last executing test programs:

5m4.268014296s ago: executing program 2 (id=61):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e00000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084)

5m4.105902923s ago: executing program 2 (id=67):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f00000009c0)=ANY=[], 0xfdef)

5m3.9691314s ago: executing program 2 (id=70):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800003, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x18, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000)

5m3.943872262s ago: executing program 2 (id=72):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79074a98754e0e4ab386dd631fce6203c2ff"], 0xfe1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

5m3.804481724s ago: executing program 2 (id=73):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0)

5m3.803479645s ago: executing program 2 (id=74):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x541b, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$sock(r4, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x102200, &(0x7f00000000c0)="c66010bd98566f0b4e91c22290b83cf9ed41da5a09015c", 0x17, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18)
r7 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)
r8 = socket$kcm(0xa, 0x3, 0x73)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)

4m46.987828844s ago: executing program 32 (id=74):
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x541b, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$sock(r4, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x102200, &(0x7f00000000c0)="c66010bd98566f0b4e91c22290b83cf9ed41da5a09015c", 0x17, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18)
r7 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)
r8 = socket$kcm(0xa, 0x3, 0x73)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102)

2.780086529s ago: executing program 3 (id=3632):
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x10, 0x7, 0x5, 0x1, 0x0, 0x1, 0x5100, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x9}, 0x800, 0x4, 0x9, 0x7, 0x7, 0x5d, 0x8, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)

2.779805828s ago: executing program 3 (id=3633):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

2.708262361s ago: executing program 3 (id=3636):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000240)="2616810726", 0x5}], 0x2}, 0x2)

2.649956191s ago: executing program 3 (id=3639):
r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x7, 0x83}, 0x80, 0x0}, 0x800)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r7)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b640000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v'], 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)

2.438436806s ago: executing program 0 (id=3647):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x7)

2.369723681s ago: executing program 0 (id=3648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

2.28887646s ago: executing program 1 (id=3649):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000002b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x5, 0x1, 0x0, 0x5, 0x1, 0x9, [{0x2, 0x4, 0x8}]}]}, {0x0, [0x30, 0x2e, 0x2e, 0x30, 0x61]}}, 0x0, 0x37, 0x0, 0x1, 0x3}, 0x28)

2.288711777s ago: executing program 0 (id=3650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0)

2.288583991s ago: executing program 1 (id=3651):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}}, 0x0)

2.237940855s ago: executing program 0 (id=3652):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/11], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xa1}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
gettid()
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

2.237763031s ago: executing program 1 (id=3653):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90600fc60", 0x14}], 0x1}, 0x800)

2.157598645s ago: executing program 1 (id=3654):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_clone(0x28c2000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./cgroup\x00', 0x0, 0x4008, r2}, 0x18)

1.939075459s ago: executing program 0 (id=3655):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

1.684150887s ago: executing program 0 (id=3656):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200044e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000010000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101"], 0xb8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0x0)

1.608583234s ago: executing program 3 (id=3657):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)

975.374187ms ago: executing program 33 (id=3656):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200044e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000010000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101"], 0xb8}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0x0)

919.453852ms ago: executing program 1 (id=3659):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001228000140073d2800020004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

918.901217ms ago: executing program 3 (id=3660):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

452.865331ms ago: executing program 34 (id=3660):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

130.472762ms ago: executing program 1 (id=3662):
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

