last executing test programs:

3m18.38159349s ago: executing program 1 (id=419):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

3m18.269506786s ago: executing program 1 (id=422):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x2d, 0x0, 0x88)

3m18.202625342s ago: executing program 1 (id=423):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888)

3m18.202396796s ago: executing program 1 (id=424):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10)

3m18.142303881s ago: executing program 1 (id=425):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

3m18.048488055s ago: executing program 1 (id=428):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

3m2.942315042s ago: executing program 32 (id=428):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

2m55.632789569s ago: executing program 2 (id=612):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x10)
perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x629, 0x1, @perf_bp={0x0}, 0x24, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x800000000}, 0x38)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x890)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4)

2m55.178896656s ago: executing program 2 (id=615):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)

2m55.092518461s ago: executing program 2 (id=616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)={0x48, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x21}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m55.0922262s ago: executing program 2 (id=617):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x10, &(0x7f0000000040)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

2m55.031480643s ago: executing program 2 (id=618):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x100000001}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m53.255528528s ago: executing program 2 (id=630):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

2m38.247524433s ago: executing program 33 (id=630):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141689089f034d2f87e5440c04ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

1m41.675488093s ago: executing program 0 (id=1648):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r3, 0x0, 0x20008080)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffb, 0x20000000aea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xb}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x46, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r5, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="004e2fe5120000ac4af00000f0ffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
close(r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xddf}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @broadcast})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef)

1m41.309812349s ago: executing program 0 (id=1653):
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

1m41.207543292s ago: executing program 0 (id=1656):
r0 = socket$kcm(0xa, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r1, 0x29, 0x37, &(0x7f0000000100)=r2, 0x120)
setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0)

1m41.158854804s ago: executing program 0 (id=1657):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x22)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="82", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x0)

1m41.019933085s ago: executing program 0 (id=1660):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m40.917167842s ago: executing program 0 (id=1662):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1m25.933870747s ago: executing program 34 (id=1662):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.60164348s ago: executing program 3 (id=3070):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000100001000000000000000000fc0000000000000000000000000000010000000000000000000000000000000000006159000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000004000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000001000000000000000000000000400000100000000000000000000000000000000063500000a00f9fd6000000000000000480003"], 0x144}}, 0x0)

1.600916253s ago: executing program 3 (id=3071):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8917, &(0x7f0000000000)={'ip6tnl0\x00'})
socket$kcm(0x21, 0x2, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000012c0)={r1, r2, 0x0, 0x3, &(0x7f0000000140)='{&\x00'}, 0x30)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x100000001, 0x82e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8932, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000ff000ebca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f6114200000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

1.409310834s ago: executing program 5 (id=3073):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.254078624s ago: executing program 4 (id=3074):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000e80)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x4001040)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef)
socket$kcm(0x2, 0x922000000001, 0x106)
close(0x4)

822.612582ms ago: executing program 5 (id=3075):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000040079103000000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

822.23067ms ago: executing program 5 (id=3076):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, 0x0, &(0x7f0000000840)}, 0x20)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x800)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20046090)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10)
r5 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r5, 0x29, 0x49, 0x0, 0xfcd8)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x7f7c2739efff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xfc, 0xce, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x4000, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000000)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)

272.332212ms ago: executing program 3 (id=3077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)

271.581708ms ago: executing program 4 (id=3078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

271.254885ms ago: executing program 3 (id=3079):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, 0x0, 0x0, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x87, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0x2)
sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001400000002000000010000", @ANYBLOB='\x00\x00\x00'], 0x30, 0xc080}, 0x4060004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000700)=r1, 0xfccc)
sendmsg$unix(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x40800)
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x26, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018300000040000000000000000000000852000000400000088701000ffffffff182a0000", @ANYRES32, @ANYBLOB="000000000100010018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000004000001000b7080000006eda007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf9100000000cfba000000000000690c33da7f8f00000100000085b700000000006a08b4010000"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x28, &(0x7f0000000780)=""/40, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x0, 0x1, 0xf}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x1, 0x1, 0xa, 0x3}], 0x10, 0x10}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="17000000008000003f0a0000ac", @ANYRES32=r1, @ANYBLOB='y\x00'/20, @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000040)}, 0x20)

165.432472ms ago: executing program 4 (id=3080):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

124.293511ms ago: executing program 3 (id=3081):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

85.869872ms ago: executing program 4 (id=3082):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0x80)

80.94003ms ago: executing program 5 (id=3083):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x20)

78.174657ms ago: executing program 4 (id=3084):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x10000, @value=r0}, 0x28)

644.774µs ago: executing program 3 (id=3085):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000280), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0xe)
socketpair(0x2c, 0xa, 0x5c, 0x0)

499.04µs ago: executing program 5 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="47140000"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)

105.739µs ago: executing program 5 (id=3087):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa)

0s ago: executing program 4 (id=3088):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@allocspi={0x148, 0x16, 0xd, 0x70bd27, 0x25dfdbfe, {{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@private2, 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0xa0, 0x33}, {@in6=@empty, 0x4d5, 0x33}, @in6=@mcast2, {0x5, 0x4, 0x4, 0xfffffffffffff800, 0x4, 0x8000, 0x1, 0x7f}, {0x7, 0x3, 0x5, 0x6}, {0xfffffffb, 0x5, 0x7}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x8, 0x84}, 0x7, 0x80}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @extra_flags={0x8}]}, 0x148}}, 0x0)

kernel console output (not intermixed with test programs):

