pages+0xbc4/0xd30
[  436.798552][T17508]  __slab_free+0x303/0x3c0
[  436.800035][T17508]  qlist_free_all+0x97/0x140
[  436.801636][T17508]  kasan_quarantine_reduce+0x148/0x160
[  436.803404][T17508]  __kasan_slab_alloc+0x22/0x80
[  436.805033][T17508]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  436.806822][T17508]  getname_flags+0xb8/0x540
[  436.808282][T17508]  do_sys_openat2+0xbc/0x1c0
[  436.809820][T17508]  __x64_sys_openat+0x138/0x170
[  436.811491][T17508]  do_syscall_64+0xfa/0x3b0
[  436.812964][T17508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.814928][T17508] 
[  436.815907][T17508] Memory state around the buggy address:
[  436.817922][T17508]  ffff888028931b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.820522][T17508]  ffff888028931b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.823106][T17508] >ffff888028931c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.825900][T17508]                                            ^
[  436.828392][T17508]  ffff888028931c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.831618][T17508]  ffff888028931d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  436.834991][T17508] ==================================================================
[  436.949879][T17508] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  436.952793][T17508] CPU: 1 UID: 0 PID: 17508 Comm: syz.2.3653 Not tainted syzkaller #0 PREEMPT(full) 
[  436.956582][T17508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  436.960823][T17508] Call Trace:
[  436.962214][T17508]  <TASK>
[  436.963224][T17508]  dump_stack_lvl+0x99/0x250
[  436.965053][T17508]  ? __asan_memcpy+0x40/0x70
[  436.966979][T17508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.969130][T17508]  ? __pfx__printk+0x10/0x10
[  436.971160][T17508]  vpanic+0x281/0x750
[  436.972792][T17508]  ? preempt_schedule+0xae/0xc0
[  436.974792][T17508]  ? __pfx_vpanic+0x10/0x10
[  436.976693][T17508]  ? preempt_schedule_common+0x83/0xd0
[  436.978951][T17508]  ? preempt_schedule+0xae/0xc0
[  436.980680][T17508]  ? __pfx_preempt_schedule+0x10/0x10
[  436.982414][T17508]  panic+0xb9/0xc0
[  436.983625][T17508]  ? __pfx_panic+0x10/0x10
[  436.985079][T17508]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  436.987515][T17508]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  436.989710][T17508]  check_panic_on_warn+0x89/0xb0
[  436.991833][T17508]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  436.994029][T17508]  end_report+0x78/0x160
[  436.995838][T17508]  kasan_report+0x129/0x150
[  436.998013][T17508]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  436.999836][T17508]  __xfrm_state_lookup+0x6ad/0x8d0
[  437.001566][T17508]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  437.003552][T17508]  ? xfrm_state_lookup+0x45/0x1e0
[  437.005420][T17508]  xfrm_state_lookup+0x11e/0x1e0
[  437.007649][T17508]  ipcomp4_init_state+0x205/0xb20
[  437.009898][T17508]  ? __xfrm_init_state+0x7ef/0x13f0
[  437.012249][T17508]  __xfrm_init_state+0xa76/0x13f0
[  437.014459][T17508]  ? __xfrm_init_state+0x7ef/0x13f0
[  437.016470][T17508]  xfrm_add_sa+0x2f5b/0x4070
[  437.018040][T17508]  ? __pfx_xfrm_add_sa+0x10/0x10
[  437.019689][T17508]  ? apparmor_capable+0x137/0x1b0
[  437.021395][T17508]  ? __nla_parse+0x40/0x60
[  437.022898][T17508]  xfrm_user_rcv_msg+0x7a3/0xab0
[  437.024713][T17508]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  437.026928][T17508]  ? bpf_trace_run2+0x322/0x4b0
[  437.029131][T17508]  ? rcu_is_watching+0x15/0xb0
[  437.031301][T17508]  ? trace_contention_end+0x39/0x120
[  437.033663][T17508]  ? __mutex_lock+0x335/0x1360
[  437.035689][T17508]  netlink_rcv_skb+0x208/0x470
[  437.037817][T17508]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  437.040286][T17508]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.042666][T17508]  ? netlink_deliver_tap+0x2e/0x1b0
[  437.044786][T17508]  ? netlink_deliver_tap+0x2e/0x1b0
[  437.046783][T17508]  xfrm_netlink_rcv+0x79/0x90
[  437.048888][T17508]  netlink_unicast+0x82f/0x9e0