0s ago: executing program 35 (id=3662):
r0 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24369' (ED25519) to the list of known hosts.
syzkaller login: [   56.502210][ T5826] cgroup: Unknown subsys name 'net'
[   56.631875][ T5826] cgroup: Unknown subsys name 'cpuset'
[   56.638659][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.564673][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.475237][ T5858] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.660449][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.590337][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.594304][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.598356][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.602380][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.606286][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.648267][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.653018][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.655795][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.659876][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.664006][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.748198][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.753915][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.756862][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.762113][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.765808][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.025409][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   71.064267][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.066860][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.219382][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.222522][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.225336][ T5872] bridge_slave_0: entered allmulticast mode
[   71.229574][ T5872] bridge_slave_0: entered promiscuous mode
[   71.267473][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.269796][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.272567][ T5872] bridge_slave_1: entered allmulticast mode
[   71.276872][ T5872] bridge_slave_1: entered promiscuous mode
[   71.314400][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   71.330119][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   71.341200][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.363317][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.426984][ T5872] team0: Port device team_slave_0 added
[   71.431059][ T5872] team0: Port device team_slave_1 added
[   71.510971][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.513494][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.522958][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.543962][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.546163][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.550353][ T5879] bridge_slave_0: entered allmulticast mode
[   71.553151][ T5879] bridge_slave_0: entered promiscuous mode
[   71.556595][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.559951][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.569542][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.573566][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.575790][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.579189][ T5875] bridge_slave_0: entered allmulticast mode
[   71.582693][ T5875] bridge_slave_0: entered promiscuous mode
[   71.586807][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.589531][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.591907][ T5879] bridge_slave_1: entered allmulticast mode
[   71.594587][ T5879] bridge_slave_1: entered promiscuous mode
[   71.604760][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.609472][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.612296][ T5875] bridge_slave_1: entered allmulticast mode
[   71.616000][ T5875] bridge_slave_1: entered promiscuous mode
[   71.669758][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.706377][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.716023][ T5872] hsr_slave_0: entered promiscuous mode
[   71.719413][ T5872] hsr_slave_1: entered promiscuous mode
[   71.725048][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.753246][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.794699][ T5879] team0: Port device team_slave_0 added
[   71.832229][ T5879] team0: Port device team_slave_1 added
[   71.836497][ T5875] team0: Port device team_slave_0 added
[   71.861544][ T5875] team0: Port device team_slave_1 added
[   71.911631][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.913913][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.923888][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.940375][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.943071][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.952827][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.973206][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.975928][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.985942][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.998383][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.001043][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.011819][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.126837][ T5879] hsr_slave_0: entered promiscuous mode
[   72.130060][ T5879] hsr_slave_1: entered promiscuous mode
[   72.132902][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   72.135280][ T5879] Cannot create hsr debugfs directory
[   72.140993][ T5875] hsr_slave_0: entered promiscuous mode
[   72.143300][ T5875] hsr_slave_1: entered promiscuous mode
[   72.145448][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   72.148927][ T5875] Cannot create hsr debugfs directory
[   72.260869][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.278636][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.293458][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.325019][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.521027][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.542286][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.549841][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.571730][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.576019][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.622365][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.627931][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.644949][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.653627][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   72.659578][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.668560][ T5236] Bluetooth: hci0: command tx timeout
[   72.686223][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.689076][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.716812][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.719412][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.738761][ T5236] Bluetooth: hci1: command tx timeout
[   72.789368][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.817803][ T5236] Bluetooth: hci2: command tx timeout
[   72.829966][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   72.841777][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.844573][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.864223][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.867172][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.921323][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.940628][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.974043][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   72.983391][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.994065][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.996662][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.011831][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.014203][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.086215][ T5872] veth0_vlan: entered promiscuous mode
[   73.104496][ T5872] veth1_vlan: entered promiscuous mode
[   73.159675][ T5872] veth0_macvtap: entered promiscuous mode
[   73.172712][ T5872] veth1_macvtap: entered promiscuous mode
[   73.196749][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.211971][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.219348][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.241317][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.244113][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.255260][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.260300][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.273204][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.338373][ T5879] veth0_vlan: entered promiscuous mode
[   73.368610][ T5879] veth1_vlan: entered promiscuous mode
[   73.381197][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.384329][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.415546][ T5875] veth0_vlan: entered promiscuous mode
[   73.430903][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.433707][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.442181][ T5879] veth0_macvtap: entered promiscuous mode
[   73.445079][ T5875] veth1_vlan: entered promiscuous mode
[   73.454926][ T5879] veth1_macvtap: entered promiscuous mode
[   73.504928][ T5875] veth0_macvtap: entered promiscuous mode
[   73.530313][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.543841][ T5875] veth1_macvtap: entered promiscuous mode
[   73.562555][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.593620][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.605598][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.610280][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'.
[   73.625777][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.630547][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.641062][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.644269][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.655032][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.665717][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.669922][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.673234][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.802988][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.805709][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.843374][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.846418][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.866713][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.870603][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.902891][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.912652][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.375930][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'.
[   74.738677][ T5236] Bluetooth: hci0: command tx timeout
[   74.817635][ T5236] Bluetooth: hci1: command tx timeout
[   74.863880][ T5981] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   74.877381][ T5981] netlink: 17 bytes leftover after parsing attributes in process `syz.2.32'.
[   74.898012][ T5236] Bluetooth: hci2: command tx timeout
[   75.066110][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.496100][ T6019] netlink: 192 bytes leftover after parsing attributes in process `syz.1.49'.
[   75.658180][ T6027] netlink: 'syz.1.54': attribute type 6 has an invalid length.