oft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.479745][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   64.488867][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   64.491777][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.495633][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.526207][ T5914] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   65.005398][ T5929] netlink: 'syz.1.8': attribute type 11 has an invalid length.
[   65.033493][ T5929] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.8'.
[   65.227683][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.730343][   T54] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11
[   65.769255][   T54] Bluetooth: hci0: command tx timeout
[   65.849253][   T54] Bluetooth: hci2: command tx timeout
[   65.851654][   T54] Bluetooth: hci1: command tx timeout
[   65.913730][ T5985] warning: `syz.1.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.131267][ T6003] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   66.867371][    C1] hrtimer: interrupt took 31052 ns
[   66.903925][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'.
[   67.322614][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.366543][ T6042] bridge_slave_0 (unregistering): left allmulticast mode
[   67.370249][ T6042] bridge_slave_0 (unregistering): left promiscuous mode
[   67.375164][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.641066][ T6047] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET)
[   67.853380][ T5853] Bluetooth: hci0: command tx timeout
[   67.936384][ T5853] Bluetooth: hci1: command tx timeout
[   67.939631][ T5853] Bluetooth: hci2: command tx timeout
[   68.222150][ T6056] netlink: 196 bytes leftover after parsing attributes in process `syz.2.66'.
[   68.663381][ T6063] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.69'.
[   68.715258][ T6061] netlink: 'syz.1.68': attribute type 29 has an invalid length.
[   69.012717][ T6072] syzkaller0: entered promiscuous mode
[   69.015201][ T6072] syzkaller0: entered allmulticast mode
[   69.327793][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'.
[   69.333171][ T6080] netlink: 6 bytes leftover after parsing attributes in process `syz.2.77'.
[   69.557662][ T6093] =======================================================
[   69.557662][ T6093] WARNING: The mand mount option has been deprecated and
[   69.557662][ T6093]          and is ignored by this kernel. Remove the mand
[   69.557662][ T6093]          option from the mount to silence this warning.
[   69.557662][ T6093] =======================================================
[   69.929209][   T54] Bluetooth: hci0: command tx timeout
[   70.009992][   T54] Bluetooth: hci2: command tx timeout
[   70.012451][   T54] Bluetooth: hci1: command tx timeout
[   71.200993][ T6113] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   71.263445][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.299493][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.302304][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.575819][ T6103] syz.0.87: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   71.582786][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full) 
[   71.582799][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.582804][ T6103] Call Trace:
[   71.582808][ T6103]  <TASK>
[   71.582812][ T6103]  dump_stack_lvl+0x189/0x250
[   71.582828][ T6103]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.582838][ T6103]  ? __pfx__printk+0x10/0x10
[   71.582849][ T6103]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.582859][ T6103]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.582869][ T6103]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   71.582879][ T6103]  warn_alloc+0x214/0x310
[   71.582889][ T6103]  ? __pfx_warn_alloc+0x10/0x10
[   71.582901][ T6103]  ? __get_vm_area_node+0x28f/0x300
[   71.582913][ T6103]  ? hash_netport4_resize+0x235/0x1b60
[   71.582927][ T6103]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   71.582959][ T6103]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   71.582982][ T6103]  ? rcu_is_watching+0x15/0xb0
[   71.582995][ T6103]  ? hash_netport4_resize+0x235/0x1b60
[   71.583009][ T6103]  ? hash_netport4_resize+0x235/0x1b60
[   71.583024][ T6103]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   71.583043][ T6103]  ? hash_netport4_resize+0x235/0x1b60
[   71.583065][ T6103]  hash_netport4_resize+0x235/0x1b60
[   71.583089][ T6103]  ? hash_netport4_uadt+0xc97/0xf30
[   71.583110][ T6103]  ? __pfx_hash_netport4_add+0x10/0x10
[   71.583128][ T6103]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   71.583149][ T6103]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   71.583164][ T6103]  call_ad+0x44e/0xb00
[   71.583183][ T6103]  ? __pfx_call_ad+0x10/0x10
[   71.583205][ T6103]  ? __nla_parse+0x40/0x60
[   71.583220][ T6103]  ip_set_ad+0x791/0x930
[   71.583232][ T6103]  ? __pfx_ip_set_ad+0x10/0x10
[   71.583265][ T6103]  nfnetlink_rcv_msg+0xb4d/0x1130
[   71.583278][ T6103]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   71.583303][ T6103]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   71.583335][ T6103]  netlink_rcv_skb+0x208/0x470
[   71.583345][ T6103]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   71.583353][ T6103]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   71.583367][ T6103]  ? bpf_lsm_capable+0x9/0x20
[   71.583378][ T6103]  ? security_capable+0x7e/0x2e0
[   71.583414][ T6103]  nfnetlink_rcv+0x26a/0x2520
[   71.583423][ T6103]  ? __dev_queue_xmit+0x1d79/0x3b50
[   71.583447][ T6103]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   71.583454][ T6103]  ? __pfx___dev_queue_xmit+0x10/0x10
[   71.583472][ T6103]  ? perf_trace_run_bpf_submit+0xee/0x170
[   71.583485][ T6103]  ? perf_trace_lock+0x2f8/0x3b0
[   71.583492][ T6103]  ? __skb_clone+0x483/0x7a0
[   71.583505][ T6103]  ? __pfx_perf_trace_lock+0x10/0x10
[   71.583512][ T6103]  ? skb_clone+0x246/0x3a0
[   71.583524][ T6103]  ? __netlink_deliver_tap+0x807/0x850
[   71.583533][ T6103]  ? netlink_deliver_tap+0x2e/0x1b0
[   71.583544][ T6103]  ? netlink_deliver_tap+0x2e/0x1b0
[   71.583557][ T6103]  netlink_unicast+0x82f/0x9e0
[   71.583568][ T6103]  ? __pfx_netlink_unicast+0x10/0x10
[   71.583577][ T6103]  ? netlink_sendmsg+0x642/0xb30
[   71.583585][ T6103]  ? skb_put+0x11b/0x210
[   71.583596][ T6103]  netlink_sendmsg+0x805/0xb30
[   71.583609][ T6103]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.583619][ T6103]  ? aa_sock_msg_perm+0xf1/0x1d0
[   71.583629][ T6103]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   71.583638][ T6103]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.583647][ T6103]  __sock_sendmsg+0x21c/0x270
[   71.583657][ T6103]  ____sys_sendmsg+0x505/0x830
[   71.583670][ T6103]  ? __pfx_____sys_sendmsg+0x10/0x10
[   71.583685][ T6103]  ? import_iovec+0x74/0xa0
[   71.583698][ T6103]  ___sys_sendmsg+0x21f/0x2a0
[   71.583709][ T6103]  ? __pfx____sys_sendmsg+0x10/0x10
[   71.583729][ T6103]  ? __fget_files+0x2a/0x420
[   71.583743][ T6103]  ? __fget_files+0x2a/0x420
[   71.583749][ T6103]  ? __fget_files+0x3a0/0x420
[   71.583761][ T6103]  __x64_sys_sendmsg+0x19b/0x260
[   71.583773][ T6103]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   71.583788][ T6103]  ? rcu_is_watching+0x15/0xb0
[   71.583798][ T6103]  ? do_syscall_64+0xbe/0x3b0
[   71.583810][ T6103]  do_syscall_64+0xfa/0x3b0
[   71.583818][ T6103]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.583826][ T6103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.583834][ T6103]  ? exc_page_fault+0x9f/0xf0
[   71.583843][ T6103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.583850][ T6103] RIP: 0033:0x7f8833b8eba9
[   71.583858][ T6103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.583864][ T6103] RSP: 002b:00007f8834977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.583873][ T6103] RAX: ffffffffffffffda RBX: 00007f8833dd5fa0 RCX: 00007f8833b8eba9
[   71.583879][ T6103] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000b
[   71.583883][ T6103] RBP: 00007f8833c11e19 R08: 0000000000000000 R09: 0000000000000000
[   71.583888][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.583892][ T6103] R13: 00007f8833dd6038 R14: 00007f8833dd5fa0 R15: 00007ffe0f90f308
[   71.583904][ T6103]  </TASK>
[   71.583908][ T6103] Mem-Info:
[   71.768732][ T6103] active_anon:5385 inactive_anon:0 isolated_anon:0
[   71.768732][ T6103]  active_file:1282 inactive_file:38240 isolated_file:0
[   71.768732][ T6103]  unevictable:1768 dirty:1436 writeback:0
[   71.768732][ T6103]  slab_reclaimable:9440 slab_unreclaimable:51246
[   71.768732][ T6103]  mapped:18065 shmem:2432 pagetables:932
[   71.768732][ T6103]  sec_pagetables:0 bounce:0
[   71.768732][ T6103]  kernel_misc_reclaimable:0
[   71.768732][ T6103]  free:299210 free_pcp:20898 free_cma:0
[   71.784313][ T6103] Node 0 active_anon:11136kB inactive_anon:0kB active_file:4228kB inactive_file:131016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35540kB dirty:5472kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5008kB pagetables:1684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.797501][ T6103] Node 1 active_anon:10472kB inactive_anon:0kB active_file:900kB inactive_file:21944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36720kB dirty:272kB writeback:0kB shmem:4672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6276kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.818403][ T6103] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   71.830786][ T6103] lowmem_reserve[]: 0 811 811 811 811
[   71.833048][ T6103] Node 0 DMA32 free:276216kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11136kB inactive_anon:0kB active_file:4228kB inactive_file:131016kB unevictable:3536kB writepending:5472kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:50564kB local_pcp:34016kB free_cma:0kB
[   71.846699][ T6103] lowmem_reserve[]: 0 0 0 0 0
[   71.848886][ T6103] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   71.861079][ T6103] lowmem_reserve[]: 0 0 854 854 854
[   71.863367][ T6103] Node 1 Normal free:446648kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10472kB inactive_anon:0kB active_file:900kB inactive_file:21944kB unevictable:3536kB writepending:272kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32980kB local_pcp:20024kB free_cma:0kB
[   71.882448][ T6103] lowmem_reserve[]: 0 0 0 0 0
[   71.884566][ T6103] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   71.891275][ T6103] Node 0 DMA32: 20*4kB (M) 67*8kB (UME) 1235*16kB (ME) 253*32kB (UME) 91*64kB (UME) 32*128kB (UME) 13*256kB (UM) 2*512kB (UM) 4*1024kB (M) 4*2048kB (M) 54*4096kB (UM) = 276216kB
[   71.908470][ T6103] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   71.915231][ T6103] Node 1 Normal: 12*4kB (ME) 225*8kB (UME) 366*16kB (UME) 57*32kB (UME) 28*64kB (UME) 15*128kB (UM) 7*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 5*2048kB (UM) 101*4096kB (M) = 446648kB
[   71.923408][ T6103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.927343][ T6103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.931791][ T6103] 41954 total pagecache pages
[   71.934026][ T6103] 0 pages in swap cache
[   71.935825][ T6103] Free swap  = 124996kB
[   71.937582][ T6103] Total swap = 124996kB
[   71.939468][ T6103] 786301 pages RAM
[   71.941019][ T6103] 0 pages HighMem/MovableOnly
[   71.943023][ T6103] 241350 pages reserved
[   71.944951][ T6103] 0 pages cma reserved
[   72.203487][ T6153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.354990][ T6153] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   72.417367][ T6168] veth1_macvtap: left promiscuous mode
[   72.421795][ T6168] macsec0: entered promiscuous mode
[   72.709738][ T6181] netlink: 'syz.2.122': attribute type 10 has an invalid length.
[   72.722269][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.122'.
[   73.446879][ T6184] syzkaller0: tun_chr_ioctl cmd 1074025677
[   73.451285][ T6184] syzkaller0: Linktype set failed because interface is up
[   73.456004][ T6181] batman_adv: batadv0: Adding interface: hsr_slave_1
[   73.459716][ T6181] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.470702][ T6181] batman_adv: batadv0: Interface activated: hsr_slave_1
[   73.483182][ T5858] syzkaller0: tun_net_xmit 76
[   73.487743][ T5858] syzkaller0: tun_net_xmit 48
[   73.508752][ T5313] syzkaller0: tun_net_xmit 76
[   73.626306][ T6202] netlink: 'syz.2.129': attribute type 10 has an invalid length.
[   74.415275][ T6202] lo: entered promiscuous mode
[   74.419995][ T6202] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   74.634630][ T6217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.136'.
[   74.659519][ T6219] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.768027][ T6224] Zero length message leads to an empty skb
[   74.794669][ T6224] netlink: 76 bytes leftover after parsing attributes in process `syz.2.138'.
[   74.986717][ T5853] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7
[   75.001899][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'.
[   75.017462][ T6236] netlink: 14 bytes leftover after parsing attributes in process `syz.2.145'.
[   75.093712][ T6240] netlink: 'syz.0.147': attribute type 10 has an invalid length.
[   75.238071][ T6236] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.145'.
[   75.942338][ T6264] netlink: 'syz.1.156': attribute type 10 has an invalid length.
[   75.945240][ T6264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.156'.
[   75.962794][ T6264] ipvlan1: entered promiscuous mode
[   75.965263][ T6264] ipvlan1: entered allmulticast mode
[   75.967930][ T6264] veth0_vlan: entered allmulticast mode
[   75.984921][ T6264] bridge0: port 1(ipvlan1) entered blocking state
[   75.992704][ T6264] bridge0: port 1(ipvlan1) entered disabled state
[   76.014615][ T6264] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   76.846027][ T6294] can: request_module (can-proto-4) failed.
[   76.890016][ T6299] syzkaller0: entered promiscuous mode
[   79.359803][ T6332] syzkaller1: tun_chr_ioctl cmd 1074025677
[   79.371635][ T6332] syzkaller1: linktype set to 780
[   79.399535][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.406605][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.566621][ T6342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.659343][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'.
[   79.696807][ T6354] netlink: 14 bytes leftover after parsing attributes in process `syz.2.192'.
[   79.842521][ T6361] netlink: 'syz.0.195': attribute type 4 has an invalid length.
[   79.845824][ T6361] netlink: 112 bytes leftover after parsing attributes in process `syz.0.195'.
[   81.117703][ T6398] netlink: 'syz.1.209': attribute type 10 has an invalid length.
[   81.126060][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.132823][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.135196][ T6398] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.141003][ T6398] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   81.211689][ T6404] Driver unsupported XDP return value 0 on prog  (id 85) dev N/A, expect packet loss!
[   81.225739][ T6408] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.214'.
[   81.324929][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'.
[   82.194189][ T6425] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.222'.
[   82.197779][ T6425] bridge: RTM_NEWNEIGH with invalid state 0x1
[   82.294596][ T6429] ksmbd: Unknown IPC event: 3, ignore.
[   82.502156][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'.
[   82.513231][ T6438] netlink: 'syz.2.226': attribute type 1 has an invalid length.
[   82.849286][ T6455] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.228'.
[   84.439838][ T6503] netlink: 'syz.1.247': attribute type 23 has an invalid length.
[   84.477914][ T6511] netlink: 'syz.0.251': attribute type 22 has an invalid length.
[   84.481533][ T6511] __nla_validate_parse: 1 callbacks suppressed
[   84.481542][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'.
[   84.517078][ T6514] netlink: 'syz.0.252': attribute type 4 has an invalid length.
[   86.659622][   T24] cfg80211: failed to load regulatory.db
[   91.113384][ T6574] netlink: 92 bytes leftover after parsing attributes in process `syz.0.278'.
[   91.170040][ T6575] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.277'.
[   91.173349][ T6575] netlink: 5 bytes leftover after parsing attributes in process `syz.1.277'.
[   91.390710][ T6580] C: renamed from team_slave_0 (while UP)
[   91.395104][ T6580] netlink: 'syz.0.280': attribute type 3 has an invalid length.
[   91.451829][ T6581] netlink: 180 bytes leftover after parsing attributes in process `syz.1.277'.
[   91.733248][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'.
[   91.763970][ T5853] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   91.787083][ T6597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.288'.
[   92.066738][ T6609] netlink: 400 bytes leftover after parsing attributes in process `syz.0.294'.
[   92.074836][ T6610] netlink: 64 bytes leftover after parsing attributes in process `syz.1.293'.
[   92.146203][ T6613] netlink: 196 bytes leftover after parsing attributes in process `syz.2.295'.
[   92.161106][ T6614] netlink: 10 bytes leftover after parsing attributes in process `syz.0.296'.
[   92.167164][ T6614] netlink: 'syz.0.296': attribute type 13 has an invalid length.
[   92.170511][ T6614] netlink: 'syz.0.296': attribute type 17 has an invalid length.
[   92.209047][ T6614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.486003][ T5853] Bluetooth: hci0: Malformed LE Event: 0x0d
[   92.547874][ T6631] ]X: renamed from veth0_vlan (while UP)
[   93.241766][ T6690] IPv6: NLM_F_CREATE should be specified when creating new route
[   93.426262][ T6702] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   93.429774][ T6702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.706935][ T6722] netlink: 'syz.0.347': attribute type 5 has an invalid length.