[  437.051078][T17508]  ? __pfx_netlink_unicast+0x10/0x10
[  437.053457][T17508]  ? netlink_sendmsg+0x642/0xb30
[  437.055657][T17508]  ? skb_put+0x11b/0x210
[  437.057292][T17508]  netlink_sendmsg+0x805/0xb30
[  437.059200][T17508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.061498][T17508]  ? aa_sock_msg_perm+0xf1/0x1d0
[  437.063697][T17508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.066070][T17508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.068440][T17508]  __sock_sendmsg+0x21c/0x270
[  437.070061][T17508]  ____sys_sendmsg+0x505/0x830
[  437.071670][T17508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.073484][T17508]  ? import_iovec+0x74/0xa0
[  437.075018][T17508]  ___sys_sendmsg+0x21f/0x2a0
[  437.076732][T17508]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.079067][T17508]  ? __fget_files+0x2a/0x420
[  437.081136][T17508]  ? __fget_files+0x3a0/0x420
[  437.083052][T17508]  __x64_sys_sendmsg+0x19b/0x260
[  437.084816][T17508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.086780][T17508]  ? rcu_is_watching+0x15/0xb0
[  437.088527][T17508]  ? do_syscall_64+0xbe/0x3b0
[  437.090227][T17508]  do_syscall_64+0xfa/0x3b0
[  437.091841][T17508]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.093701][T17508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.096062][T17508]  ? exc_page_fault+0x9f/0xf0
[  437.098169][T17508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.100240][T17508] RIP: 0033:0x7f03c0b8ebe9
[  437.101901][T17508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.108803][T17508] RSP: 002b:00007f03c1964038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.111801][T17508] RAX: ffffffffffffffda RBX: 00007f03c0db6090 RCX: 00007f03c0b8ebe9
[  437.114563][T17508] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000005
[  437.117672][T17508] RBP: 00007f03c0c11e19 R08: 0000000000000000 R09: 0000000000000000
[  437.120963][T17508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.123835][T17508] R13: 00007f03c0db6128 R14: 00007f03c0db6090 R15: 00007ffe400d57a8
[  437.126653][T17508]  </TASK>
[  437.128429][T17508] Kernel Offset: disabled
[  437.130017][T17508] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:44:47  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a02485 RBX=ffffffff81a02444 RCX=ffff888105efb980 RDX=0000000000000000
RSI=ffffffff81a02460 RDI=1ffffffff1c25c20 RBP=ffffc9000358ee50 RSP=ffffc9000358ed40
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c15
R12=dffffc0000000000 R13=1ffff920006b1dac R14=0000000000000000 R15=0000000000000040
RIP=ffffffff81a02473 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f03c19646c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=000000011b5c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f03c0d87498 00007f03c0d87470 XMM03=00007f03c0d874a8 00007f03c0d874a0
XMM04=00007f03c18ed100 00007f03c0d87460 XMM05=00007f03c0d87478 00007f03c0d874c0
XMM06=00007f03c0d874b8 00007f03c0d874b0 XMM07=00007f03c0d874a8 00007f03c0d874a0
XMM08=0000000000000000 00007f03c0c12ee7 XMM09=0000000000000000 00007f03c0c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080080783 RBX=1ffff110212d625a RCX=00000000ffffffff RDX=0000000000010100
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900001e0b40
R8 =ffff8881096b16bf R9 =1ffff110212d62d7 R10=dffffc0000000000 R11=ffffed10212d62d8
R12=dffffc0000000000 R13=ffff8881096b12d0 R14=ffff8881096b0000 R15=ffff8881096b16b8
RIP=ffffffff869999b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2cfa9436c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2cfa942fc8 CR3=000000012f044000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2cf9d87498 00007f2cf9d87470 XMM03=00007f2cf9d874a8 00007f2cf9d874a0
XMM04=00007f2cfa8ed100 00007f2cf9d87460 XMM05=00007f2cf9d87478 00007f2cf9d874c0
XMM06=00007f2cf9d874b8 00007f2cf9d874b0 XMM07=00007f2cf9d874a8 00007f2cf9d874a0
XMM08=0000000000000000 00007f2cf9c12ee7 XMM09=0000000000000000 00007f2cf9c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