[   75.665463][ T6027] netlink: 'syz.1.54': attribute type 3 has an invalid length.
[   75.671670][ T6027] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.54'.
[   75.734269][ T6032] netlink: 2 bytes leftover after parsing attributes in process `syz.1.57'.
[   75.823818][ T6039] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.59'.
[   75.912050][ T6041] netlink: 'syz.2.61': attribute type 4 has an invalid length.
[   75.919067][ T6041] netlink: 152 bytes leftover after parsing attributes in process `syz.2.61'.
[   75.971184][ T6041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   76.064570][ T6041] syz.2.61 (6041) used greatest stack depth: 20800 bytes left
[   76.119284][ T6055] netlink: 'syz.1.68': attribute type 21 has an invalid length.
[   76.121935][ T6055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.68'.
[   76.125098][ T6055] netlink: 'syz.1.68': attribute type 5 has an invalid length.
[   76.130625][ T6055] netlink: 'syz.1.68': attribute type 6 has an invalid length.
[   76.133347][ T6055] netlink: 3 bytes leftover after parsing attributes in process `syz.1.68'.
[   76.449215][    C1] hrtimer: interrupt took 88768 ns
[   76.883458][ T5236] Bluetooth: hci0: command tx timeout
[   76.924028][ T5236] Bluetooth: hci1: command tx timeout
[   77.012793][ T5236] Bluetooth: hci2: command tx timeout
[   78.967284][ T5236] Bluetooth: hci0: command tx timeout
[   78.986291][ T5236] Bluetooth: hci1: command tx timeout
[   79.067834][ T5236] Bluetooth: hci2: command tx timeout
[   83.832547][   T23] sched: DL replenish lagged too much
[   86.427987][   T47] cfg80211: failed to load regulatory.db
[   88.431071][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'.
[   90.571304][ T6104] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   92.516036][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.522983][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.526074][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.529582][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.533492][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.489017][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1001738500 wd_nsec: 1001738536
[   94.244800][ T6106] chnl_net:caif_netlink_parms(): no params data found
[   94.577643][ T5236] Bluetooth: hci3: command tx timeout
[   96.657705][ T5236] Bluetooth: hci3: command tx timeout
[   98.737308][ T5236] Bluetooth: hci3: command tx timeout
[  100.817996][ T5236] Bluetooth: hci3: command tx timeout
[  105.616119][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.663420][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.680674][ T6106] bridge_slave_0: entered allmulticast mode
[  105.690101][ T6106] bridge_slave_0: entered promiscuous mode
[  105.703503][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.709939][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.747419][ T6106] bridge_slave_1: entered allmulticast mode
[  105.773488][ T6106] bridge_slave_1: entered promiscuous mode
[  105.926726][ T6139] netlink: 'syz.1.96': attribute type 21 has an invalid length.
[  105.930604][ T6139] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.933858][ T6139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.936880][ T6139] IPv6: NLM_F_CREATE should be set when creating new route
[  105.939816][ T6139] IPv6: NLM_F_CREATE should be set when creating new route
[  105.942708][ T6139] IPv6: NLM_F_CREATE should be set when creating new route
[  106.041783][ T6143] netlink: 176 bytes leftover after parsing attributes in process `syz.1.97'.
[  108.722959][ T6141] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  113.939188][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.977528][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.221390][ T6106] team0: Port device team_slave_0 added
[  115.226692][ T6106] team0: Port device team_slave_1 added
[  121.204821][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.226502][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.264272][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.300997][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.303971][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.407224][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.429929][ T6106] hsr_slave_0: entered promiscuous mode
[  122.432541][ T6106] hsr_slave_1: entered promiscuous mode
[  122.435129][ T6106] debugfs: 'hsr0' already exists in 'hsr'
[  122.437003][ T6106] Cannot create hsr debugfs directory
[  126.152931][ T6185] netlink: 'syz.0.111': attribute type 10 has an invalid length.
[  126.191581][ T6187] netlink: 5776 bytes leftover after parsing attributes in process `syz.1.112'.
[  126.191906][ T5886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.211176][ T6188] Zero length message leads to an empty skb
[  126.226398][ T6185] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  126.239322][ T6185] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  126.256078][ T6185] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  126.296035][ T5886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.349693][ T6193] netlink: 'syz.1.114': attribute type 29 has an invalid length.
[  126.361885][ T5886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.419806][ T5886] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.430653][ T6106] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  126.438846][ T6106] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  126.447361][ T6106] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  126.455362][ T6106] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  126.601740][ T6185] syz.0.111 (6185) used greatest stack depth: 20136 bytes left
[  126.619460][ T5886] bridge_slave_1: left allmulticast mode
[  126.621872][ T5886] bridge_slave_1: left promiscuous mode
[  126.624890][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.642866][ T5886] bridge_slave_0: left allmulticast mode
[  126.655262][ T5886] bridge_slave_0: left promiscuous mode
[  126.662861][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.724356][ T6203] netlink: 'syz.1.115': attribute type 2 has an invalid length.
[  126.737893][ T6203] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.115'.
[  126.740915][ T6203] nbd: must specify an index to disconnect
[  126.971319][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.980058][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.984836][ T5886] bond0 (unregistering): Released all slaves
[  127.149784][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.163391][ T6106] 8021q: adding VLAN 0 to HW filter on device team0
[  127.179566][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.182514][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.232511][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.234810][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.424128][ T5886] hsr_slave_0: left promiscuous mode
[  127.462930][ T5886] hsr_slave_1: left promiscuous mode
[  127.480315][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.483227][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.633834][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.637004][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.669456][ T5886] veth1_macvtap: left promiscuous mode
[  127.672084][ T5886] veth0_macvtap: left promiscuous mode
[  127.676193][ T5886] veth1_vlan: left promiscuous mode
[  127.701100][ T5886] veth0_vlan: left promiscuous mode
[  127.863309][ T6232] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.120'.
[  127.870571][ T6232] openvswitch: netlink: Message has 6 unknown bytes.
[  127.939304][ T6234] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.120'.
[  128.173223][ T5886] team0 (unregistering): Port device team_slave_1 removed
[  128.204716][ T5886] team0 (unregistering): Port device team_slave_0 removed
[  128.630234][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.683260][ T6232] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.708440][ T6232] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.753102][ T6106] veth0_vlan: entered promiscuous mode
[  128.799437][ T6106] veth1_vlan: entered promiscuous mode
[  128.874013][ T6106] veth0_macvtap: entered promiscuous mode
[  128.881483][ T6106] veth1_macvtap: entered promiscuous mode
[  128.921526][ T6232] syz.1.120 (6232) used greatest stack depth: 18704 bytes left
[  128.948577][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.979680][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.005567][ T5900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.094682][ T5900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.098499][ T5900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.111607][ T5900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.228320][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.231359][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.241254][ T6255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.126'.
[  129.256177][ T6255] openvswitch: netlink: Flow key attr not present in new flow.
[  129.284098][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.290840][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.816497][ T6278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.133'.
[  130.059651][ T6288] netlink: 'syz.0.136': attribute type 10 has an invalid length.
[  130.106175][ T6288] veth0_vlan: left promiscuous mode
[  130.120088][ T6288] veth0_vlan: entered promiscuous mode
[  130.147898][ T6288] team0: Device veth0_vlan failed to register rx_handler
[  130.314259][ T6300] netlink: 'syz.0.140': attribute type 21 has an invalid length.
[  130.318402][ T6300] netlink: 128 bytes leftover after parsing attributes in process `syz.0.140'.
[  130.322264][ T6300] netlink: 3 bytes leftover after parsing attributes in process `syz.0.140'.
[  130.376117][ T6302] netlink: 'syz.0.141': attribute type 3 has an invalid length.
[  130.381506][ T6302] netlink: 144 bytes leftover after parsing attributes in process `syz.0.141'.
[  130.623926][ T5236] Bluetooth: hci1: adv larger than maximum supported
[  132.502479][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.508138][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  134.380979][ T6371] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.172'.
[  134.737841][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'.
[  134.775837][ T6406] netlink: 14 bytes leftover after parsing attributes in process `syz.3.187'.
[  134.780641][ T6406] hsr_slave_0: left promiscuous mode
[  134.783815][ T6406] hsr_slave_1: left promiscuous mode
[  134.819666][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[  134.960158][ T6415] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.191'.
[  134.982200][ T6424] C: renamed from team_slave_0 (while UP)
[  134.986246][ T6424] netlink: 'syz.1.196': attribute type 3 has an invalid length.
[  134.993220][ T6424] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[  134.996418][ T6424] netlink: 116 bytes leftover after parsing attributes in process `syz.1.196'.
[  135.041142][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'.
[  135.046733][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[  135.116588][ T6435] netlink: 'syz.3.202': attribute type 39 has an invalid length.
[  135.137003][ T6435] veth0_macvtap: left promiscuous mode
[  136.139370][ T6453] IPv6: Can't replace route, no match found