[   95.923835][ T5855] cgroup: fork rejected by pids controller in /syz2
[   96.904817][ T6789] netlink: 'syz.1.374': attribute type 29 has an invalid length.
[   96.935736][ T6789] netlink: 'syz.1.374': attribute type 29 has an invalid length.
[   96.952633][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.955628][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.958576][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.962751][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.966283][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.213612][ T6796] __nla_validate_parse: 1 callbacks suppressed
[   97.214087][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'.
[   97.295526][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'.
[   97.320141][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'.
[   97.351648][ T6796] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.376'.
[   97.694385][ T6790] chnl_net:caif_netlink_parms(): no params data found
[   97.987439][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.993228][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.996741][ T6790] bridge_slave_0: entered allmulticast mode
[   98.001606][ T6790] bridge_slave_0: entered promiscuous mode
[   98.007964][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.011161][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.014192][ T6790] bridge_slave_1: entered allmulticast mode
[   98.023492][ T6790] bridge_slave_1: entered promiscuous mode
[   98.138111][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.145139][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.223041][ T6790] team0: Port device team_slave_0 added
[   98.235937][ T6790] team0: Port device team_slave_1 added
[   98.309733][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.312597][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.325616][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.336865][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.342277][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.353239][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.586227][ T6790] hsr_slave_0: entered promiscuous mode
[   98.598230][ T6790] hsr_slave_1: entered promiscuous mode
[   98.613590][ T6790] debugfs: 'hsr0' already exists in 'hsr'
[   98.618864][ T6790] Cannot create hsr debugfs directory
[   99.048657][ T5853] Bluetooth: hci2: command tx timeout
[   99.159672][ T6790] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.249676][ T5853] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[   99.254464][ T6790] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.367963][ T6790] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.497844][ T6843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.515417][ T6790] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.671936][ T6790] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.678097][ T6790] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.690196][ T6790] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.696315][ T6790] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.773326][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.788200][ T6790] 8021q: adding VLAN 0 to HW filter on device team0
[   99.795947][  T724] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.799031][  T724] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.821666][  T724] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.824774][  T724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.066475][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.124863][ T6790] veth0_vlan: entered promiscuous mode
[  100.134117][ T6790] veth1_vlan: entered promiscuous mode
[  100.169180][ T6790] veth0_macvtap: entered promiscuous mode
[  100.174592][ T6790] veth1_macvtap: entered promiscuous mode
[  100.192949][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.203005][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.216995][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.224152][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.236668][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.252520][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.291764][  T724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.294975][  T724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.325943][  T724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.329955][  T724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.446162][ T6877] netlink: 'syz.2.402': attribute type 10 has an invalid length.
[  100.479945][ T6877] team0: Port device syz_tun added
[  100.607468][ T6883] netlink: 'syz.1.405': attribute type 2 has an invalid length.
[  100.610880][ T6883] netlink: 'syz.1.405': attribute type 1 has an invalid length.
[  100.614317][ T6883] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.405'.
[  101.129436][ T5853] Bluetooth: hci2: command tx timeout
[  101.847161][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'.
[  101.863433][ T6913] netlink: 52 bytes leftover after parsing attributes in process `syz.0.416'.
[  102.975863][ T6954] netlink: 830 bytes leftover after parsing attributes in process `syz.0.436'.
[  103.208634][ T5853] Bluetooth: hci2: command tx timeout
[  103.876321][ T6978] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.891293][ T6978] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.991359][ T6981] syzkaller0: entered promiscuous mode
[  103.993753][ T6981] syzkaller0: entered allmulticast mode
[  104.819873][ T6986] netlink: 'syz.2.448': attribute type 29 has an invalid length.
[  104.903332][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'.
[  105.200534][ T6994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.288810][   T54] Bluetooth: hci2: command tx timeout
[  105.370137][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  109.237789][ T7078] netlink: 'syz.0.486': attribute type 3 has an invalid length.
[  109.258820][ T7078] netlink: 199752 bytes leftover after parsing attributes in process `syz.0.486'.
[  111.115738][ T7108] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  111.483271][ T7130] netlink: 'syz.0.505': attribute type 2 has an invalid length.
[  111.487037][ T7130] netlink: 268 bytes leftover after parsing attributes in process `syz.0.505'.
[  111.551720][ T7134] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  111.574678][ T7136] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[  111.787531][ T7146] netlink: 'syz.2.513': attribute type 2 has an invalid length.
[  111.801681][ T7142] syzkaller0: entered promiscuous mode
[  111.803988][ T7142] syzkaller0: entered allmulticast mode
[  113.703104][ T7164] netlink: 232 bytes leftover after parsing attributes in process `syz.2.519'.
[  115.471740][ T7210] netlink: 'syz.0.540': attribute type 4 has an invalid length.
[  116.636113][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'.
[  116.715754][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.587015][ T7241] netlink: 294 bytes leftover after parsing attributes in process `syz.0.552'.
[  117.866252][ T7252] pim6reg1: entered allmulticast mode
[  117.886596][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.895121][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.899354][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.905384][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.911516][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.099602][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.121407][ T7264] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.561'.
[  118.179837][ T7268] netlink: 'syz.2.561': attribute type 2 has an invalid length.
[  118.265069][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.280630][ T7254] chnl_net:caif_netlink_parms(): no params data found
[  118.332825][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.417520][ T7277] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.564'.
[  118.445559][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.454422][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.457583][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.462841][ T7254] bridge_slave_0: entered allmulticast mode
[  118.471720][ T7254] bridge_slave_0: entered promiscuous mode
[  118.481337][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.483709][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.486629][ T7254] bridge_slave_1: entered allmulticast mode
[  118.493588][ T7254] bridge_slave_1: entered promiscuous mode
[  118.642857][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.739248][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.766594][ T7285] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  118.807549][ T7285] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  119.123800][ T7254] team0: Port device team_slave_0 added
[  119.245908][ T7254] team0: Port device team_slave_1 added
[  119.349138][ T5876] bridge_slave_1: left allmulticast mode
[  119.351734][ T5876] bridge_slave_1: left promiscuous mode
[  119.354941][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.757435][ T5876] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  119.852945][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.859332][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.864511][ T5876] bond0 (unregistering): Released all slaves
[  119.891722][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.894937][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.907985][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.918396][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.921517][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.933144][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.008734][ T5853] Bluetooth: hci0: command tx timeout
[  120.141994][ T7254] hsr_slave_0: entered promiscuous mode
[  120.144854][ T7254] hsr_slave_1: entered promiscuous mode
[  120.146994][ T7254] debugfs: 'hsr0' already exists in 'hsr'
[  120.151014][ T7254] Cannot create hsr debugfs directory
[  120.996735][ T7254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  121.029794][ T7254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  121.186264][ T5876] hsr_slave_0: left promiscuous mode
[  121.213624][ T5876] hsr_slave_1: left promiscuous mode
[  121.248553][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.252002][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.275024][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.280313][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.296815][ T5876] veth1_macvtap: left promiscuous mode
[  121.299583][ T5876] veth0_macvtap: left promiscuous mode
[  121.303524][ T5876] veth1_vlan: left promiscuous mode
[  121.307156][ T5876] veth0_vlan: left promiscuous mode
[  122.092690][ T5853] Bluetooth: hci0: command tx timeout
[  122.337885][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  122.387372][ T5876] team0 (unregistering): Port device team_slave_0 removed
[  122.755480][ T7254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.770598][ T7374] netlink: 'syz.0.595': attribute type 25 has an invalid length.
[  122.778083][ T7254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.964297][ T7389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.598'.
[  122.985284][ T7389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.598'.
[  123.003383][ T7254] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.015557][ T7389] netlink: 60 bytes leftover after parsing attributes in process `syz.2.598'.
[  123.059139][ T7254] 8021q: adding VLAN 0 to HW filter on device team0
[  123.064880][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.068030][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.086458][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.089641][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.206008][ T7254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.213648][ T7254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.451098][ T7254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.474582][ T7411] netlink: 68 bytes leftover after parsing attributes in process `syz.0.601'.
[  123.576462][ T7254] veth0_vlan: entered promiscuous mode
[  123.589566][ T7254] veth1_vlan: entered promiscuous mode
[  123.613683][ T7254] veth0_macvtap: entered promiscuous mode
[  123.647386][ T7254] veth1_macvtap: entered promiscuous mode
[  123.675319][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.684976][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.695044][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.698189][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.704477][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.715424][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.168515][ T5853] Bluetooth: hci0: command tx timeout
[  124.448830][  T481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.452145][  T481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.477769][ T7422] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  124.485084][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.494279][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.497130][ T7422] netlink: 'syz.0.606': attribute type 3 has an invalid length.
[  124.500811][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.606'.
[  124.559785][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.608'.
[  125.191315][ T7452] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  126.191419][   T33] audit: type=1107 audit(1758068992.848:2): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  126.250379][ T5853] Bluetooth: hci0: command tx timeout
[  126.347994][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'.
[  127.586744][ T7516] netlink: 'syz.0.639': attribute type 4 has an invalid length.
[  127.746660][ T7520] netlink: 'syz.0.641': attribute type 41 has an invalid length.
[  127.854015][ T7524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.643'.
[  129.787488][ T7544] xt_time: invalid argument - start or stop time greater than 23:59:59
[  129.802835][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  129.852348][ T7554] : entered promiscuous mode
[  130.745791][ T7562] netlink: 60 bytes leftover after parsing attributes in process `syz.3.656'.
[  130.753697][ T7562] unsupported nlmsg_type 40
[  130.798747][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.657'.
[  130.934725][ T7567] netlink: 104 bytes leftover after parsing attributes in process `syz.3.659'.
[  132.733788][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.736274][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.107855][ T7596] xt_socket: unknown flags 0x6
[  133.236395][ T7602] netlink: 'syz.3.675': attribute type 10 has an invalid length.
[  133.268540][ T7602] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  133.278896][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'.
[  133.282917][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'.
[  133.367342][ T7607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.677'.
[  133.777378][ T7616] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.681'.
[  135.049682][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'.
[  135.257884][ T7657] netlink: 'syz.3.689': attribute type 11 has an invalid length.
[  135.807774][ T7662] netlink: 232 bytes leftover after parsing attributes in process `syz.0.690'.
[  137.460068][ T7693] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.703'.
[  137.466958][ T7692] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.703'.
[  137.478700][ T7693] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.703'.
[  137.613730][ T7704] netlink: 'syz.3.707': attribute type 21 has an invalid length.
[  138.354045][ T7717] siw: device registration error -23
[  138.718833][ T7731] netlink: 'syz.3.720': attribute type 10 has an invalid length.
[  138.767790][ T7731] bond0: (slave wlan1): Releasing backup interface
[  138.944026][ T7738] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  138.983754][ T7738] netlink: 'syz.0.722': attribute type 2 has an invalid length.
[  139.761883][ T7741] lo: entered allmulticast mode
[  139.782726][ T7741] lo: entered promiscuous mode
[  139.784842][ T7741] lo: left allmulticast mode
[  139.838458][ T7745] netlink: 'syz.3.725': attribute type 7 has an invalid length.
[  139.876570][ T7746] netlink: 188 bytes leftover after parsing attributes in process `syz.0.724'.
[  140.142465][ T7759] netlink: 4200 bytes leftover after parsing attributes in process `syz.3.731'.
[  140.581690][ T7771] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.736'.
[  140.792649][ T7778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.198928][ T7805] netlink: 'syz.3.752': attribute type 3 has an invalid length.
[  141.202266][ T7805] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.752'.
[  141.237897][ T7807] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.753'.
[  141.883308][ T7832] sock: sock_timestamping_bind_phc: sock not bind to device
[  142.179242][ T5853] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  142.288860][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'.
[  142.390684][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'.
[  142.421561][ T6790] team0: Port device syz_tun removed
[  142.436859][ T7843] netlink: 'syz.3.770': attribute type 23 has an invalid length.
[  142.449227][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.456287][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.459644][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.462686][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.465318][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.517250][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.570318][ T7855] netlink: 'syz.0.775': attribute type 1 has an invalid length.
[  142.578962][ T7855] netlink: 2 bytes leftover after parsing attributes in process `syz.0.775'.