[  136.168838][ T6455] netlink: 'syz.0.211': attribute type 27 has an invalid length.
[  136.173348][ T6455] netlink: 'syz.0.211': attribute type 3 has an invalid length.
[  136.179620][ T6455] netlink: 132 bytes leftover after parsing attributes in process `syz.0.211'.
[  136.241622][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[  136.477995][ T6473] Driver unsupported XDP return value 0 on prog  (id 66) dev N/A, expect packet loss!
[  137.320934][ T6528] netlink: 'syz.3.239': attribute type 2 has an invalid length.
[  137.920816][ T6553] syz.1.249 uses obsolete (PF_INET,SOCK_PACKET)
[  137.943865][ T6538] syzkaller0: entered promiscuous mode
[  137.946179][ T6538] syzkaller0: entered allmulticast mode
[  139.025758][ T6545] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.030825][ T6545] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.406619][ T6576] syzkaller1: tun_chr_ioctl cmd 1074025673
[  142.868797][ T6607] __nla_validate_parse: 3 callbacks suppressed
[  142.868810][ T6607] netlink: 72 bytes leftover after parsing attributes in process `syz.3.274'.
[  143.449723][ T6620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.043648][ T6632] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.285'.
[  146.039006][ T6695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.310'.
[  146.430828][ T6711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'.
[  146.435518][ T6711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'.
[  146.449481][ T6711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.317'.
[  146.658864][ T6725] netlink: 'syz.1.324': attribute type 29 has an invalid length.
[  146.663515][ T6725] netlink: 'syz.1.324': attribute type 29 has an invalid length.
[  147.772058][ T6748] netlink: 2451 bytes leftover after parsing attributes in process `syz.1.334'.
[  147.832631][ T6753] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.336'.
[  147.901948][ T6760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.339'.
[  148.044129][ T6776] netlink: 'syz.1.347': attribute type 25 has an invalid length.
[  148.046995][ T6776] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  148.050567][ T6776] bridge0: port 1(bridge_slave_0) entered learning state
[  148.094485][ T6780] netlink: 80 bytes leftover after parsing attributes in process `syz.0.346'.
[  148.185251][ T6779] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.348'.
[  148.332411][ T6792] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[  148.336606][ T6786] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[  148.346237][ T6792] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.350'.
[  148.384215][ T6796] netlink: 'syz.0.355': attribute type 10 has an invalid length.
[  148.404773][ T6796] team0: Device ipvlan1 failed to register rx_handler
[  148.749094][ T6796] netlink: 'syz.0.355': attribute type 29 has an invalid length.
[  148.751644][ T6796] netlink: 'syz.0.355': attribute type 3 has an invalid length.
[  148.754072][ T6796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.355'.
[  148.984222][ T6815] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.361'.
[  148.990575][ T6812] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.361'.
[  149.159232][ T6823] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.365'.
[  149.190995][ T6826] netlink: 'syz.3.368': attribute type 19 has an invalid length.
[  150.923457][ T6914] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  151.698976][ T6924] netlink: 'syz.1.414': attribute type 3 has an invalid length.
[  151.702890][ T6924] netlink: 'syz.1.414': attribute type 2 has an invalid length.
[  151.775181][ T6933] netlink: 'syz.0.417': attribute type 10 has an invalid length.
[  151.940851][ T6942] netlink: 'syz.0.423': attribute type 4 has an invalid length.
[  152.004546][ T6951] netlink: 'syz.3.427': attribute type 10 has an invalid length.
[  152.035903][ T6951] team0: Port device geneve1 added
[  152.065535][ T6955] netlink: 'syz.1.429': attribute type 2 has an invalid length.
[  152.314063][ T6969] netlink: 'syz.1.436': attribute type 2 has an invalid length.
[  152.383355][ T6972] netlink: 'syz.1.437': attribute type 1 has an invalid length.
[  153.449086][ T6979] __nla_validate_parse: 12 callbacks suppressed
[  153.449103][ T6979] netlink: 188 bytes leftover after parsing attributes in process `syz.1.439'.
[  153.562099][ T6991] veth0_vlan: entered allmulticast mode
[  153.610788][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.445'.
[  153.865883][ T6999] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.448'.
[  153.871475][ T7000] veth0_vlan: left promiscuous mode
[  153.877904][ T7000] veth0_vlan: entered promiscuous mode
[  154.260391][ T7014] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[  154.263506][ T7014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.455'.
[  154.267383][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'.
[  154.271733][ T7015] netlink: 'syz.0.454': attribute type 2 has an invalid length.
[  154.275496][ T7015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.454'.
[  154.349880][ T7019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.378248][ T7017] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.456'.
[  154.382424][ T7017] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  154.552459][ T7033] netlink: 703 bytes leftover after parsing attributes in process `syz.1.464'.
[  154.625830][ T5236] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6
[  154.626182][ T7041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.467'.
[  154.693989][ T7043] netlink: 136 bytes leftover after parsing attributes in process `syz.1.469'.
[  154.887767][ T7058] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  157.446435][ T7126] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  157.450545][ T7126] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  157.538316][ T1133] wlan1: Trigger new scan to find an IBSS to join
[  158.402689][ T7159] validate_nla: 2 callbacks suppressed
[  158.402731][ T7159] netlink: 'syz.0.520': attribute type 10 has an invalid length.
[  161.537316][ T1090] wlan1: Trigger new scan to find an IBSS to join
[  163.662638][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3485045397 wd_nsec: 3485059146
[  167.852905][ T1089] wlan1: Creating new IBSS network, BSSID 0e:8d:be:b3:21:77
[  171.801807][ T7235] __nla_validate_parse: 3 callbacks suppressed
[  171.801822][ T7235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.551'.
[  172.099211][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'.
[  173.924894][ T5236] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  174.340381][ T7296] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.345954][ T7296] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.085091][ T7359] netlink: 'syz.0.568': attribute type 10 has an invalid length.
[  175.088782][ T7359] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.568'.
[  175.205775][   T33] audit: type=1107 audit(1755010540.550:2): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  175.252143][ T7368] netlink: 809 bytes leftover after parsing attributes in process `syz.3.572'.
[  175.255637][ T7368] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.572'.
[  175.304737][ T7372] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.574'.
[  175.343947][ T7376] ksmbd: Unknown IPC event: 3, ignore.
[  175.739164][ T7385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.580'.
[  175.742097][ T7385] tc_dump_action: action bad kind
[  176.556107][ T7425] netlink: 56 bytes leftover after parsing attributes in process `syz.3.600'.
[  176.890180][ T7438] netlink: 192 bytes leftover after parsing attributes in process `syz.0.605'.
[  177.383978][ T7469] netlink: 'syz.3.621': attribute type 10 has an invalid length.
[  177.387948][ T7469] netlink: 2 bytes leftover after parsing attributes in process `syz.3.621'.
[  177.392534][ T7469] team0: entered promiscuous mode
[  177.395160][ T7469] team_slave_0: entered promiscuous mode
[  177.404174][ T7469] team_slave_1: entered promiscuous mode
[  177.413297][ T7469] geneve1: entered promiscuous mode
[  177.429370][ T7469] bridge0: port 3(team0) entered blocking state
[  177.440353][ T7469] bridge0: port 3(team0) entered disabled state
[  177.451016][ T7469] team0: entered allmulticast mode
[  177.453406][ T7469] team_slave_0: entered allmulticast mode
[  177.456055][ T7469] team_slave_1: entered allmulticast mode
[  177.468935][ T7469] geneve1: entered allmulticast mode
[  177.561787][ T7469] bridge0: port 3(team0) entered blocking state
[  177.566076][ T7469] bridge0: port 3(team0) entered forwarding state
[  177.600996][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.625'.
[  177.605007][ T7486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.625'.
[  177.608352][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.625'.
[  177.702021][ T7493] netlink: 'syz.3.629': attribute type 1 has an invalid length.
[  177.704465][ T7493] netlink: 'syz.3.629': attribute type 2 has an invalid length.
[  177.707036][ T7493] netlink: 'syz.3.629': attribute type 3 has an invalid length.
[  177.709610][ T7493] netlink: 'syz.3.629': attribute type 5 has an invalid length.
[  177.712074][ T7493] netlink: 'syz.3.629': attribute type 6 has an invalid length.
[  177.716903][ T7493] netlink: 'syz.3.629': attribute type 7 has an invalid length.
[  177.722265][ T7493] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.629'.
[  177.765986][ T7500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.631'.
[  177.884396][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'.
[  177.890653][ T7511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.638'.
[  177.892530][ T7513] openvswitch: netlink: Message has 16 unknown bytes.
[  177.972635][ T7519] netlink: 56 bytes leftover after parsing attributes in process `syz.1.641'.
[  178.515818][ T7554] netlink: 'syz.1.658': attribute type 21 has an invalid length.
[  178.522496][ T7546] netlink: 'syz.0.654': attribute type 11 has an invalid length.
[  179.083634][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.175565][ T7566] netlink: 'syz.3.664': attribute type 29 has an invalid length.
[  179.890822][ T7597] !: renamed from bond_slave_0 (while UP)
[  181.117872][ T7639] validate_nla: 2 callbacks suppressed
[  181.117887][ T7639] netlink: 'syz.3.695': attribute type 21 has an invalid length.
[  183.804574][ T5236] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  184.178855][ T7677] syzkaller0: entered promiscuous mode
[  184.184411][ T7677] syzkaller0: entered allmulticast mode
[  185.226732][ T7694] __nla_validate_parse: 7 callbacks suppressed
[  185.226751][ T7694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.717'.
[  185.665826][ T7694] netlink: 'syz.0.717': attribute type 3 has an invalid length.
[  185.779553][ T7714] netlink: 'syz.3.727': attribute type 4 has an invalid length.
[  185.781918][ T7714] netlink: 'syz.3.727': attribute type 1 has an invalid length.
[  185.784225][ T7714] netlink: 'syz.3.727': attribute type 2 has an invalid length.
[  185.786518][ T7714] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.727'.
[  185.980502][ T7736] netlink: 10 bytes leftover after parsing attributes in process `syz.1.738'.
[  185.986066][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'.
[  186.025899][ T7739] netlink: 'syz.1.740': attribute type 21 has an invalid length.
[  186.104118][ T7750] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.745'.
[  186.266302][ T7764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.752'.
[  186.359698][ T7774] netlink: 'syz.3.757': attribute type 39 has an invalid length.
[  186.618032][ T5236] Bluetooth: hci3: unexpected subevent 0x01 length: 14 < 18
[  186.965900][ T7827] netlink: 'syz.3.783': attribute type 10 has an invalid length.
[  186.979669][ T7827] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  188.100473][ T7852] netlink: 'syz.1.794': attribute type 29 has an invalid length.
[  188.190404][ T7861] netlink: 'syz.0.797': attribute type 12 has an invalid length.
[  188.193395][ T7861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.797'.
[  188.217028][ T7861] syz.0.797 (7861) used obsolete PPPIOCDETACH ioctl
[  189.279858][ T7873] netlink: 'syz.3.803': attribute type 1 has an invalid length.
[  189.282328][ T7873] netlink: 'syz.3.803': attribute type 4 has an invalid length.
[  189.284777][ T7873] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.803'.
[  189.869566][ T7902] netlink: 17 bytes leftover after parsing attributes in process `syz.1.814'.
[  189.872606][ T7902] netlink: zone id is out of range
[  189.874439][ T7902] netlink: zone id is out of range
[  189.876206][ T7902] netlink: zone id is out of range
[  189.878774][ T7902] netlink: zone id is out of range
[  189.880761][ T7902] netlink: zone id is out of range
[  189.882463][ T7902] netlink: zone id is out of range
[  189.884236][ T7902] netlink: zone id is out of range
[  189.885902][ T7902] netlink: zone id is out of range
[  189.893194][ T7902] netlink: zone id is out of range
[  189.895063][ T7902] netlink: zone id is out of range
[  191.606473][ T7954] netlink: 'syz.1.837': attribute type 3 has an invalid length.
[  191.609888][ T7954] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.837'.
[  191.732658][ T7960] netlink: 'syz.1.840': attribute type 1 has an invalid length.
[  192.019684][ T7978] netlink: 'syz.3.848': attribute type 3 has an invalid length.
[  192.022364][ T7978] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.848'.
[  192.363565][ T8007] netlink: 'syz.1.861': attribute type 33 has an invalid length.
[  192.367287][ T8007] netlink: 152 bytes leftover after parsing attributes in process `syz.1.861'.
[  193.976365][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.979216][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.753432][ T8049] netlink: 'syz.1.877': attribute type 10 has an invalid length.
[  194.894921][ T8049] team0 (unregistering): Port device C removed
[  194.901801][ T8049] team0 (unregistering): Port device team_slave_1 removed
[  196.142041][ T8066] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.884'.
[  196.184583][ T8068] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.885'.
[  196.349827][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  196.352587][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  196.590882][ T8077] sit0: entered allmulticast mode
[  196.593229][ T5873] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4
[  196.604452][ T8077] sit0: entered promiscuous mode
[  197.540806][ T8107] netlink: 948 bytes leftover after parsing attributes in process `syz.0.903'.
[  197.822308][ T8131] netlink: 'syz.0.910': attribute type 10 has an invalid length.
[  197.826284][ T8131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.910'.
[  197.833828][ T8131] batadv0: entered promiscuous mode
[  197.836161][ T8131] batadv0: entered allmulticast mode
[  197.874983][ T8131] bridge0: port 3(batadv0) entered blocking state
[  197.881881][ T8131] bridge0: port 3(batadv0) entered disabled state
[  197.925477][ T8131] bridge0: port 3(batadv0) entered blocking state
[  197.929484][ T8131] bridge0: port 3(batadv0) entered forwarding state
[  198.038370][ T5900] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  198.041853][ T5900] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  198.284354][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'.
[  198.725457][ T8171] netlink: 'syz.1.924': attribute type 12 has an invalid length.
[  198.731486][ T8171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.924'.
[  199.173986][ T8197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'.
[  199.181202][ T8197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'.
[  199.188194][ T8197] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'.
[  200.519818][ T8236] netlink: 'syz.0.954': attribute type 21 has an invalid length.
[  201.693143][ T8283] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.976'.
[  201.706153][ T8285] netlink: 17 bytes leftover after parsing attributes in process `syz.0.975'.
[  201.709482][ T8285] net_ratelimit: 12 callbacks suppressed
[  201.709505][ T8285] netlink: zone id is out of range
[  201.713887][ T8285] netlink: zone id is out of range
[  201.715885][ T8285] netlink: zone id is out of range
[  201.726086][ T8285] netlink: zone id is out of range
[  201.731122][ T8285] netlink: zone id is out of range
[  201.733631][ T8285] netlink: zone id is out of range
[  201.736064][ T8285] netlink: zone id is out of range
[  201.744003][ T8285] netlink: zone id is out of range
[  201.747456][ T8285] netlink: zone id is out of range
[  201.749542][ T8285] netlink: zone id is out of range
[  201.841804][ T8296] netlink: 'syz.0.981': attribute type 3 has an invalid length.
[  202.890245][ T8310] sit0: entered allmulticast mode
[  202.922559][ T8310] sit0: entered promiscuous mode
[  205.272182][ T8317] netlink: 'syz.0.988': attribute type 13 has an invalid length.
[  205.274913][ T8317] netlink: 'syz.0.988': attribute type 58 has an invalid length.
[  205.279534][ T8317] netlink: 152 bytes leftover after parsing attributes in process `syz.0.988'.
[  205.441550][ T8329] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.994'.
[  205.546155][ T8334] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.992'.
[  205.553732][ T8334] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.992'.
[  205.558152][ T8334] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.992'.
[  205.992660][ T5873] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28
[  205.995834][ T5873] Bluetooth: hci0: Unable to find connection with handle 0x0000
[  206.139382][ T8358] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1008'.
[  206.378596][ T8371] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1014'.
[  206.463400][ T8377] netlink: 'syz.3.1017': attribute type 5 has an invalid length.
[  209.217796][ T8387] wg2: entered promiscuous mode
[  209.219622][ T8387] wg2: entered allmulticast mode
[  209.399445][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1027'.
[  209.402997][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1027'.
[  210.134131][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1039'.
[  210.582204][ T8455] netlink: 'syz.1.1051': attribute type 11 has an invalid length.
[  210.585043][ T8455] __nla_validate_parse: 2 callbacks suppressed
[  210.585053][ T8455] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1051'.
[  210.693877][ T8454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.057448][ T8477] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1061'.
[  211.067216][ T8477] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1061'.
[  212.754737][ T8502] netlink: 'syz.0.1073': attribute type 40 has an invalid length.
[  212.763461][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.816288][ T8503] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1072'.
[  213.674096][ T8522] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1081'.
[  213.954283][ T8527] vxcan1: entered allmulticast mode
[  215.145751][ T5236] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  215.162026][ T8575] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1104'.
[  215.296894][ T8575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.305649][ T8575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.344660][ T8581] netlink: 'syz.3.1107': attribute type 4 has an invalid length.
[  215.349740][ T8575] bond0 (unregistering): Released all slaves
[  215.356043][ T8581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1107'.
[  215.408291][ T8581] net_ratelimit: 75 callbacks suppressed
[  215.408406][ T8581] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  215.536603][ T5236] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  216.120024][ T8619] netlink: 'syz.1.1125': attribute type 27 has an invalid length.
[  216.123250][ T8619] netlink: 'syz.1.1125': attribute type 3 has an invalid length.
[  216.126362][ T8619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1125'.
[  216.200895][ T8624] netlink: 'syz.0.1128': attribute type 2 has an invalid length.
[  216.204216][ T8624] netlink: 'syz.0.1128': attribute type 8 has an invalid length.
[  216.209688][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1128'.
[  216.371871][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.376145][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.385815][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.391930][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.406114][ T8631] bridge0: port 3(batadv0) entered disabled state
[  216.430839][ T8631] bridge0: port 3(batadv0) entered disabled state
[  216.500654][ T5236] Bluetooth: hci3: command 0x0406 tx timeout
[  216.521778][ T8639] netlink: 'syz.3.1134': attribute type 3 has an invalid length.
[  216.524928][ T8639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1134'.
[  216.702767][ T8647] TCP: TCP_TX_DELAY enabled
[  217.575747][ T8666] syz.0.1144: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  217.590778][ T8666] CPU: 0 UID: 0 PID: 8666 Comm: syz.0.1144 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  217.590800][ T8666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.590811][ T8666] Call Trace:
[  217.590843][ T8666]  <TASK>
[  217.590853][ T8666]  dump_stack_lvl+0x189/0x250
[  217.590887][ T8666]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.590904][ T8666]  ? __pfx__printk+0x10/0x10
[  217.590927][ T8666]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  217.590944][ T8666]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  217.590965][ T8666]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  217.590987][ T8666]  warn_alloc+0x214/0x310
[  217.591011][ T8666]  ? stack_depot_save_flags+0x40/0x900
[  217.591041][ T8666]  ? __pfx_warn_alloc+0x10/0x10
[  217.591070][ T8666]  ? kasan_save_track+0x4f/0x80
[  217.591091][ T8666]  ? xskq_create+0x56/0x170
[  217.591104][ T8666]  ? xsk_init_queue+0xb0/0x110
[  217.591156][ T8666]  ? xsk_setsockopt+0x57b/0x8d0
[  217.591177][ T8666]  ? do_sock_setsockopt+0x17c/0x1b0
[  217.591194][ T8666]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  217.591208][ T8666]  ? do_syscall_64+0xfa/0x3b0
[  217.591221][ T8666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.591252][ T8666]  __vmalloc_node_range_noprof+0x125/0x12f0
[  217.591333][ T8666]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  217.591366][ T8666]  ? __kasan_kmalloc+0x93/0xb0
[  217.591393][ T8666]  vmalloc_user_noprof+0xad/0xf0
[  217.591416][ T8666]  ? xskq_create+0xbf/0x170
[  217.591434][ T8666]  xskq_create+0xbf/0x170
[  217.591456][ T8666]  xsk_init_queue+0xb0/0x110
[  217.591487][ T8666]  xsk_setsockopt+0x57b/0x8d0