[  142.612848][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.630657][ T7857] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.776'.
[  142.634613][ T7857] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.776'.
[  142.660725][ T7857] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.776'.
[  142.699011][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.575887][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.603292][ T7844] chnl_net:caif_netlink_parms(): no params data found
[  143.804881][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.808150][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.811497][ T7844] bridge_slave_0: entered allmulticast mode
[  143.814875][ T7844] bridge_slave_0: entered promiscuous mode
[  143.821598][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.824372][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.827000][ T7844] bridge_slave_1: entered allmulticast mode
[  143.835530][ T7844] bridge_slave_1: entered promiscuous mode
[  143.862431][ T7881] netlink: 'syz.0.784': attribute type 27 has an invalid length.
[  143.931031][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.937841][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.995036][   T12] bridge_slave_1: left allmulticast mode
[  143.998753][   T12] bridge_slave_1: left promiscuous mode
[  144.001223][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.006666][   T12] bridge_slave_0: left allmulticast mode
[  144.011295][   T12] bridge_slave_0: left promiscuous mode
[  144.013795][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.263483][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.270023][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.274411][   T12] bond0 (unregistering): Released all slaves
[  144.284306][ T7844] team0: Port device team_slave_0 added
[  144.301671][ T7844] team0: Port device team_slave_1 added
[  144.364495][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.370608][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.390199][ T7844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.397779][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.402925][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.413974][ T7844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.465503][ T7844] hsr_slave_0: entered promiscuous mode
[  144.467959][ T7844] hsr_slave_1: entered promiscuous mode
[  144.488415][   T54] Bluetooth: hci2: command tx timeout
[  144.663044][ T7903] tap0: tun_chr_ioctl cmd 2147767517
[  144.701424][   T12] hsr_slave_0: left promiscuous mode
[  144.708589][   T12] hsr_slave_1: left promiscuous mode
[  144.712434][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.715434][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.729357][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.732371][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.750529][   T12] veth1_macvtap: left promiscuous mode
[  144.752537][   T12] veth0_macvtap: left promiscuous mode
[  144.754770][   T12] veth1_vlan: left promiscuous mode
[  144.761226][   T12] veth0_vlan: left promiscuous mode
[  145.182251][   T12] team0 (unregistering): Port device team_slave_1 removed
[  145.214747][   T12] team0 (unregistering): Port device team_slave_0 removed
[  145.527874][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.531520][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.727482][ T7844] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  145.749671][ T7844] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  145.762344][ T7844] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  145.767222][ T7844] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  145.950675][ T7959] __nla_validate_parse: 4 callbacks suppressed
[  145.950734][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  145.973643][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.985869][ T7844] 8021q: adding VLAN 0 to HW filter on device team0
[  145.992521][  T724] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.994952][  T724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.012006][  T724] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.014599][  T724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.160590][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'.
[  146.165980][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.812'.
[  146.181523][ T7970] netlink: 'syz.3.812': attribute type 4 has an invalid length.
[  146.200866][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.561091][ T7844] veth0_vlan: entered promiscuous mode
[  146.569247][   T54] Bluetooth: hci2: command tx timeout
[  146.588042][ T7844] veth1_vlan: entered promiscuous mode
[  146.652343][ T7844] veth0_macvtap: entered promiscuous mode
[  146.673478][ T7844] veth1_macvtap: entered promiscuous mode
[  146.703885][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.714949][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.742487][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.766921][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.778909][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.795367][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.860209][ T8000] netlink: 'syz.0.818': attribute type 10 has an invalid length.
[  146.907897][ T7996] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  146.907923][ T8000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  146.922906][ T7996] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.036048][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.075961][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.125106][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.134370][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.406846][ T8050] netlink: 'syz.4.836': attribute type 2 has an invalid length.
[  148.410650][ T8050] netlink: 'syz.4.836': attribute type 5 has an invalid length.
[  148.413533][ T8050] netlink: 'syz.4.836': attribute type 6 has an invalid length.
[  148.416220][ T8050] netlink: 'syz.4.836': attribute type 7 has an invalid length.
[  148.422240][ T8050] netlink: 9 bytes leftover after parsing attributes in process `syz.4.836'.
[  148.425476][ T8050] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.836'.
[  148.433320][ T8050] netlink: 'syz.4.836': attribute type 2 has an invalid length.
[  148.436430][ T8050] netlink: 'syz.4.836': attribute type 5 has an invalid length.
[  148.440457][ T8050] netlink: 'syz.4.836': attribute type 6 has an invalid length.
[  148.443206][ T8050] netlink: 9 bytes leftover after parsing attributes in process `syz.4.836'.
[  148.504147][ T8059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'.
[  148.648590][   T54] Bluetooth: hci2: command tx timeout
[  148.770364][ T8074] netlink: 156 bytes leftover after parsing attributes in process `syz.0.847'.
[  149.103026][ T8082] validate_nla: 2 callbacks suppressed
[  149.103037][ T8082] netlink: 'syz.4.851': attribute type 41 has an invalid length.
[  149.266892][ T8093] netlink: 'syz.3.856': attribute type 9 has an invalid length.
[  149.855282][ T8125] netlink: 'syz.3.869': attribute type 11 has an invalid length.
[  149.976884][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'.
[  149.983563][ T8135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'.
[  149.987214][ T8135] netlink: 'syz.0.874': attribute type 4 has an invalid length.
[  150.297788][ T8150] netlink: 'syz.3.879': attribute type 21 has an invalid length.
[  150.399617][ T8152] netlink: 'syz.0.876': attribute type 6 has an invalid length.
[  150.757454][   T54] Bluetooth: hci2: command tx timeout
[  151.220690][ T8176] __nla_validate_parse: 1 callbacks suppressed
[  151.220752][ T8176] netlink: 208344 bytes leftover after parsing attributes in process `syz.0.890'.
[  151.227193][ T8176] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  151.231150][ T8176] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.356566][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'.
[  152.046543][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.051406][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.055742][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.062250][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  152.067819][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  152.261640][ T8187] chnl_net:caif_netlink_parms(): no params data found
[  152.328820][ T5853] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  152.446004][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.448682][ T8198] netlink: 'syz.0.895': attribute type 21 has an invalid length.
[  152.449431][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.457722][ T8187] bridge_slave_0: entered allmulticast mode
[  152.461518][ T8187] bridge_slave_0: entered promiscuous mode
[  152.465961][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.470479][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.473426][ T8187] bridge_slave_1: entered allmulticast mode
[  152.476329][ T8187] bridge_slave_1: entered promiscuous mode
[  152.511268][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.516784][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.536196][ T8187] team0: Port device team_slave_0 added
[  152.541731][ T8187] team0: Port device team_slave_1 added
[  152.559674][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.562417][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.572595][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.577512][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.580258][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.590060][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.646332][ T8187] hsr_slave_0: entered promiscuous mode
[  152.650664][ T8187] hsr_slave_1: entered promiscuous mode
[  152.653038][ T8187] debugfs: 'hsr0' already exists in 'hsr'
[  152.654835][ T8187] Cannot create hsr debugfs directory
[  152.682725][ T8208] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.899'.
[  152.732150][ T8212] netlink: 'syz.4.901': attribute type 33 has an invalid length.
[  152.734720][ T8212] netlink: 152 bytes leftover after parsing attributes in process `syz.4.901'.
[  152.877744][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'.
[  152.914247][ T8187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.012054][ T8187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.084391][ T8187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.205382][ T8187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.263617][ T8240] netlink: 'syz.4.915': attribute type 1 has an invalid length.
[  153.385115][ T8187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  153.401789][ T8187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  153.417121][ T8187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  153.425422][ T8187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  153.461277][ T8252] syzkaller0: entered promiscuous mode
[  153.463566][ T8252] syzkaller0: entered allmulticast mode
[  153.535540][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.961889][ T8278] netlink: 'syz.4.929': attribute type 1 has an invalid length.
[  154.092000][ T5853] Bluetooth: hci0: command tx timeout
[  155.375822][ T8187] 8021q: adding VLAN 0 to HW filter on device team0
[  155.397261][  T724] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.400409][  T724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.409399][  T724] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.412404][  T724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.604635][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.657811][ T8187] veth0_vlan: entered promiscuous mode
[  155.663783][ T8187] veth1_vlan: entered promiscuous mode
[  155.682865][ T8187] veth0_macvtap: entered promiscuous mode
[  155.688035][ T8187] veth1_macvtap: entered promiscuous mode
[  155.692132][ T8309] rdma_rxe: rxe_newlink: failed to add erspan0
[  155.701762][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.711112][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.720250][ T7359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.726336][ T7359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.737816][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'.
[  155.947001][ T7359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.952130][ T7359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.076919][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.081446][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.126053][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.130391][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.169881][ T5853] Bluetooth: hci0: command tx timeout
[  156.291398][ T8330] netlink: 'syz.0.951': attribute type 21 has an invalid length.
[  156.294658][ T8330] netlink: 128 bytes leftover after parsing attributes in process `syz.0.951'.
[  156.301610][ T8330] netlink: 'syz.0.951': attribute type 4 has an invalid length.
[  156.304861][ T8330] netlink: 'syz.0.951': attribute type 5 has an invalid length.
[  156.306146][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.893'.
[  156.308225][ T8330] netlink: 3 bytes leftover after parsing attributes in process `syz.0.951'.
[  156.394272][ T8335] netlink: 'syz.0.953': attribute type 4 has an invalid length.
[  156.397909][ T8335] netlink: 152 bytes leftover after parsing attributes in process `syz.0.953'.
[  156.411616][ T8335] .`: renamed from bond0 (while UP)
[  157.797006][ T8351] syzkaller0: entered promiscuous mode
[  157.799655][ T8351] syzkaller0: entered allmulticast mode
[  158.109877][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'.
[  158.248498][ T5853] Bluetooth: hci0: command tx timeout
[  158.992064][ T8405] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  159.054716][ T8410] netlink: 'syz.0.972': attribute type 21 has an invalid length.
[  159.057523][ T8410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'.
[  159.089582][ T8413] netlink: 'syz.4.973': attribute type 21 has an invalid length.
[  159.092180][ T8413] netlink: 'syz.4.973': attribute type 11 has an invalid length.
[  159.185153][ T8422] netlink: 'syz.0.979': attribute type 2 has an invalid length.
[  159.187704][ T8422] netlink: 130532 bytes leftover after parsing attributes in process `syz.0.979'.
[  159.394304][ T8435] netlink: 'syz.3.984': attribute type 22 has an invalid length.
[  159.397963][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'.
[  159.515242][ T8448] tap0: tun_chr_ioctl cmd 1074025675
[  159.517045][ T8448] tap0: persist enabled
[  159.519715][ T8448] tap0: tun_chr_ioctl cmd 1074025675
[  159.521498][ T8448] tap0: persist enabled
[  160.201538][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'.
[  160.209597][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'.
[  160.328802][ T5853] Bluetooth: hci0: command tx timeout
[  160.350598][ T8480] netlink: 'syz.4.1005': attribute type 13 has an invalid length.
[  160.356291][ T8480] : renamed from syz_tun (while UP)
[  160.363311][ T8480] : refused to change device tx_queue_len
[  160.365521][ T8480] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  161.049891][ T8522] C: renamed from team_slave_0 (while UP)
[  161.397820][ T8542] __nla_validate_parse: 6 callbacks suppressed
[  161.397832][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1033'.
[  161.475942][ T8548] validate_nla: 1 callbacks suppressed
[  161.475954][ T8548] netlink: 'syz.4.1036': attribute type 3 has an invalid length.
[  161.483769][ T8548] netlink: 'syz.4.1036': attribute type 1 has an invalid length.
[  161.491578][ T8549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.573757][ T8553] netlink: 'syz.0.1038': attribute type 10 has an invalid length.
[  161.576762][ T8553] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1038'.
[  161.621625][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'.
[  162.564873][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'.
[  162.985427][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'.
[  162.991393][ T8588] openvswitch: netlink: Missing key (keys=40, expected=100)
[  163.101292][ T8598] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1059'.
[  163.239004][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'.
[  163.779423][ T8619] netlink: 'syz.4.1069': attribute type 1 has an invalid length.
[  163.783348][ T8619] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1069'.
[  164.095125][ T8638] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1076'.
[  164.916871][ T8656] dummy0: mtu less than device minimum
[  164.917239][ T8655] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  164.923564][ T8655] netlink: 'syz.4.1083': attribute type 2 has an invalid length.
[  165.138181][ T8671] netlink: 'syz.0.1090': attribute type 13 has an invalid length.
[  165.160324][ T8671] netlink: 'syz.0.1090': attribute type 17 has an invalid length.
[  165.628493][ T8671] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.632160][ T8671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.636780][ T8671] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.640182][ T8671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.700151][ T8671] 8021q: adding VLAN 0 to HW filter on device .`
[  165.739029][ T8671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.811852][ T8671] syz.0.1090 (8671) used greatest stack depth: 18424 bytes left
[  166.811676][ T8757] netlink: 'syz.3.1123': attribute type 64 has an invalid length.
[  166.903151][ T8763] netlink: 'syz.3.1126': attribute type 10 has an invalid length.
[  168.027404][ T8800] netlink: 'syz.3.1141': attribute type 1 has an invalid length.
[  168.160465][ T8810] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1146'.
[  169.223557][ T8845] netlink: 'syz.4.1158': attribute type 39 has an invalid length.
[  169.506643][ T8845] hsr_slave_0 (unregistering): left promiscuous mode
[  170.118088][ T8864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1167'.