[  217.591517][ T8666]  ? __pfx_xsk_setsockopt+0x10/0x10
[  217.591541][ T8666]  ? __pfx_aa_sk_perm+0x10/0x10
[  217.591567][ T8666]  ? __fget_files+0x2a/0x420
[  217.591590][ T8666]  ? aa_sock_opt_perm+0x74/0x110
[  217.591614][ T8666]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  217.591629][ T8666]  ? __pfx_xsk_setsockopt+0x10/0x10
[  217.591662][ T8666]  do_sock_setsockopt+0x17c/0x1b0
[  217.591694][ T8666]  __x64_sys_setsockopt+0x13f/0x1b0
[  217.591726][ T8666]  do_syscall_64+0xfa/0x3b0
[  217.591741][ T8666]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.591757][ T8666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.591773][ T8666]  ? exc_page_fault+0x9f/0xf0
[  217.591794][ T8666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.591809][ T8666] RIP: 0033:0x7f892b38ebe9
[  217.591827][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.591840][ T8666] RSP: 002b:00007f892c1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  217.591856][ T8666] RAX: ffffffffffffffda RBX: 00007f892b5b5fa0 RCX: 00007f892b38ebe9
[  217.591867][ T8666] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  217.591876][ T8666] RBP: 00007f892b411e19 R08: 0000000000000004 R09: 0000000000000000
[  217.591885][ T8666] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  217.591895][ T8666] R13: 00007f892b5b6038 R14: 00007f892b5b5fa0 R15: 00007ffcef1c4d28
[  217.591944][ T8666]  </TASK>
[  217.592102][ T8666] Mem-Info:
[  217.720351][ T8666] active_anon:5944 inactive_anon:0 isolated_anon:0
[  217.720351][ T8666]  active_file:11155 inactive_file:38278 isolated_file:0
[  217.720351][ T8666]  unevictable:1768 dirty:147 writeback:0
[  217.720351][ T8666]  slab_reclaimable:9624 slab_unreclaimable:53776
[  217.720351][ T8666]  mapped:17942 shmem:2455 pagetables:929
[  217.720351][ T8666]  sec_pagetables:0 bounce:0
[  217.720351][ T8666]  kernel_misc_reclaimable:0
[  217.720351][ T8666]  free:290942 free_pcp:15268 free_cma:0
[  217.737173][ T8666] Node 0 active_anon:10684kB inactive_anon:0kB active_file:27880kB inactive_file:131328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33512kB dirty:364kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7504kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  217.747668][ T8666] Node 1 active_anon:13092kB inactive_anon:0kB active_file:16740kB inactive_file:21784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38256kB dirty:224kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4080kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  217.760224][ T8666] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.771815][ T8666] lowmem_reserve[]: 0 811 811 811 811
[  217.774138][ T8666] Node 0 DMA32 free:252260kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10684kB inactive_anon:0kB active_file:27880kB inactive_file:131328kB unevictable:3536kB writepending:364kB present:1556484kB managed:831084kB mlocked:0kB bounce:0kB free_pcp:27712kB local_pcp:10212kB free_cma:0kB
[  217.792695][ T8666] lowmem_reserve[]: 0 0 0 0 0
[  217.794757][ T8666] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.806650][ T8666] lowmem_reserve[]: 0 0 854 854 854
[  217.808959][ T8666] Node 1 Normal free:437404kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13092kB inactive_anon:0kB active_file:16740kB inactive_file:21784kB unevictable:3536kB writepending:224kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:33560kB local_pcp:14816kB free_cma:0kB
[  217.850873][ T8666] lowmem_reserve[]: 0 0 0 0 0
[  217.852890][ T8666] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  217.860245][ T8666] Node 0 DMA32: 1355*4kB (UME) 851*8kB (UME) 646*16kB (UME) 229*32kB (UM) 291*64kB (UM) 79*128kB (UME) 20*256kB (UME) 27*512kB (UME) 10*1024kB (UM) 8*2048kB (UM) 35*4096kB (UM) = 247556kB
[  217.866967][ T8666] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  217.872939][ T8666] Node 1 Normal: 756*4kB (UME) 541*8kB (UME) 357*16kB (UME) 375*32kB (UM) 62*64kB (UE) 7*128kB (UME) 4*256kB (UE) 15*512kB (UM) 5*1024kB (UE) 3*2048kB (UE) 94*4096kB (M) = 434920kB
[  217.879608][ T8666] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.883251][ T8666] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.885568][ T8673] syzkaller0: entered promiscuous mode
[  217.886476][ T8666] 51888 total pagecache pages
[  217.886509][ T8666] 0 pages in swap cache
[  217.886516][ T8666] Free swap  = 124996kB
[  217.886523][ T8666] Total swap = 124996kB
[  217.886531][ T8666] 786301 pages RAM
[  217.886536][ T8666] 0 pages HighMem/MovableOnly
[  217.886543][ T8666] 241282 pages reserved
[  217.886549][ T8666] 0 pages cma reserved
[  217.905487][ T8673] syzkaller0: entered allmulticast mode
[  217.917950][ T8675] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  219.876666][ T8735] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1175'.
[  220.103405][ T8752] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1183'.
[  220.158218][ T8754] caif0: entered promiscuous mode
[  220.159962][ T8754] caif0: entered allmulticast mode
[  220.674406][ T8776] netlink: 'syz.0.1195': attribute type 16 has an invalid length.
[  220.677985][ T8776] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1195'.
[  220.684241][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.732540][ T5873] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10
[  221.491074][   T32] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  221.496338][   T32] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  221.730994][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'.
[  221.735410][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'.
[  221.870036][ T8813] netlink: 'syz.3.1212': attribute type 21 has an invalid length.
[  221.877497][ T8813] netlink: 'syz.3.1212': attribute type 1 has an invalid length.
[  221.880087][ T8808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.891357][ T8808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.044065][ T8818] veth1_macvtap: left promiscuous mode
[  222.046675][ T8818] macsec0: entered promiscuous mode
[  222.050313][ T8818] macsec0: entered allmulticast mode
[  222.060806][ T8818] veth1_macvtap: entered promiscuous mode
[  222.063412][ T8818] veth1_macvtap: entered allmulticast mode
[  222.520857][ T8837] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1223'.
[  222.524388][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'.
[  223.162837][ T8873] netlink: 'syz.0.1239': attribute type 2 has an invalid length.
[  223.177216][ T8873] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  223.179703][ T8873] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1239'.
[  223.182804][ T8873] block nbd5: not configured, cannot reconfigure
[  223.854117][ T8909] netlink: 'syz.0.1255': attribute type 10 has an invalid length.
[  224.111002][ T8918] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1259'.
[  224.155844][ T8916] netlink: 'syz.3.1258': attribute type 29 has an invalid length.
[  224.181007][ T8923] netlink: 'syz.3.1258': attribute type 29 has an invalid length.
[  224.196660][ T8916] netlink: 'syz.3.1258': attribute type 29 has an invalid length.
[  224.295709][ T8931] netlink: 'syz.0.1264': attribute type 21 has an invalid length.
[  224.349083][ T8932] syzkaller0: entered promiscuous mode
[  224.353449][ T8931] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1264'.
[  224.509408][ T8936] syzkaller0: entered promiscuous mode
[  224.511727][ T8936] syzkaller0: entered allmulticast mode
[  225.634295][ T8950] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1274'.
[  225.655369][ T8954] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1276'.
[  226.481939][ T8976] openvswitch: netlink: Flow actions attr not present in new flow.
[  229.115180][ T9033] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  229.136894][ T9033] validate_nla: 4 callbacks suppressed
[  229.136954][ T9033] netlink: 'syz.1.1307': attribute type 2 has an invalid length.
[  229.980154][ T9038] C: renamed from team_slave_0 (while UP)
[  229.985361][ T9038] netlink: 'syz.3.1309': attribute type 4 has an invalid length.
[  229.989730][ T9038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  230.246236][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'.
[  230.585192][ T5873] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  230.585538][ T5873] Bluetooth: hci3: connection err: -111
[  231.729449][ T9098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1338'.
[  231.765184][ T9099] syzkaller0: left promiscuous mode
[  233.150119][ T9148] syzkaller0: entered promiscuous mode
[  233.152009][ T9148] syzkaller0: entered allmulticast mode
[  233.291246][ T9151] netlink: 'syz.1.1361': attribute type 1 has an invalid length.
[  233.341031][ T9156] netlink: 'syz.1.1363': attribute type 33 has an invalid length.
[  234.904994][ T9189] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1379'.
[  235.100598][ T9205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1387'.
[  235.106175][ T9205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1387'.
[  235.113062][ T9205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1387'.
[  235.252804][ T9216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1392'.
[  235.885752][ T9263] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1414'.
[  236.016832][ T9269] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1417'.
[  236.530112][ T9299] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1431'.
[  236.713487][ T9309] netlink: 'syz.0.1435': attribute type 2 has an invalid length.
[  236.719945][ T9309] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1435'.
[  236.724213][ T9309] nbd: must specify at least one socket
[  237.147937][ T9329] netlink: 'syz.3.1443': attribute type 1 has an invalid length.
[  237.151044][ T9329] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1443'.
[  237.179618][ T9331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1444'.
[  237.191228][ T9333] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1445'.
[  237.241985][ T9335] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1446'.
[  237.304404][ T9341] netlink: 'syz.1.1449': attribute type 1 has an invalid length.
[  237.307786][ T9341] netlink: 'syz.1.1449': attribute type 2 has an invalid length.
[  237.525350][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1455'.
[  237.813169][ T9374] netlink: 'syz.0.1464': attribute type 26 has an invalid length.
[  237.920487][ T9383] netlink: 'syz.0.1469': attribute type 4 has an invalid length.
[  237.923673][ T9383] netlink: 'syz.0.1469': attribute type 16 has an invalid length.
[  238.151516][ T9398] netlink: 'syz.1.1476': attribute type 3 has an invalid length.
[  238.154379][ T9398] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  239.841376][ T5873] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  240.119076][ T9491] netlink: 'syz.1.1521': attribute type 10 has an invalid length.
[  240.923355][ T9488] delete_channel: no stack
[  241.039420][ T9547] netlink: 'syz.0.1547': attribute type 29 has an invalid length.
[  241.381179][ T9569] __nla_validate_parse: 13 callbacks suppressed
[  241.381196][ T9569] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1558'.
[  241.441200][ T9573] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.1560'.
[  241.448009][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'.
[  241.454337][ T9573] netlink: 125920 bytes leftover after parsing attributes in process `syz.3.1560'.
[  243.067669][ T9668] validate_nla: 1 callbacks suppressed
[  243.067692][ T9668] netlink: 'syz.1.1601': attribute type 10 has an invalid length.
[  243.185517][ T9674] delete_channel: no stack
[  243.385255][ T9684] netlink: 'syz.3.1608': attribute type 3 has an invalid length.
[  243.389358][ T9684] netlink: 'syz.3.1608': attribute type 1 has an invalid length.
[  243.392687][ T9684] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1608'.
[  243.400634][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'.
[  243.406137][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'.
[  243.410716][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'.
[  243.453561][ T9686] netlink: 'syz.3.1609': attribute type 21 has an invalid length.
[  243.456838][ T9686] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1609'.
[  243.462786][ T9686] netlink: 'syz.3.1609': attribute type 6 has an invalid length.
[  243.465846][ T9686] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1609'.
[  244.782509][ T9715] netlink: 'syz.3.1621': attribute type 11 has an invalid length.
[  244.988230][ T9714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.192736][ T9742] C: renamed from team_slave_0
[  245.202969][ T9742] netlink: 'syz.0.1632': attribute type 3 has an invalid length.
[  245.239673][ T9747] netlink: 'syz.1.1636': attribute type 2 has an invalid length.
[  245.617054][ T9756] netlink: 'syz.0.1640': attribute type 1 has an invalid length.
[  245.814499][ T9766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.089741][ T9820] __nla_validate_parse: 4 callbacks suppressed
[  247.089756][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'.
[  247.426856][ T9845] netlink: 'syz.3.1679': attribute type 33 has an invalid length.
[  247.692585][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'.
[  247.784012][ T9874] netlink: 'syz.0.1693': attribute type 9 has an invalid length.
[  247.789433][ T9874] netlink: 143452 bytes leftover after parsing attributes in process `syz.0.1693'.
[  248.102689][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  248.200282][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  250.619117][ T9939] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  250.700121][ T9947] validate_nla: 3 callbacks suppressed
[  250.700140][ T9947] netlink: 'syz.0.1722': attribute type 3 has an invalid length.
[  250.705660][ T9947] netlink: 'syz.0.1722': attribute type 1 has an invalid length.
[  250.711963][ T9947] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1722'.
[  250.715693][ T9947] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  250.812752][ T9945] infiniband syz1: set active
[  250.814492][ T9945] infiniband syz1: added bond0
[  250.883496][ T9954] netlink: 'syz.0.1725': attribute type 27 has an invalid length.
[  250.889875][ T9945] RDS/IB: syz1: added
[  250.891701][ T9945] smc: adding ib device syz1 with port count 1
[  250.894245][ T9945] smc:    ib device syz1 port 1 has pnetid 
[  251.041957][ T9958] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1727'.
[  251.126189][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1730'.
[  251.129526][ T9964] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1730'.
[  251.133526][ T9964] netlink: 'syz.3.1730': attribute type 5 has an invalid length.
[  251.136066][ T9964] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1730'.
[  253.331253][T10010] __nla_validate_parse: 1 callbacks suppressed
[  253.331268][T10010] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1751'.
[  253.383026][T10015] netlink: 'syz.1.1752': attribute type 39 has an invalid length.
[  253.443609][T10015] hsr_slave_0 (unregistering): left promiscuous mode
[  253.716571][T10041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1765'.
[  253.726424][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.559804][T10043] netlink: 'syz.3.1766': attribute type 2 has an invalid length.
[  254.563039][T10043] netlink: 'syz.3.1766': attribute type 7 has an invalid length.
[  254.566222][T10043] netlink: 85 bytes leftover after parsing attributes in process `syz.3.1766'.
[  254.571957][T10043] netlink: 130140 bytes leftover after parsing attributes in process `syz.3.1766'.
[  254.575815][T10043] netlink: 'syz.3.1766': attribute type 2 has an invalid length.
[  254.579752][T10043] netlink: 'syz.3.1766': attribute type 7 has an invalid length.
[  254.583059][T10043] netlink: 85 bytes leftover after parsing attributes in process `syz.3.1766'.
[  254.668631][T10041] bridge_slave_0 (unregistering): left promiscuous mode
[  254.671873][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.970437][T10055] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1770'.
[  255.147530][T10064] netlink: 'syz.0.1775': attribute type 39 has an invalid length.
[  255.389570][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.392201][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.691830][T10068] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1777'.
[  256.039097][T10076] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1781'.
[  256.689643][T10097] netlink: 'syz.3.1790': attribute type 11 has an invalid length.
[  256.696432][T10097] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1790'.
[  256.792223][T10103] netlink: 'syz.3.1793': attribute type 49 has an invalid length.
[  257.219030][T10123] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1803'.
[  257.321991][T10135] netlink: 'syz.0.1809': attribute type 11 has an invalid length.
[  257.390031][T10141] net veth1_virt_wifi : renamed from virt_wifi0
[  257.497946][T10151] netlink: 'syz.0.1817': attribute type 29 has an invalid length.
[  257.542093][T10157] team0: left allmulticast mode
[  257.544103][T10157] C: left allmulticast mode
[  257.545769][T10157] team_slave_1: left allmulticast mode
[  257.547833][T10157] geneve1: left allmulticast mode
[  257.549860][T10157] bridge0: port 3(team0) entered disabled state
[  257.558906][T10157] bridge_slave_1: left allmulticast mode
[  257.561218][T10157] bridge_slave_1: left promiscuous mode
[  257.563618][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.572102][T10157] bridge_slave_0: left allmulticast mode
[  257.574462][T10157] bridge_slave_0: left promiscuous mode
[  257.576871][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.648370][T10163] netlink: 'syz.0.1823': attribute type 2 has an invalid length.
[  259.829301][T10248] __nla_validate_parse: 1 callbacks suppressed
[  259.829319][T10248] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1863'.
[  259.933038][T10258] syzkaller0: left promiscuous mode
[  259.935039][T10258] syzkaller0: left allmulticast mode
[  259.959384][T10262] netlink: 51563 bytes leftover after parsing attributes in process `syz.3.1870'.
[  260.021475][T10265] netlink: 'syz.3.1871': attribute type 3 has an invalid length.
[  260.023999][T10265] netlink: 'syz.3.1871': attribute type 1 has an invalid length.
[  260.026403][T10265] netlink: 191264 bytes leftover after parsing attributes in process `syz.3.1871'.
[  260.250044][T10277] syz1: rxe_newlink: already configured on bond0
[  260.441626][T10292] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1883'.
[  260.856383][T10326] netlink: 'syz.3.1899': attribute type 39 has an invalid length.
[  261.724120][T10344] netlink: 'syz.0.1908': attribute type 29 has an invalid length.
[  261.729734][T10344] netlink: 'syz.0.1908': attribute type 29 has an invalid length.
[  261.904500][T10357] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1914'.
[  262.039003][T10365] netlink: 'syz.3.1918': attribute type 33 has an invalid length.
[  262.042048][T10365] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1918'.
[  263.588984][T10413] netlink: 'syz.0.1940': attribute type 2 has an invalid length.
[  263.594834][T10413] netlink: 'syz.0.1940': attribute type 3 has an invalid length.
[  263.600564][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1940'.
[  263.991819][T10428] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1947'.
[  264.083564][T10436] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1952'.
[  264.086919][T10436] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1952'.
[  265.419832][T10484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  265.428335][T10484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  265.490969][T10498] netlink: 'syz.1.1979': attribute type 21 has an invalid length.
[  265.494331][T10498] __nla_validate_parse: 1 callbacks suppressed
[  265.494346][T10498] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1979'.
[  265.529235][T10500] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1980'.
[  265.589494][T10505] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1982'.
[  265.664530][T10510] netlink: 'syz.1.1985': attribute type 2 has an invalid length.
[  265.680013][T10510] netlink: 'syz.1.1985': attribute type 1 has an invalid length.
[  265.682923][T10510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1985'.
[  265.688569][ T7332] wlan1: Created IBSS using preconfigured BSSID 00:00:00:8d:00:00
[  265.691564][ T7332] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  265.695140][T10508] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  265.917507][T10529] netlink: 'syz.3.1993': attribute type 2 has an invalid length.
[  265.920500][T10529] netlink: 'syz.3.1993': attribute type 1 has an invalid length.
[  266.197350][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2006'.
[  266.207725][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2006'.
[  266.358473][T10567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2011'.
[  266.362049][T10567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2011'.
[  267.167368][T10572] netlink: 'syz.3.2013': attribute type 10 has an invalid length.
[  267.170729][T10572] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2013'.
[  267.264410][T10576] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2015'.
[  270.215206][T10584] netlink: 'syz.3.2018': attribute type 11 has an invalid length.
[  272.577720][T10607] pim6reg1: tun_chr_ioctl cmd 1074025680
[  277.202726][T10623] raw_sendmsg: syz.1.2035 forgot to set AF_INET. Fix it!
[  277.740891][T10663] netlink: 'syz.3.2055': attribute type 21 has an invalid length.
[  277.750388][T10664] __nla_validate_parse: 1 callbacks suppressed
[  277.750401][T10664] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2054'.
[  278.558627][T10705] netlink: 'syz.3.2073': attribute type 41 has an invalid length.
[  278.596008][T10707] netlink: 'syz.0.2074': attribute type 16 has an invalid length.
[  278.603100][T10707] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2074'.
[  278.703518][T10719] netlink: 'syz.3.2080': attribute type 10 has an invalid length.
[  278.706716][T10719] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2080'.
[  278.725192][T10721] syz.0.2081: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  278.731716][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.0.2081 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  278.731750][T10721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.731760][T10721] Call Trace:
[  278.731767][T10721]  <TASK>
[  278.731775][T10721]  dump_stack_lvl+0x189/0x250
[  278.731804][T10721]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.731823][T10721]  ? __pfx__printk+0x10/0x10