[  170.540483][ T8881] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1174'.
[  170.628521][ T8888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1177'.
[  170.646139][ T8891] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1180'.
[  170.933426][ T8900] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  171.125168][ T8919] netlink: 'syz.0.1191': attribute type 27 has an invalid length.
[  171.135456][ T8919] netlink: 'syz.0.1191': attribute type 4 has an invalid length.
[  171.139333][ T8919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1191'.
[  171.241765][ T8927] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1192'.
[  171.291977][ T8931] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1196'.
[  171.298245][ T8931] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1196'.
[  171.392802][ T8935] netlink: 'syz.0.1198': attribute type 1 has an invalid length.
[  171.604485][ T8945] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1203'.
[  172.132067][ T8961] tmpfs: Bad value for 'gid'
[  172.133964][ T8961] tmpfs: Bad value for 'gid'
[  172.252681][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.646430][ T5853] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  172.654985][ T5853] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  172.929978][ T9000] netlink: 'syz.4.1224': attribute type 29 has an invalid length.
[  172.945779][ T9000] netlink: 'syz.4.1224': attribute type 29 has an invalid length.
[  172.958197][ T9000] netlink: 'syz.4.1224': attribute type 29 has an invalid length.
[  173.041187][   T33] audit: type=1107 audit(1758069039.688:3): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  173.488846][ T9031] netlink: 'syz.4.1237': attribute type 10 has an invalid length.
[  173.498912][ T9031] __nla_validate_parse: 6 callbacks suppressed
[  173.498973][ T9031] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1237'.
[  173.567233][ T9035] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1240'.
[  174.884211][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'.
[  175.554689][ T9114] netlink: 'syz.3.1275': attribute type 1 has an invalid length.
[  175.563110][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1275'.
[  175.692822][ T9124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1280'.
[  175.894521][ T5853] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  176.656900][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'.
[  176.668372][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1299'.
[  176.734303][ T9175] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1302'.
[  176.943546][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'.
[  176.955824][ T9196] netlink: 'syz.4.1313': attribute type 21 has an invalid length.
[  177.745961][ T9236] nft_compat: unsupported protocol 0
[  177.810307][   T33] audit: type=1107 audit(1758069044.468:4): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':8=5MHCIT2x'!{x5	E&'
[  177.896054][ T9248] netlink: 'syz.4.1336': attribute type 2 has an invalid length.
[  177.899138][ T9248] netlink: 'syz.4.1336': attribute type 8 has an invalid length.
[  177.903124][ T9248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1336'.
[  178.113379][ T9257] netlink: 'syz.0.1339': attribute type 8 has an invalid length.
[  178.116143][ T9257] netlink: 'syz.0.1339': attribute type 3 has an invalid length.
[  178.172369][ T9257] netlink: 'syz.0.1339': attribute type 13 has an invalid length.
[  178.175670][ T9257] netlink: 'syz.0.1339': attribute type 17 has an invalid length.
[  178.243413][ T9257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.109868][ T9284] __nla_validate_parse: 5 callbacks suppressed
[  179.109879][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'.
[  180.166315][ T9338] TCP: TCP_TX_DELAY enabled
[  180.538201][ T9363] netlink: 'syz.3.1388': attribute type 10 has an invalid length.
[  180.638150][ T9363] batman_adv: batadv0: Adding interface: netdevsim0
[  180.641536][ T9363] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.654051][ T9363] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  180.851976][ T9375] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1392'.
[  180.897862][ T9377] netlink: 'syz.3.1394': attribute type 2 has an invalid length.
[  180.965516][ T9379] sctp: [Deprecated]: syz.3.1395 (pid 9379) Use of int in max_burst socket option deprecated.
[  180.965516][ T9379] Use struct sctp_assoc_value instead
[  181.499528][ T9403] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1403'.
[  181.507954][ T9403] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1403'.
[  181.565045][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'.
[  181.568151][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1407'.
[  182.032252][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  182.045080][ T9420] netlink: 'syz.4.1413': attribute type 2 has an invalid length.
[  182.052433][ T9420] netlink: 'syz.4.1413': attribute type 9 has an invalid length.
[  182.055608][ T9420] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1413'.
[  182.412617][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'.
[  182.495235][ T9432] netlink: 'syz.4.1418': attribute type 1 has an invalid length.
[  182.497889][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'.
[  182.539733][ T9434] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1419'.
[  183.112563][ T9453] netlink: 'syz.3.1426': attribute type 21 has an invalid length.
[  184.179846][   T13] bridge_slave_1: left allmulticast mode
[  184.182244][   T13] bridge_slave_1: left promiscuous mode
[  184.184668][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.203328][   T13] bridge_slave_0: left allmulticast mode
[  184.205709][   T13] bridge_slave_0: left promiscuous mode
[  184.212356][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.376887][ T9488] validate_nla: 1 callbacks suppressed
[  184.376898][ T9488] netlink: 'syz.3.1441': attribute type 13 has an invalid length.
[  184.383385][ T9488] netlink: 'syz.3.1441': attribute type 27 has an invalid length.
[  184.522032][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.527875][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.534425][   T13] bond0 (unregistering): Released all slaves
[  184.545681][ T9478] __nla_validate_parse: 3 callbacks suppressed
[  184.545694][ T9478] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1437'.
[  184.553091][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1437'.
[  184.653706][ T9491] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  184.826712][ T9506] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  184.831141][ T9506] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  184.953812][ T9507] bridge_slave_1: left allmulticast mode
[  184.956748][ T9507] bridge_slave_1: left promiscuous mode
[  185.706744][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.022390][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  186.631914][ T9507] bridge_slave_0: left promiscuous mode
[  186.634528][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.804342][ T9528] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1457'.
[  186.903926][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1460'.
[  186.914325][   T13] hsr_slave_0: left promiscuous mode
[  186.917354][   T13] hsr_slave_1: left promiscuous mode
[  186.924560][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.930683][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.934551][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.939501][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.943178][   T13] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  186.946293][   T13] batman_adv: batadv0: Removing interface: hsr_slave_1
[  186.955391][   T13] veth1_macvtap: left promiscuous mode
[  186.957341][   T13] veth0_macvtap: left promiscuous mode
[  186.960948][   T13] veth1_vlan: left promiscuous mode
[  186.962879][   T13] veth0_vlan: left promiscuous mode
[  187.139853][ T5853] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13
[  187.386524][   T13] team0 (unregistering): Port device team_slave_1 removed
[  187.425839][   T13] team0 (unregistering): Port device team_slave_0 removed
[  187.465861][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1470'.
[  187.674165][ T5853] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  187.674410][ T5853] Bluetooth: hci0: connection err: -111
[  187.992723][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'.
[  187.997547][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'.
[  188.135792][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'.
[  188.710134][ T9609] netlink: 'syz.3.1489': attribute type 6 has an invalid length.
[  188.712837][ T9609] netlink: 'syz.3.1489': attribute type 3 has an invalid length.
[  188.715657][ T9609] netlink: 199728 bytes leftover after parsing attributes in process `syz.3.1489'.
[  188.777525][ T9611] netlink: 'syz.3.1490': attribute type 21 has an invalid length.
[  188.788530][ T9611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1490'.
[  188.820770][ T9613] netlink: 'syz.3.1492': attribute type 21 has an invalid length.
[  189.007218][ T9621] netlink: 'syz.4.1494': attribute type 1 has an invalid length.
[  189.010573][ T9621] netlink: 'syz.4.1494': attribute type 4 has an invalid length.
[  190.111230][ T9644] netlink: 'syz.3.1504': attribute type 21 has an invalid length.
[  190.331841][ T9661] __nla_validate_parse: 2 callbacks suppressed
[  190.331857][ T9661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1513'.
[  190.942737][ T9698] netlink: 'syz.3.1529': attribute type 4 has an invalid length.
[  190.950332][ T9698] netlink: 'syz.3.1529': attribute type 10 has an invalid length.
[  191.716273][ T9703] netlink: 'syz.0.1531': attribute type 21 has an invalid length.
[  191.722847][ T9703] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[  191.773050][ T9706] netlink: 'syz.0.1533': attribute type 29 has an invalid length.
[  191.780114][ T9706] netlink: 'syz.0.1533': attribute type 29 has an invalid length.
[  191.838852][ T9713] netlink: 'syz.4.1535': attribute type 10 has an invalid length.
[  191.852840][ T9714] netlink: 'syz.0.1536': attribute type 13 has an invalid length.
[  191.856640][ T9714] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1536'.
[  191.875341][ T9714] erspan0: refused to change device tx_queue_len
[  191.898938][ T9714] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  192.116372][ T9725] netlink: 'syz.0.1541': attribute type 10 has an invalid length.
[  192.256842][ T9725] .`: (slave batadv0): Error -22 calling dev_set_mtu
[  192.345004][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1546'.
[  193.534443][ T9754] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1556'.
[  193.546755][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.644711][ T9758] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1554'.
[  193.926586][ T9762] xt_socket: unknown flags 0x40
[  194.187204][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.190211][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.887345][ T9789] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1567'.
[  195.089125][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.094542][ T9802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.095033][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.139435][ T9805] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1575'.
[  195.196546][ T9803] bridge0: entered allmulticast mode
[  195.216003][ T9812] validate_nla: 3 callbacks suppressed
[  195.216014][ T9812] netlink: 'syz.0.1578': attribute type 210 has an invalid length.
[  195.265773][ T9814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.348638][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.351728][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.354796][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.357483][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.365481][ T9808] bridge0: entered promiscuous mode
[  196.375409][ T9840] netlink: 'syz.4.1590': attribute type 10 has an invalid length.
[  196.378675][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1590'.
[  196.381785][ T9840] batadv0: entered promiscuous mode
[  196.383586][ T9840] batadv0: entered allmulticast mode
[  196.385891][ T9840] bridge0: port 3(batadv0) entered blocking state
[  196.389037][ T9840] bridge0: port 3(batadv0) entered disabled state
[  196.412656][ T9840] bridge0: port 3(batadv0) entered blocking state
[  196.415594][ T9840] bridge0: port 3(batadv0) entered forwarding state
[  196.429665][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'.
[  196.459324][ T9847] netlink: 'syz.3.1593': attribute type 16 has an invalid length.
[  196.462680][ T9847] netlink: 'syz.3.1593': attribute type 3 has an invalid length.
[  196.466143][ T9847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1593'.
[  196.640499][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  196.644791][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  197.039596][ T9874] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  197.462138][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'.
[  197.537287][ T5853] Bluetooth: hci1: adv larger than maximum supported
[  197.537338][ T5853] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  197.541629][ T5853] Bluetooth: hci1: Malformed LE Event: 0x0d
[  197.914427][ T9931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1630'.
[  197.967081][ T9933] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  198.034807][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'.
[  198.416128][ T9950] netlink: 'syz.0.1639': attribute type 10 has an invalid length.
[  198.424071][ T9950] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1639'.
[  198.807458][ T9976] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1651'.
[  199.453426][T10000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1663'.
[  199.774652][T10007] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1666'.
[  199.824417][T10009] netlink: 'syz.4.1667': attribute type 6 has an invalid length.
[  199.923856][T10011] siw: device registration error -23
[  200.272635][T10028] netlink: 'syz.4.1676': attribute type 8 has an invalid length.
[  200.276220][T10028] netlink: 'syz.4.1676': attribute type 6 has an invalid length.
[  200.331414][T10030] netlink: 'syz.4.1677': attribute type 21 has an invalid length.
[  200.685455][ T5853] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  201.111653][T10060] syzkaller0: entered promiscuous mode
[  201.117609][T10060] syzkaller0: entered allmulticast mode
[  202.189314][T10066] netlink: 'syz.4.1695': attribute type 1 has an invalid length.
[  202.755464][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  202.914351][T10076] __nla_validate_parse: 4 callbacks suppressed
[  202.914410][T10076] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1698'.
[  203.897811][T10089] sctp: [Deprecated]: syz.4.1704 (pid 10089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.897811][T10089] Use struct sctp_sack_info instead
[  204.392598][T10069] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1696'.
[  204.707504][T10102] netlink: 'syz.4.1707': attribute type 9 has an invalid length.
[  204.713555][T10102] netlink: 211924 bytes leftover after parsing attributes in process `syz.4.1707'.
[  206.113581][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'.
[  206.226990][T10130] netlink: 'syz.4.1721': attribute type 3 has an invalid length.
[  206.231638][T10130] netlink: 'syz.4.1721': attribute type 1 has an invalid length.
[  206.243978][T10130] netlink: 201352 bytes leftover after parsing attributes in process `syz.4.1721'.
[  206.267325][T10134] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1723'.
[  207.420209][T10169] netlink: 'syz.3.1737': attribute type 6 has an invalid length.
[  207.429684][T10169] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1737'.
[  207.506173][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'.
[  207.513430][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1739'.
[  207.606014][T10179] tap1: tun_chr_ioctl cmd 1074025680
[  207.810371][T10185] netlink: 731 bytes leftover after parsing attributes in process `syz.3.1745'.
[  210.226113][T10228] netlink: 'syz.3.1765': attribute type 21 has an invalid length.
[  210.231019][T10228] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1765'.
[  212.144809][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1791'.
[  212.298183][T10298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1795'.
[  212.307956][T10298] tc_dump_action: action bad kind
[  212.810500][T10323] netlink: 'syz.4.1807': attribute type 2 has an invalid length.
[  214.605108][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1820'.
[  214.613237][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1820'.
[  214.617993][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1820'.
[  214.660277][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.664493][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.667368][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.671563][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.674850][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.810040][T10353] chnl_net:caif_netlink_parms(): no params data found
[  214.916825][T10353] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.924923][T10353] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.928014][T10353] bridge_slave_0: entered allmulticast mode
[  214.934740][T10353] bridge_slave_0: entered promiscuous mode
[  214.943752][T10353] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.946779][T10353] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.953269][T10353] bridge_slave_1: entered allmulticast mode
[  214.959113][T10353] bridge_slave_1: entered promiscuous mode
[  215.005745][T10353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.022948][T10353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.084023][T10353] team0: Port device team_slave_0 added
[  215.095266][T10353] team0: Port device team_slave_1 added
[  215.151500][T10353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.164409][T10353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.175677][T10353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.181052][T10353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.183374][T10353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.194008][T10353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.256054][T10353] hsr_slave_0: entered promiscuous mode
[  215.260990][T10353] hsr_slave_1: entered promiscuous mode
[  215.267060][T10353] debugfs: 'hsr0' already exists in 'hsr'
[  215.273425][T10353] Cannot create hsr debugfs directory
[  215.298015][T10373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.428933][T10379] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  215.674318][T10353] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.692665][T10353] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  215.704091][T10353] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  215.716827][T10353] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  215.777123][T10401] netlink: 'syz.3.1835': attribute type 29 has an invalid length.
[  215.782185][T10401] netlink: 'syz.3.1835': attribute type 3 has an invalid length.
[  215.785009][T10401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1835'.
[  215.793533][T10402] netlink: 'syz.4.1836': attribute type 10 has an invalid length.
[  215.880426][T10353] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.911168][T10353] 8021q: adding VLAN 0 to HW filter on device team0
[  215.953207][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.956476][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.962055][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.965134][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.096053][T10413] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  216.142343][T10353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.311878][T10353] veth0_vlan: entered promiscuous mode
[  216.322036][T10353] veth1_vlan: entered promiscuous mode
[  216.345912][T10353] veth0_macvtap: entered promiscuous mode
[  216.352339][T10353] veth1_macvtap: entered promiscuous mode
[  216.379079][T10353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.386722][T10353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.394686][ T7359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.409465][ T7359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.414801][ T7359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.423714][ T7359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.540326][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.544798][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.593077][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.596462][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.734167][ T5853] Bluetooth: hci1: command tx timeout
[  216.790552][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'.
[  216.811457][T10444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.815820][T10444] IPv6: NLM_F_CREATE should be set when creating new route
[  216.819443][T10444] IPv6: NLM_F_CREATE should be set when creating new route
[  216.966142][T10458] netlink: 'syz.5.1856': attribute type 4 has an invalid length.
[  216.971780][T10458] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1856'.
[  216.982497][T10458] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  217.761976][T10487] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.1868'.
[  217.809613][T10488] syzkaller0: entered promiscuous mode
[  217.816765][T10488] syzkaller0: entered allmulticast mode
[  218.501625][T10504] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  218.715792][T10508] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1879'.
[  218.818528][ T5853] Bluetooth: hci1: command tx timeout
[  218.882420][T10528] tap1: tun_chr_ioctl cmd 35108
[  219.250817][ T5853] Bluetooth: hci1: Malformed LE Event: 0x0b
[  219.325747][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1896'.
[  219.671720][T10569] netlink: 'syz.5.1906': attribute type 6 has an invalid length.
[  219.675327][T10569] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1906'.
[  220.703624][T10596] netlink: 'syz.5.1918': attribute type 2 has an invalid length.
[  220.707002][T10596] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1918'.
[  220.891123][ T5853] Bluetooth: hci1: command tx timeout
[  221.243244][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1928'.
[  221.576305][T10627] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1932'.
[  221.584618][T10627] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  221.779566][T10631] netdevsim netdevsim3 : renamed from netdevsim0
[  221.885886][T10633] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1935'.
[  222.027254][T10642] netlink: 'syz.4.1939': attribute type 5 has an invalid length.
[  222.096204][T10633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.107375][T10633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.114467][T10633] bond0 (unregistering): Released all slaves
[  222.512630][T10659] netlink: 'syz.4.1946': attribute type 7 has an invalid length.
[  222.516262][T10659] netlink: 'syz.4.1946': attribute type 8 has an invalid length.
[  222.691156][T10668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1950'.
[  222.773345][T10664] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  222.869902][T10675] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1953'.
[  222.959621][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1956'.
[  222.964287][T10681] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1956'.
[  222.970412][ T5853] Bluetooth: hci1: command tx timeout
[  223.724543][T10723] netlink: 'syz.5.1975': attribute type 10 has an invalid length.
[  224.153519][T10741] syzkaller1: tun_chr_ioctl cmd 2147767521
[  224.314555][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1989'.
[  224.379462][T10752] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1989'.
[  224.599133][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1992'.
[  225.675733][T10785] netlink: 'syz.5.2004': attribute type 4 has an invalid length.
[  225.679567][T10785] netlink: 'syz.5.2004': attribute type 11 has an invalid length.
[  226.731065][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  226.980652][ T5853] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  227.053486][T10862] netlink: 'syz.4.2038': attribute type 1 has an invalid length.
[  227.060464][T10862] __nla_validate_parse: 5 callbacks suppressed
[  227.060480][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'.
[  227.067071][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.186573][T10874] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.2044'.
[  227.331963][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'.
[  227.452553][T10895] netlink: 'syz.4.2053': attribute type 1 has an invalid length.
[  227.455416][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2053'.
[  227.501070][ T5853] Bluetooth: hci1: Malformed Event: 0x2f
[  228.840918][T10948] wg2: entered allmulticast mode
[  228.867374][T10949] wg2: entered promiscuous mode
[  228.981652][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'.
[  229.363653][T10977] netlink: 'syz.4.2084': attribute type 1 has an invalid length.
[  229.366763][T10977] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2084'.
[  229.725383][T10989] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  229.783365][   T34] wlan1: Trigger new scan to find an IBSS to join
[  230.761862][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1031611195 wd_nsec: 1031611224
[  230.996623][ T6314] wlan1: Creating new IBSS network, BSSID 9a:e9:f3:5e:4f:fa
[  231.979170][T11038] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2109'.
[  233.244773][T11082] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2128'.
[  234.300879][T11101] pim6reg: tun_chr_ioctl cmd 1074025677
[  234.303451][T11101] pim6reg: linktype set to 805
[  234.455146][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2140'.
[  234.773221][T11116] syzkaller0: entered promiscuous mode
[  234.775759][T11116] syzkaller0: entered allmulticast mode
[  236.075574][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2147'.
[  237.387837][T11165] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2161'.
[  237.403340][T11165] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2161'.
[  237.596980][T11173] openvswitch: netlink: Unknown key attributes 1
[  238.522319][T11186] sctp: [Deprecated]: syz.3.2171 (pid 11186) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.522319][T11186] Use struct sctp_sack_info instead
[  239.125721][T11197] netlink: 'syz.4.2176': attribute type 1 has an invalid length.
[  239.308552][T11201] can: request_module (can-proto-5) failed.
[  239.323432][T11205] can: request_module (can-proto-3) failed.
[  239.664975][T11227] netlink: 'syz.4.2187': attribute type 1 has an invalid length.
[  239.821651][T11242] netlink: 'syz.4.2194': attribute type 21 has an invalid length.
[  239.830853][T11242] netlink: 'syz.4.2194': attribute type 1 has an invalid length.
[  239.833500][T11242] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2194'.
[  240.372082][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.221516][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.304885][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.429520][   T13] .`: (slave netdevsim0): Releasing backup interface
[  241.434834][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.824473][T11301] netlink: 'syz.5.2214': attribute type 1 has an invalid length.
[  241.827784][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2214'.
[  241.997996][   T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.004437][   T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.009806][   T13] .` (unregistering): Released all slaves
[  242.065459][   T13] : left promiscuous mode
[  242.372973][T11320] netlink: 'syz.4.2221': attribute type 12 has an invalid length.
[  242.388392][T11320] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2221'.
[  242.596662][   T13] hsr_slave_0: left promiscuous mode
[  242.605757][   T13] hsr_slave_1: left promiscuous mode
[  242.616606][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.622755][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.629197][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.632289][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.644668][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2226'.
[  242.652474][   T13] veth0_macvtap: left promiscuous mode
[  242.756875][T11342] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2227'.
[  243.215909][   T13] team0 (unregistering): Port device team_slave_1 removed
[  243.353444][   T13] team0 (unregistering): Port device C removed
[  243.412039][T11349] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2230'.
[  243.535666][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'.
[  243.812525][ T5890] infiniband syz0: ib_query_port failed (-19)
[  244.136529][T11367] netlink: 'syz.3.2238': attribute type 4 has an invalid length.
[  245.505496][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'.
[  246.372199][T11444] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2261'.
[  246.376072][T11439] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2261'.
[  246.405733][T11446] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2264'.
[  246.436629][T11439] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.2261'.
[  247.857616][T11487] netlink: 'syz.4.2279': attribute type 29 has an invalid length.
[  248.357019][T11516] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2292'.
[  248.388030][T11518] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2293'.
[  248.962649][T11506] delete_channel: no stack
[  249.087425][T11531] netlink: 'syz.3.2299': attribute type 3 has an invalid length.
[  249.663788][T11544] netlink: 2451 bytes leftover after parsing attributes in process `syz.4.2304'.
[  249.708074][T11546] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2305'.
[  249.714059][T11548] netlink: 'syz.4.2306': attribute type 10 has an invalid length.
[  249.735134][T11548] team0: Port device netdevsim0 added
[  249.828166][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2310'.
[  249.836471][T11556] openvswitch: netlink: nsh attr 165 is out of range max 3
[  249.841981][T11556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.993372][T11566] warn_alloc: 1 callbacks suppressed
[  249.993391][T11566] syz.5.2314: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  250.004249][T11566] CPU: 1 UID: 0 PID: 11566 Comm: syz.5.2314 Not tainted syzkaller #0 PREEMPT(full) 
[  250.004266][T11566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.004274][T11566] Call Trace:
[  250.004282][T11566]  <TASK>
[  250.004290][T11566]  dump_stack_lvl+0x189/0x250
[  250.004327][T11566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.004349][T11566]  ? __pfx__printk+0x10/0x10
[  250.004376][T11566]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  250.004398][T11566]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  250.004426][T11566]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  250.004456][T11566]  warn_alloc+0x214/0x310
[  250.004480][T11566]  ? stack_depot_save_flags+0x40/0x860
[  250.004505][T11566]  ? __pfx_warn_alloc+0x10/0x10
[  250.004532][T11566]  ? kasan_save_track+0x4f/0x80
[  250.004557][T11566]  ? xskq_create+0x56/0x170
[  250.004572][T11566]  ? xsk_init_queue+0xb0/0x110
[  250.004582][T11566]  ? xsk_setsockopt+0x57b/0x8d0
[  250.004594][T11566]  ? do_sock_setsockopt+0x17c/0x1b0
[  250.004611][T11566]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  250.004626][T11566]  ? do_syscall_64+0xfa/0x3b0
[  250.004641][T11566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.004684][T11566]  __vmalloc_node_range_noprof+0x125/0x12f0
[  250.004836][T11566]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  250.004886][T11566]  ? __kasan_kmalloc+0x93/0xb0
[  250.004922][T11566]  vmalloc_user_noprof+0xad/0xf0
[  250.004940][T11566]  ? xskq_create+0xbf/0x170
[  250.004965][T11566]  xskq_create+0xbf/0x170
[  250.004995][T11566]  xsk_init_queue+0xb0/0x110
[  250.005025][T11566]  xsk_setsockopt+0x57b/0x8d0
[  250.005053][T11566]  ? __pfx_xsk_setsockopt+0x10/0x10
[  250.005073][T11566]  ? __pfx_aa_sk_perm+0x10/0x10
[  250.005104][T11566]  ? __fget_files+0x2a/0x420
[  250.005115][T11566]  ? aa_sock_opt_perm+0xff/0x1b0
[  250.005147][T11566]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  250.005162][T11566]  ? __pfx_xsk_setsockopt+0x10/0x10
[  250.005186][T11566]  do_sock_setsockopt+0x17c/0x1b0
[  250.005225][T11566]  __x64_sys_setsockopt+0x13f/0x1b0
[  250.005262][T11566]  do_syscall_64+0xfa/0x3b0
[  250.005279][T11566]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.005297][T11566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.005310][T11566]  ? exc_page_fault+0x9f/0xf0
[  250.005337][T11566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.005351][T11566] RIP: 0033:0x7f84c878eba9
[  250.005367][T11566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.005377][T11566] RSP: 002b:00007f84c95ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  250.005391][T11566] RAX: ffffffffffffffda RBX: 00007f84c89d5fa0 RCX: 00007f84c878eba9
[  250.005401][T11566] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  250.005409][T11566] RBP: 00007f84c8811e19 R08: 0000000000000004 R09: 0000000000000000
[  250.005417][T11566] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  250.005425][T11566] R13: 00007f84c89d6038 R14: 00007f84c89d5fa0 R15: 00007fff21055208
[  250.005492][T11566]  </TASK>
[  250.005498][T11566] Mem-Info:
[  250.177103][T11566] active_anon:9287 inactive_anon:0 isolated_anon:0
[  250.177103][T11566]  active_file:16064 inactive_file:38323 isolated_file:0
[  250.177103][T11566]  unevictable:1768 dirty:285 writeback:0
[  250.177103][T11566]  slab_reclaimable:5633 slab_unreclaimable:58509
[  250.177103][T11566]  mapped:18128 shmem:2431 pagetables:1262
[  250.177103][T11566]  sec_pagetables:0 bounce:0
[  250.177103][T11566]  kernel_misc_reclaimable:0
[  250.177103][T11566]  free:276666 free_pcp:17940 free_cma:0
[  250.208506][T11566] Node 0 active_anon:17676kB inactive_anon:0kB active_file:17936kB inactive_file:131252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30816kB dirty:932kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6468kB pagetables:2640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  250.228531][T11566] Node 1 active_anon:19472kB inactive_anon:0kB active_file:46320kB inactive_file:22040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41696kB dirty:208kB writeback:0kB shmem:4776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5740kB pagetables:2408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  250.258564][T11566] Node 0 DMA free:14820kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:536kB local_pcp:256kB free_cma:0kB
[  250.288698][T11566] lowmem_reserve[]: 0 811 811 811 811
[  250.291255][T11566] Node 0 DMA32 free:285412kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17676kB inactive_anon:0kB active_file:17936kB inactive_file:131252kB unevictable:3536kB writepending:932kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:33848kB local_pcp:18560kB free_cma:0kB
[  250.359868][T11566] lowmem_reserve[]: 0 0 0 0 0
[  250.363838][T11566] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.389463][T11566] lowmem_reserve[]: 0 0 854 854 854
[  250.389753][T11570] raw_sendmsg: syz.4.2316 forgot to set AF_INET. Fix it!
[  250.392006][T11566] Node 1 Normal free:353944kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19336kB inactive_anon:0kB active_file:46320kB inactive_file:22040kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32180kB local_pcp:15616kB free_cma:0kB
[  250.428416][T11566] lowmem_reserve[]: 0 0 0 0 0
[  250.439642][T11566] Node 0 DMA: 8*4kB (UM) 5*8kB (UM) 4*16kB (UM) 5*32kB (U) 3*64kB (U) 4*128kB (UM) 2*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 14824kB
[  250.449074][T11566] Node 0 DMA32: 353*4kB (UME) 490*8kB (UME) 191*16kB (UME) 426*32kB (UME) 407*64kB (UME) 206*128kB (UME) 109*256kB (UME) 49*512kB (UME) 26*1024kB (UM) 6*2048kB (UM) 28*4096kB (U) = 281028kB
[  250.468174][T11566] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  250.513988][T11570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2316'.
[  250.524774][T11566] Node 1 Normal: 863*4kB (UME) 484*8kB (UME) 508*16kB (UME) 467*32kB (UME) 288*64kB (UME) 94*128kB (UME) 33*256kB (UME) 23*512kB (UME) 15*1024kB (UME) 3*2048kB (UME) 56*4096kB (UM) = 331964kB
[  250.538832][T11566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.543005][T11566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.547123][T11566] 56818 total pagecache pages
[  250.552506][T11566] 0 pages in swap cache
[  250.554558][T11566] Free swap  = 124996kB
[  250.556622][T11566] Total swap = 124996kB
[  250.561186][T11566] 786301 pages RAM
[  250.565461][T11566] 0 pages HighMem/MovableOnly
[  250.571365][T11566] 241350 pages reserved
[  250.575825][T11566] 0 pages cma reserved
[  250.655056][T11570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2316'.
[  250.737162][T11570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2316'.
[  250.770483][ T5853] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  251.497911][T11613] netlink: 'syz.4.2334': attribute type 10 has an invalid length.
[  251.512615][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2334'.
[  251.649708][T11617] vcan0 speed is unknown, defaulting to 1000
[  251.654661][T11617] vcan0 speed is unknown, defaulting to 1000
[  251.657475][T11617] vcan0 speed is unknown, defaulting to 1000
[  251.867131][T11617] infiniband syz1: set active
[  251.872434][ T5313] vcan0 speed is unknown, defaulting to 1000
[  251.875942][T11617] infiniband syz1: added vcan0
[  251.916296][T11617] RDS/IB: syz1: added
[  251.918894][T11617] smc: adding ib device syz1 with port count 1
[  251.921339][T11617] smc:    ib device syz1 port 1 has pnetid 
[  251.924591][ T5313] vcan0 speed is unknown, defaulting to 1000
[  251.930907][T11617] vcan0 speed is unknown, defaulting to 1000
[  252.361317][T11617] vcan0 speed is unknown, defaulting to 1000
[  252.365318][T11625] wg2: entered promiscuous mode
[  252.367319][T11625] wg2: entered allmulticast mode
[  252.533671][T11617] vcan0 speed is unknown, defaulting to 1000
[  252.798654][T11617] vcan0 speed is unknown, defaulting to 1000
[  253.133405][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2347'.
[  253.233080][T11653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.215631][T11669] netlink: 'syz.5.2356': attribute type 29 has an invalid length.
[  254.263944][T11669] netlink: 'syz.5.2356': attribute type 29 has an invalid length.
[  254.275851][T11669] netlink: 'syz.5.2356': attribute type 29 has an invalid length.
[  254.284321][T11669] netlink: 'syz.5.2356': attribute type 29 has an invalid length.
[  254.773162][T11702] netlink: 'syz.3.2372': attribute type 3 has an invalid length.
[  254.776029][T11702] netlink: 'syz.3.2372': attribute type 2 has an invalid length.
[  254.782977][T11702] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.2372'.
[  254.804944][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2373'.
[  255.337682][ T5853] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7
[  255.548454][ T5853] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  255.624520][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.630167][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.644107][ T7359] bridge_slave_1: left allmulticast mode
[  255.646590][ T7359] bridge_slave_1: left promiscuous mode
[  255.656435][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.674350][ T7359] bridge_slave_0: left allmulticast mode
[  255.679566][ T7359] bridge_slave_0: left promiscuous mode
[  255.681504][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.696601][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'.
[  256.025040][ T7359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.031389][ T7359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.036495][ T7359] bond0 (unregistering): Released all slaves
[  256.225956][T11753] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2393'.
[  256.720579][T11781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2398'.
[  257.053913][ T7359] hsr_slave_0: left promiscuous mode
[  257.056902][ T7359] hsr_slave_1: left promiscuous mode
[  257.063955][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.067093][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.071174][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.074412][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.092692][ T7359] veth1_macvtap: left promiscuous mode
[  257.095052][ T7359] veth0_macvtap: left promiscuous mode
[  257.097390][ T7359] veth1_vlan: left promiscuous mode
[  257.103066][ T7359] veth0_vlan: left promiscuous mode
[  257.542010][ T7359] team0 (unregistering): Port device team_slave_1 removed
[  257.571954][ T7359] team0 (unregistering): Port device team_slave_0 removed
[  258.770917][T11867] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2433'.
[  258.774799][T11867] netlink: 356 bytes leftover after parsing attributes in process `syz.3.2433'.
[  258.915117][T11875] netlink: 'syz.4.2431': attribute type 39 has an invalid length.
[  260.153427][T11927] netlink: 'syz.3.2457': attribute type 1 has an invalid length.
[  260.156542][T11927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.164378][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'.
[  260.460936][T11945] netlink: 'syz.5.2465': attribute type 17 has an invalid length.
[  260.952204][T11965] netlink: 328 bytes leftover after parsing attributes in process `syz.5.2470'.
[  261.032825][T11967] pimreg: tun_chr_ioctl cmd 1074025677
[  261.035422][T11967] pimreg: linktype set to 778
[  261.194462][T11975] : renamed from veth0_to_bond (while UP)
[  261.323017][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'.
[  261.416469][T11994] netlink: 'syz.4.2484': attribute type 3 has an invalid length.
[  261.642298][T12003] netlink: 'syz.3.2487': attribute type 11 has an invalid length.
[  261.646042][T12003] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2487'.
[  261.658045][T12003] netlink: 'syz.3.2487': attribute type 11 has an invalid length.
[  261.664182][T12003] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2487'.
[  261.680551][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.824026][T12011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2491'.
[  261.891432][T12017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  261.894588][T12017] IPv6: NLM_F_CREATE should be set when creating new route
[  261.897713][T12017] IPv6: NLM_F_CREATE should be set when creating new route
[  261.900941][T12017] IPv6: NLM_F_CREATE should be set when creating new route
[  262.081725][T12026] : renamed from team_slave_1 (while UP)
[  262.355090][T12035] lo speed is unknown, defaulting to 1000
[  262.362294][T12035] lo speed is unknown, defaulting to 1000
[  262.365313][T12035] lo speed is unknown, defaulting to 1000
[  262.551332][ T5890] lo speed is unknown, defaulting to 1000
[  262.554308][T12035] infiniband syz2: set active
[  262.556449][T12035] infiniband syz2: added lo
[  262.575906][T12038] netlink: 'syz.3.2503': attribute type 2 has an invalid length.
[  262.581802][T12038] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2503'.
[  262.720062][T12035] RDS/IB: syz2: added
[  262.725527][T12035] smc: adding ib device syz2 with port count 1
[  262.733317][T12035] smc:    ib device syz2 port 1 has pnetid 
[  262.736107][ T5890] lo speed is unknown, defaulting to 1000
[  262.741398][T12035] lo speed is unknown, defaulting to 1000
[  262.921882][T12051] netlink: 'syz.5.2507': attribute type 3 has an invalid length.
[  262.929373][T12051] netlink: 'syz.5.2507': attribute type 3 has an invalid length.
[  262.934220][T12051] netlink: 130500 bytes leftover after parsing attributes in process `syz.5.2507'.
[  262.971436][T12035] lo speed is unknown, defaulting to 1000
[  263.009746][T12057] netlink: 'syz.3.2510': attribute type 14 has an invalid length.
[  263.193185][T12035] lo speed is unknown, defaulting to 1000
[  263.347160][T12077] netlink: 'syz.5.2518': attribute type 10 has an invalid length.
[  263.368457][T12077] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2518'.
[  263.709816][T12102] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  263.712437][T12102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.834396][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'.
[  263.862705][T12117] netlink: 'syz.3.2538': attribute type 12 has an invalid length.
[  263.866014][T12117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2538'.
[  264.381555][T12155] tQ6\bY4: renamed from lo (while UP)
[  264.995739][T12185] netlink: 'syz.3.2569': attribute type 39 has an invalid length.
[  265.163411][T12192] IPv6: Can't replace route, no match found
[  265.170711][T12192] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  266.846666][T12242] __nla_validate_parse: 2 callbacks suppressed
[  266.846707][T12242] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2595'.
[  266.965591][T12252] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2600'.
[  266.977333][T12252] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `]Iq!>s*!)\S
[  267.130056][T12261] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2603'.
[  267.553357][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.958176][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  268.556335][T12321] netlink: 'syz.4.2629': attribute type 16 has an invalid length.
[  268.561067][T12321] netlink: 'syz.4.2629': attribute type 17 has an invalid length.
[  268.960249][T12321] bridge0: left promiscuous mode
[  268.962255][T12321] bridge0: left allmulticast mode
[  268.976204][T12321] bond_slave_0: entered promiscuous mode
[  268.978682][T12321] bond_slave_1: entered promiscuous mode
[  268.987979][T12321] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.018878][T12321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.025100][   T51] tQ6\bY4 speed is unknown, defaulting to 1000
[  269.029107][ T5910] vcan0 speed is unknown, defaulting to 1000
[  269.376634][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'.
[  269.741260][T12408] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  271.002865][T12431] netlink: 'syz.3.2650': attribute type 2 has an invalid length.
[  271.216406][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'.
[  271.220123][T12437] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  271.362464][T12447] netlink: 'syz.5.2658': attribute type 1 has an invalid length.
[  271.365409][T12447] netlink: 'syz.5.2658': attribute type 2 has an invalid length.
[  271.481545][T12458] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2662'.
[  272.295887][T12466] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2665'.
[  273.125619][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'.
[  273.646484][T12526] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2692'.
[  273.735394][ T5853] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  275.647597][T12571] netlink: 'syz.4.2712': attribute type 1 has an invalid length.
[  275.654046][T12571] netlink: 'syz.4.2712': attribute type 2 has an invalid length.
[  275.657404][T12571] netlink: 'syz.4.2712': attribute type 4 has an invalid length.
[  275.660675][T12571] netlink: 'syz.4.2712': attribute type 1 has an invalid length.
[  275.663721][T12571] netlink: 'syz.4.2712': attribute type 2 has an invalid length.
[  275.666611][T12571] netlink: 130080 bytes leftover after parsing attributes in process `syz.4.2712'.
[  275.673834][T12571] netlink: 'syz.4.2712': attribute type 1 has an invalid length.
[  275.676617][T12571] netlink: 'syz.4.2712': attribute type 2 has an invalid length.
[  275.682135][T12575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2713'.
[  275.686568][T12575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2713'.
[  275.691878][T12575] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2713'.
[  275.780588][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  275.912405][ T5853] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8
[  276.267086][T12609] netlink: 'syz.4.2728': attribute type 2 has an invalid length.
[  276.274315][T12609] netlink: 'syz.4.2728': attribute type 1 has an invalid length.
[  276.613737][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'.
[  276.649607][ T5853] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  276.836821][T12641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.845469][T12641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.860563][T12641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.863921][T12641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.872030][T12641] batman_adv: batadv0: Removing interface: 
[  277.214222][T12669] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.2750'.
[  277.293778][T12672] netlink: 'syz.5.2751': attribute type 23 has an invalid length.
[  277.536708][T12682] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  278.014802][T12716] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.2770'.
[  278.094147][T12719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2772'.
[  278.193012][T12721] team0: Device ipvlan1 failed to register rx_handler
[  278.375700][T12740] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2782'.
[  278.421201][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'.
[  278.424207][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'.
[  278.431759][T12742] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2783'.
[  278.435462][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'.
[  278.442227][T12742] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2783'.
[  278.724487][T12755] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2788'.
[  278.886256][T12772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.285315][T12793] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2806'.
[  281.114532][T12887] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  281.151307][T12887] blkio.reset_stats is deprecated
[  282.038151][T12931] validate_nla: 5 callbacks suppressed
[  282.038166][T12931] netlink: 'syz.3.2869': attribute type 3 has an invalid length.
[  282.083249][T12934] delete_channel: no stack
[  282.346095][T12961] netlink: 'syz.3.2882': attribute type 19 has an invalid length.
[  282.409352][T12963] netlink: 'syz.3.2883': attribute type 15 has an invalid length.
[  282.655375][T12981] netlink: 'syz.3.2891': attribute type 39 has an invalid length.
[  282.679932][T12978] netlink: 'syz.4.2890': attribute type 29 has an invalid length.
[  282.691802][T12978] netlink: 'syz.4.2890': attribute type 29 has an invalid length.
[  282.726684][T12978] netlink: 'syz.4.2890': attribute type 29 has an invalid length.
[  282.741355][T12978] netlink: 'syz.4.2890': attribute type 29 has an invalid length.
[  282.812454][T12982] netlink: 'syz.4.2890': attribute type 2 has an invalid length.
[  282.815996][T12982] netlink: 'syz.4.2890': attribute type 9 has an invalid length.
[  283.268016][T12984] __nla_validate_parse: 7 callbacks suppressed
[  283.268071][T12984] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2892'.
[  283.654285][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'.
[  283.750593][T13006] team0: Cannot enslave team device to itself
[  284.322831][T13018] openvswitch: netlink: Message has 16 unknown bytes.
[  284.325443][T13018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.456707][   T33] audit: type=1107 audit(1758069151.088:5): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#?v&ԹI~+#{U=TsamvDP])x}C|
[  284.456707][   T33] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0	1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl
[  284.456707][   T33] cvm1kOk:tN=,R; wD_b'ɀAM"5qfg]<'ſU	փ]	c!{@6cG|rC(m	T}Z{0.Cӭlt9aԘA$G+4BtU'GVj-	.㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO}
[  284.456707][   T33] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR
[  286.026697][T13049] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  287.087732][T13070] validate_nla: 2 callbacks suppressed
[  287.087749][T13070] netlink: 'syz.3.2926': attribute type 10 has an invalid length.
[  288.120192][T13104] netlink: 'syz.3.2940': attribute type 21 has an invalid length.
[  288.215085][T13113] cgroup2: Unknown parameter 'u'
[  288.364795][T13122] netlink: 'syz.3.2948': attribute type 13 has an invalid length.
[  289.403432][T13148] netlink: 137592 bytes leftover after parsing attributes in process `syz.5.2960'.
[  289.424839][T13148] nbd: must specify a size in bytes for the device
[  289.524365][T13149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2961'.
[  289.670573][T13165] delete_channel: no stack
[  289.673938][T13165] delete_channel: no stack
[  290.116826][T13187] netlink: 'syz.3.2974': attribute type 21 has an invalid length.
[  290.796243][T13187] netlink: 'syz.3.2974': attribute type 1 has an invalid length.
[  290.885049][T13187] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2974'.
[  290.956142][T13193] netlink: 'syz.5.2977': attribute type 22 has an invalid length.
[  290.959885][T13193] netlink: 'syz.5.2977': attribute type 1 has an invalid length.
[  290.962462][T13193] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2977'.
[  291.007778][T13197] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2978'.
[  291.054296][T13204] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  291.416457][T13221] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2990'.
[  291.787555][T13244] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2998'.
[  291.793194][T13239] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2998'.
[  291.797494][T13244] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2998'.
[  292.055811][T13263] syzkaller0: entered promiscuous mode
[  292.062808][T13263] syzkaller0: entered allmulticast mode
[  292.338555][T13269] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3013'.
[  293.487311][T13282] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  294.757713][T13337] __nla_validate_parse: 4 callbacks suppressed
[  294.757725][T13337] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3045'.
[  294.807527][T13341] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3047'.
[  294.815095][T13341] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3047'.
[  294.820610][T13341] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3047'.
[  297.267515][T13342] delete_channel: no stack
[  297.765271][T13350] netlink: 'syz.3.3050': attribute type 13 has an invalid length.
[  298.063975][T13370] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3059'.
[  298.321687][T13387] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3065'.
[  298.326107][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3065'.
[  298.680081][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'.
[  299.074112][T13404] netlink: 'syz.5.3073': attribute type 10 has an invalid length.
[  300.176139][T13419] netlink: 'syz.4.3080': attribute type 33 has an invalid length.
[  300.186687][T13419] netlink: 'syz.4.3080': attribute type 3 has an invalid length.
[  300.189737][T13419] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.3080'.
[  300.248880][T13423] netlink: 'syz.3.3081': attribute type 10 has an invalid length.
[  300.255702][T13423] bond0: (slave ): Enslaving as an active interface with an up link
[  300.327940][T13435] ==================================================================
[  300.331398][T13435] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  300.334710][T13435] Read of size 4 at addr ffff88810ac77b44 by task syz.4.3088/13435
[  300.338861][T13435] 
[  300.339938][T13435] CPU: 0 UID: 0 PID: 13435 Comm: syz.4.3088 Not tainted syzkaller #0 PREEMPT(full) 
[  300.339953][T13435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.339960][T13435] Call Trace:
[  300.339967][T13435]  <TASK>
[  300.339974][T13435]  dump_stack_lvl+0x189/0x250
[  300.339995][T13435]  ? __kasan_check_byte+0x12/0x40
[  300.340017][T13435]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.340033][T13435]  ? lock_release+0x4b/0x3e0
[  300.340056][T13435]  ? __virt_addr_valid+0x4a5/0x5c0
[  300.340073][T13435]  print_report+0xca/0x240
[  300.340088][T13435]  ? xfrm_alloc_spi+0x570/0xf30
[  300.340106][T13435]  kasan_report+0x118/0x150
[  300.340125][T13435]  ? xfrm_alloc_spi+0x570/0xf30
[  300.340144][T13435]  xfrm_alloc_spi+0x570/0xf30
[  300.340162][T13435]  ? xfrm_alloc_spi+0x2a0/0xf30
[  300.340186][T13435]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  300.340203][T13435]  ? xfrm_find_acq+0x87/0xa0
[  300.340224][T13435]  xfrm_alloc_userspi+0x70b/0xc90
[  300.340241][T13435]  ? apparmor_capable+0x137/0x1b0
[  300.340258][T13435]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  300.340270][T13435]  ? __nla_parse+0x40/0x60
[  300.340286][T13435]  xfrm_user_rcv_msg+0x7a3/0xab0
[  300.340307][T13435]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  300.340334][T13435]  ? __pfx___mutex_trylock_common+0x10/0x10
[  300.340350][T13435]  ? rcu_is_watching+0x15/0xb0
[  300.340364][T13435]  ? trace_contention_end+0x39/0x120
[  300.340376][T13435]  ? __mutex_lock+0x335/0x1350
[  300.340394][T13435]  netlink_rcv_skb+0x208/0x470
[  300.340410][T13435]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  300.340430][T13435]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.340449][T13435]  ? netlink_deliver_tap+0x2e/0x1b0
[  300.340466][T13435]  ? netlink_deliver_tap+0x2e/0x1b0
[  300.340481][T13435]  xfrm_netlink_rcv+0x79/0x90
[  300.340501][T13435]  netlink_unicast+0x82f/0x9e0
[  300.340518][T13435]  ? __pfx_netlink_unicast+0x10/0x10
[  300.340531][T13435]  ? netlink_sendmsg+0x642/0xb30
[  300.340546][T13435]  ? skb_put+0x11b/0x210
[  300.340591][T13435]  netlink_sendmsg+0x805/0xb30
[  300.340609][T13435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.340627][T13435]  ? aa_sock_msg_perm+0xf1/0x1d0
[  300.340650][T13435]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.340666][T13435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.340681][T13435]  __sock_sendmsg+0x21c/0x270
[  300.340694][T13435]  ____sys_sendmsg+0x505/0x830
[  300.340712][T13435]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.340731][T13435]  ? import_iovec+0x74/0xa0
[  300.340752][T13435]  ___sys_sendmsg+0x21f/0x2a0
[  300.340769][T13435]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.340799][T13435]  ? __fget_files+0x2a/0x420
[  300.340812][T13435]  ? __fget_files+0x3a0/0x420
[  300.340826][T13435]  __x64_sys_sendmsg+0x19b/0x260
[  300.340844][T13435]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.340862][T13435]  ? rcu_is_watching+0x15/0xb0
[  300.340877][T13435]  ? do_syscall_64+0xbe/0x3b0
[  300.340893][T13435]  do_syscall_64+0xfa/0x3b0
[  300.340907][T13435]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.340920][T13435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.340935][T13435]  ? exc_page_fault+0x9f/0xf0
[  300.340947][T13435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.340959][T13435] RIP: 0033:0x7fd72958eba9
[  300.340971][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.340983][T13435] RSP: 002b:00007fd7277f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.340999][T13435] RAX: ffffffffffffffda RBX: 00007fd7297d5fa0 RCX: 00007fd72958eba9
[  300.341009][T13435] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  300.341017][T13435] RBP: 00007fd729611e19 R08: 0000000000000000 R09: 0000000000000000
[  300.341025][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.341033][T13435] R13: 00007fd7297d6038 R14: 00007fd7297d5fa0 R15: 00007fff6bff7518
[  300.341046][T13435]  </TASK>
[  300.341050][T13435] 
[  300.500981][T13435] Allocated by task 12309:
[  300.502835][T13435]  kasan_save_track+0x3e/0x80
[  300.504764][T13435]  __kasan_slab_alloc+0x6c/0x80
[  300.506897][T13435]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  300.509280][T13435]  xfrm_state_alloc+0x24/0x2f0
[  300.511393][T13435]  __find_acq_core+0x8a7/0x1c00
[  300.513574][T13435]  xfrm_find_acq+0x78/0xa0
[  300.515519][T13435]  xfrm_alloc_userspi+0x6b3/0xc90
[  300.517735][T13435]  xfrm_user_rcv_msg+0x7a3/0xab0
[  300.519880][T13435]  netlink_rcv_skb+0x208/0x470
[  300.521966][T13435]  xfrm_netlink_rcv+0x79/0x90
[  300.523993][T13435]  netlink_unicast+0x82f/0x9e0
[  300.526050][T13435]  netlink_sendmsg+0x805/0xb30
[  300.528128][T13435]  __sock_sendmsg+0x21c/0x270
[  300.530078][T13435]  ____sys_sendmsg+0x505/0x830
[  300.532158][T13435]  ___sys_sendmsg+0x21f/0x2a0
[  300.534200][T13435]  __x64_sys_sendmsg+0x19b/0x260
[  300.536295][T13435]  do_syscall_64+0xfa/0x3b0
[  300.538262][T13435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.540826][T13435] 
[  300.541867][T13435] Freed by task 5910:
[  300.543499][T13435]  kasan_save_track+0x3e/0x80
[  300.545442][T13435]  kasan_save_free_info+0x46/0x50
[  300.547659][T13435]  __kasan_slab_free+0x5b/0x80
[  300.549686][T13435]  kmem_cache_free+0x18f/0x400
[  300.551754][T13435]  xfrm_state_gc_task+0x52d/0x6b0
[  300.553842][T13435]  process_scheduled_works+0xae1/0x17b0
[  300.556167][T13435]  worker_thread+0x8a0/0xda0
[  300.558172][T13435]  kthread+0x711/0x8a0
[  300.559943][T13435]  ret_from_fork+0x439/0x7d0
[  300.561896][T13435]  ret_from_fork_asm+0x1a/0x30
[  300.563938][T13435] 
[  300.564982][T13435] The buggy address belongs to the object at ffff88810ac77a80
[  300.564982][T13435]  which belongs to the cache xfrm_state of size 928
[  300.570876][T13435] The buggy address is located 196 bytes inside of
[  300.570876][T13435]  freed 928-byte region [ffff88810ac77a80, ffff88810ac77e20)
[  300.576670][T13435] 
[  300.577725][T13435] The buggy address belongs to the physical page:
[  300.580436][T13435] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810ac77a80 pfn:0x10ac74
[  300.584585][T13435] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  300.588161][T13435] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  300.591403][T13435] page_type: f5(slab)
[  300.593083][T13435] raw: 057ff00000000040 ffff88801bf30c80 dead000000000122 0000000000000000
[  300.596531][T13435] raw: ffff88810ac77a80 00000000800e0008 00000000f5000000 0000000000000000
[  300.599995][T13435] head: 057ff00000000040 ffff88801bf30c80 dead000000000122 0000000000000000
[  300.603499][T13435] head: ffff88810ac77a80 00000000800e0008 00000000f5000000 0000000000000000
[  300.607040][T13435] head: 057ff00000000002 ffffea00042b1d01 00000000ffffffff 00000000ffffffff
[  300.610524][T13435] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  300.614033][T13435] page dumped because: kasan: bad access detected
[  300.616653][T13435] page_owner tracks the page as allocated
[  300.618974][T13435] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6431, tgid 6430 (syz.0.225), ts 82372018229, free_ts 82242185215
[  300.625604][T13435]  post_alloc_hook+0x240/0x2a0
[  300.627401][T13435]  get_page_from_freelist+0x21e4/0x22c0
[  300.629769][T13435]  __alloc_frozen_pages_noprof+0x181/0x370
[  300.632161][T13435]  alloc_pages_mpol+0x232/0x4a0
[  300.634145][T13435]  allocate_slab+0x8a/0x370
[  300.636050][T13435]  ___slab_alloc+0xbeb/0x1420
[  300.637918][T13435]  kmem_cache_alloc_noprof+0x283/0x3c0
[  300.640048][T13435]  xfrm_state_alloc+0x24/0x2f0
[  300.641959][T13435]  pfkey_add+0x6e4/0x2e00
[  300.643734][T13435]  pfkey_sendmsg+0xbfe/0x1090
[  300.645583][T13435]  __sock_sendmsg+0x21c/0x270
[  300.647233][T13435]  ____sys_sendmsg+0x505/0x830
[  300.648967][T13435]  ___sys_sendmsg+0x21f/0x2a0
[  300.650681][T13435]  __x64_sys_sendmsg+0x19b/0x260
[  300.652339][T13435]  do_syscall_64+0xfa/0x3b0
[  300.654097][T13435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.656145][T13435] page last free pid 5845 tgid 5845 stack trace:
[  300.658751][T13435]  __free_frozen_pages+0xbc4/0xd30
[  300.660865][T13435]  __slab_free+0x303/0x3c0
[  300.662715][T13435]  qlist_free_all+0x97/0x140
[  300.664623][T13435]  kasan_quarantine_reduce+0x148/0x160
[  300.666855][T13435]  __kasan_slab_alloc+0x22/0x80
[  300.669018][T13435]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  300.671349][T13435]  getname_flags+0xb8/0x540
[  300.673130][T13435]  user_path_at+0x24/0x60
[  300.674648][T13435]  __x64_sys_umount+0xee/0x160
[  300.676252][T13435]  do_syscall_64+0xfa/0x3b0
[  300.677788][T13435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.679871][T13435] 
[  300.680888][T13435] Memory state around the buggy address:
[  300.683176][T13435]  ffff88810ac77a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  300.686309][T13435]  ffff88810ac77a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  300.688987][T13435] >ffff88810ac77b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  300.691721][T13435]                                            ^
[  300.693853][T13435]  ffff88810ac77b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  300.696525][T13435]  ffff88810ac77c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  300.699706][T13435] ==================================================================
[  300.703227][T13435] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  300.706181][T13435] CPU: 0 UID: 0 PID: 13435 Comm: syz.4.3088 Not tainted syzkaller #0 PREEMPT(full) 
[  300.709925][T13435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.713779][T13435] Call Trace:
[  300.714932][T13435]  <TASK>
[  300.715969][T13435]  dump_stack_lvl+0x99/0x250
[  300.717545][T13435]  ? __asan_memcpy+0x40/0x70
[  300.719177][T13435]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.721235][T13435]  ? __pfx__printk+0x10/0x10
[  300.722936][T13435]  vpanic+0x281/0x750
[  300.724308][T13435]  ? __pfx_vpanic+0x10/0x10
[  300.725944][T13435]  ? irqentry_exit+0x74/0x90
[  300.727791][T13435]  panic+0xb9/0xc0
[  300.729354][T13435]  ? __pfx_panic+0x10/0x10
[  300.731208][T13435]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  300.733653][T13435]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  300.736170][T13435]  ? xfrm_alloc_spi+0x570/0xf30
[  300.738021][T13435]  check_panic_on_warn+0x89/0xb0
[  300.739873][T13435]  ? xfrm_alloc_spi+0x570/0xf30
[  300.741574][T13435]  end_report+0x78/0x160
[  300.743034][T13435]  kasan_report+0x129/0x150
[  300.744889][T13435]  ? xfrm_alloc_spi+0x570/0xf30
[  300.746768][T13435]  xfrm_alloc_spi+0x570/0xf30
[  300.748405][T13435]  ? xfrm_alloc_spi+0x2a0/0xf30
[  300.750422][T13435]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  300.752573][T13435]  ? xfrm_find_acq+0x87/0xa0
[  300.754477][T13435]  xfrm_alloc_userspi+0x70b/0xc90
[  300.756258][T13435]  ? apparmor_capable+0x137/0x1b0
[  300.758280][T13435]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  300.760294][T13435]  ? __nla_parse+0x40/0x60
[  300.762156][T13435]  xfrm_user_rcv_msg+0x7a3/0xab0
[  300.764183][T13435]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  300.766450][T13435]  ? __pfx___mutex_trylock_common+0x10/0x10
[  300.768481][T13435]  ? rcu_is_watching+0x15/0xb0
[  300.770110][T13435]  ? trace_contention_end+0x39/0x120
[  300.771888][T13435]  ? __mutex_lock+0x335/0x1350
[  300.773729][T13435]  netlink_rcv_skb+0x208/0x470
[  300.775538][T13435]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  300.777539][T13435]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  300.779676][T13435]  ? netlink_deliver_tap+0x2e/0x1b0
[  300.781801][T13435]  ? netlink_deliver_tap+0x2e/0x1b0
[  300.783920][T13435]  xfrm_netlink_rcv+0x79/0x90
[  300.785873][T13435]  netlink_unicast+0x82f/0x9e0
[  300.787850][T13435]  ? __pfx_netlink_unicast+0x10/0x10
[  300.790011][T13435]  ? netlink_sendmsg+0x642/0xb30
[  300.792038][T13435]  ? skb_put+0x11b/0x210
[  300.793775][T13435]  netlink_sendmsg+0x805/0xb30
[  300.795694][T13435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.797675][T13435]  ? aa_sock_msg_perm+0xf1/0x1d0
[  300.799465][T13435]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  300.801629][T13435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  300.803816][T13435]  __sock_sendmsg+0x21c/0x270
[  300.805760][T13435]  ____sys_sendmsg+0x505/0x830
[  300.807753][T13435]  ? __pfx_____sys_sendmsg+0x10/0x10
[  300.809662][T13435]  ? import_iovec+0x74/0xa0
[  300.811273][T13435]  ___sys_sendmsg+0x21f/0x2a0
[  300.812870][T13435]  ? __pfx____sys_sendmsg+0x10/0x10
[  300.814629][T13435]  ? __fget_files+0x2a/0x420
[  300.816181][T13435]  ? __fget_files+0x3a0/0x420
[  300.817803][T13435]  __x64_sys_sendmsg+0x19b/0x260
[  300.819607][T13435]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  300.821865][T13435]  ? rcu_is_watching+0x15/0xb0
[  300.823845][T13435]  ? do_syscall_64+0xbe/0x3b0
[  300.825763][T13435]  do_syscall_64+0xfa/0x3b0
[  300.827650][T13435]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.829308][T13435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.831587][T13435]  ? exc_page_fault+0x9f/0xf0
[  300.833475][T13435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.835859][T13435] RIP: 0033:0x7fd72958eba9
[  300.837607][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.845421][T13435] RSP: 002b:00007fd7277f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.848208][T13435] RAX: ffffffffffffffda RBX: 00007fd7297d5fa0 RCX: 00007fd72958eba9
[  300.850851][T13435] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  300.853602][T13435] RBP: 00007fd729611e19 R08: 0000000000000000 R09: 0000000000000000
[  300.856813][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.860036][T13435] R13: 00007fd7297d6038 R14: 00007fd7297d5fa0 R15: 00007fff6bff7518
[  300.863201][T13435]  </TASK>
[  300.865309][T13435] Kernel Offset: disabled
[  300.866776][T13435] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:32:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000135d RDI=000000000000135e RBP=00000000000003f8 RSP=ffffc900076f69f0
R8 =ffff888020158237 R9 =1ffff1100402b046 R10=dffffc0000000000 R11=ffffffff854fc840
R12=dffffc0000000000 R13=ffffffff99b028f9 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fc8bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd7277f66c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000440 CR3=0000000121898000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd7297a7498 00007fd7297a7470 XMM03=00007fd7297a74a8 00007fd7297a74a0
XMM04=00007fd72a30d100 00007fd7297a7460 XMM05=00007fd7297a7478 00007fd7297a74c0
XMM06=00007fd7297a74b8 00007fd7297a74b0 XMM07=00007fd7297a74a8 00007fd7297a74a0
XMM08=0000000000000000 00007fd729612ee7 XMM09=0000000000000000 00007fd729612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff821aab6b RBX=000000000000000d RCX=0000000000000000 RDX=ffff888124d11cc0
RSI=000000000000000d RDI=000000000000001f RBP=ffffc90007647568 RSP=ffffc900076472d8
R8 =ffffea000079a1c7 R9 =1ffffd40000f3438 R10=dffffc0000000000 R11=fffff940000f3439
R12=1ffff110233ca106 R13=dffffc0000000000 R14=000000000000000d R15=0000000000000104
RIP=ffffffff8b7d5c20 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055559134d500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33b21ff8 CR3=0000000104c46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd729612e53
XMM06=0000000000000000 00007fd729612e4d XMM07=0000000000000000 00007fd729612e61
XMM08=0000000000000000 00007fd729612ee7 XMM09=0000000000000000 00007fd729612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