[  278.731845][T10721]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  278.731864][T10721]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  278.731881][T10721]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  278.731901][T10721]  warn_alloc+0x214/0x310
[  278.731923][T10721]  ? stack_depot_save_flags+0x40/0x900
[  278.731950][T10721]  ? __pfx_warn_alloc+0x10/0x10
[  278.731973][T10721]  ? kasan_save_track+0x4f/0x80
[  278.731994][T10721]  ? xskq_create+0x56/0x170
[  278.732008][T10721]  ? xsk_init_queue+0xb0/0x110
[  278.732029][T10721]  ? xsk_setsockopt+0x57b/0x8d0
[  278.732051][T10721]  ? do_sock_setsockopt+0x17c/0x1b0
[  278.732070][T10721]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  278.732087][T10721]  ? do_syscall_64+0xfa/0x3b0
[  278.732102][T10721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.732123][T10721]  __vmalloc_node_range_noprof+0x125/0x12f0
[  278.732169][T10721]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  278.732196][T10721]  ? __kasan_kmalloc+0x93/0xb0
[  278.732219][T10721]  vmalloc_user_noprof+0xad/0xf0
[  278.732240][T10721]  ? xskq_create+0xbf/0x170
[  278.732255][T10721]  xskq_create+0xbf/0x170
[  278.732272][T10721]  xsk_init_queue+0xb0/0x110
[  278.732296][T10721]  xsk_setsockopt+0x57b/0x8d0
[  278.732320][T10721]  ? __pfx_xsk_setsockopt+0x10/0x10
[  278.732342][T10721]  ? __pfx_aa_sk_perm+0x10/0x10
[  278.732361][T10721]  ? __fget_files+0x2a/0x420
[  278.732383][T10721]  ? aa_sock_opt_perm+0x74/0x110
[  278.732403][T10721]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  278.732419][T10721]  ? __pfx_xsk_setsockopt+0x10/0x10
[  278.732443][T10721]  do_sock_setsockopt+0x17c/0x1b0
[  278.732465][T10721]  __x64_sys_setsockopt+0x13f/0x1b0
[  278.732520][T10721]  do_syscall_64+0xfa/0x3b0
[  278.732537][T10721]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.732554][T10721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.732570][T10721]  ? exc_page_fault+0x9f/0xf0
[  278.732587][T10721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.732605][T10721] RIP: 0033:0x7f892b38ebe9
[  278.732621][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.732635][T10721] RSP: 002b:00007f892c1df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  278.732653][T10721] RAX: ffffffffffffffda RBX: 00007f892b5b5fa0 RCX: 00007f892b38ebe9
[  278.732667][T10721] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  278.732678][T10721] RBP: 00007f892b411e19 R08: 0000000000000004 R09: 0000000000000000
[  278.732690][T10721] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  278.732701][T10721] R13: 00007f892b5b6038 R14: 00007f892b5b5fa0 R15: 00007ffcef1c4d28
[  278.732733][T10721]  </TASK>
[  278.732744][T10721] Mem-Info:
[  278.856327][T10721] active_anon:12396 inactive_anon:0 isolated_anon:0
[  278.856327][T10721]  active_file:13536 inactive_file:38303 isolated_file:0
[  278.856327][T10721]  unevictable:1768 dirty:237 writeback:0
[  278.856327][T10721]  slab_reclaimable:9693 slab_unreclaimable:56147
[  278.856327][T10721]  mapped:17986 shmem:2416 pagetables:941
[  278.856327][T10721]  sec_pagetables:0 bounce:0
[  278.856327][T10721]  kernel_misc_reclaimable:0
[  278.856327][T10721]  free:274971 free_pcp:19503 free_cma:0
[  278.871725][T10721] Node 0 active_anon:36512kB inactive_anon:0kB active_file:37400kB inactive_file:131408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33512kB dirty:476kB writeback:0kB shmem:4824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7620kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  278.892405][T10721] Node 1 active_anon:13072kB inactive_anon:0kB active_file:16744kB inactive_file:21804kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38432kB dirty:472kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4104kB pagetables:1468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  278.904451][T10721] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  278.915948][T10721] lowmem_reserve[]: 0 811 811 811 811
[  278.918343][T10721] Node 0 DMA32 free:209080kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36512kB inactive_anon:0kB active_file:37400kB inactive_file:131408kB unevictable:3536kB writepending:476kB present:1556484kB managed:831084kB mlocked:0kB bounce:0kB free_pcp:34908kB local_pcp:18108kB free_cma:0kB
[  278.929638][T10721] lowmem_reserve[]: 0 0 0 0 0
[  278.931756][T10721] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  278.942183][T10721] lowmem_reserve[]: 0 0 854 854 854
[  278.943921][T10721] Node 1 Normal free:416828kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13072kB inactive_anon:0kB active_file:16744kB inactive_file:21804kB unevictable:3536kB writepending:472kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:43132kB local_pcp:21096kB free_cma:0kB
[  278.963369][T10721] lowmem_reserve[]: 0 0 0 0 0
[  278.966053][T10721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  278.972613][T10721] Node 0 DMA32: 54*4kB (UME) 324*8kB (UE) 243*16kB (UME) 135*32kB (UME) 206*64kB (UME) 40*128kB (UME) 14*256kB (UME) 18*512kB (UME) 9*1024kB (UM) 7*2048kB (UM) 35*4096kB (UM) = 209032kB
[  278.982345][T10721] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  278.992277][T10721] Node 1 Normal: 279*4kB (UME) 262*8kB (UME) 405*16kB (UME) 59*32kB (ME) 86*64kB (UME) 37*128kB (UME) 11*256kB (UME) 16*512kB (UM) 5*1024kB (UE) 5*2048kB (UME) 90*4096kB (M) = 416828kB
[  278.998275][T10721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  279.013133][T10721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  279.016129][T10721] 54255 total pagecache pages
[  279.024050][T10721] 0 pages in swap cache
[  279.025623][T10721] Free swap  = 124996kB
[  279.034092][T10721] Total swap = 124996kB
[  279.035763][T10721] 786301 pages RAM
[  279.037227][T10721] 0 pages HighMem/MovableOnly
[  279.038827][T10721] 241282 pages reserved
[  279.040311][T10721] 0 pages cma reserved
[  279.204846][T10735] netlink: 'syz.3.2086': attribute type 2 has an invalid length.
[  279.213836][T10735] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2086'.
[  279.371124][T10746] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2092'.
[  279.935920][T10765] netlink: 'syz.0.2100': attribute type 10 has an invalid length.
[  279.938282][T10766] netlink: 'syz.1.2101': attribute type 21 has an invalid length.
[  279.938707][T10765] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2100'.
[  279.941721][T10766] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2101'.
[  279.996011][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'.
[  280.109796][T10770] netlink: 'syz.1.2103': attribute type 12 has an invalid length.
[  280.115919][T10770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2103'.
[  280.352174][ T5873] Bluetooth: hci0: Malformed LE Event: 0x1b
[  280.549205][T10794] netlink: 'syz.3.2114': attribute type 21 has an invalid length.
[  280.551832][T10794] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2114'.
[  280.556542][T10795] netlink: 'syz.0.2112': attribute type 21 has an invalid length.
[  282.065693][T10859] -1: renamed from syzkaller0
[  283.013622][T10954] __nla_validate_parse: 3 callbacks suppressed
[  283.013740][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'.
[  283.019870][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'.
[  283.026817][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2156'.
[  283.665418][T11020] netlink: 'syz.1.2185': attribute type 29 has an invalid length.
[  284.003050][T11041] netlink: 'syz.1.2195': attribute type 29 has an invalid length.
[  284.008687][T11041] netlink: 'syz.1.2195': attribute type 29 has an invalid length.
[  284.012908][T11041] netlink: 'syz.1.2195': attribute type 29 has an invalid length.
[  284.066823][T11043] netlink: 'syz.1.2196': attribute type 6 has an invalid length.
[  284.123081][T11043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2196'.
[  284.264670][T11057] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2202'.
[  284.479652][ T7336] smc: removing ib device syz1
[  284.488487][T11057] bond0 (unregistering): (slave 1!): Releasing backup interface
[  284.496633][T11066] netlink: 'syz.0.2207': attribute type 10 has an invalid length.
[  284.501291][T11066] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2207'.
[  284.501744][T11057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.510873][T11057] bond0 (unregistering): Released all slaves
[  285.345541][T11089] netlink: 151 bytes leftover after parsing attributes in process `syz.0.2217'.
[  285.727860][T11121] netlink: 464 bytes leftover after parsing attributes in process `syz.3.2233'.
[  286.379571][T11143] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2242'.
[  286.782418][T11158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2247'.
[  287.124304][ T5873] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3
[  288.040360][T11209] netlink: 'syz.0.2267': attribute type 2 has an invalid length.
[  288.554992][T11218] syzkaller0: entered promiscuous mode
[  288.557308][T11218] syzkaller0: entered allmulticast mode
[  289.244875][T11230] netlink: 'syz.1.2274': attribute type 40 has an invalid length.
[  289.352789][T11230] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.385229][T11220] __nla_validate_parse: 1 callbacks suppressed
[  289.385319][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'.
[  289.393312][T11220] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2272'.
[  289.835947][T11242] : entered promiscuous mode
[  291.530563][T11285] netlink: 'syz.3.2290': attribute type 10 has an invalid length.
[  292.582340][T11301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2302'.
[  292.679853][T11303] netlink: 'syz.1.2303': attribute type 10 has an invalid length.
[  293.621738][T11285] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.626895][T11285] bond0: entered promiscuous mode
[  293.629692][T11285] bond_slave_0: entered promiscuous mode
[  293.632260][T11285] bond_slave_1: entered promiscuous mode
[  293.634785][T11285] netdevsim netdevsim3 : entered promiscuous mode
[  293.640613][T11285] team0: Port device bond0 added
[  293.735777][T11309] netlink: 'syz.0.2306': attribute type 10 has an invalid length.
[  293.739614][T11309] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2306'.
[  293.826636][T11313] netlink: 'syz.3.2307': attribute type 21 has an invalid length.
[  294.051236][T11322] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2311'.
[  294.154450][T11326] netlink: 'syz.3.2313': attribute type 3 has an invalid length.
[  294.197694][T11326] netlink: 'syz.3.2313': attribute type 1 has an invalid length.
[  294.200802][T11326] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2313'.
[  294.348670][T11334] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2317'.
[  294.585075][T11342] netlink: 'syz.1.2321': attribute type 1 has an invalid length.
[  295.386300][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'.
[  295.486516][T11392] Dead loop on virtual device ip6_vti0, fix it urgently!
[  295.604002][T11396] netlink: 'syz.0.2347': attribute type 33 has an invalid length.
[  295.607656][T11396] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2347'.
[  295.690066][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2349'.
[  295.708566][T11401] netlink: 'syz.3.2348': attribute type 10 has an invalid length.
[  295.711390][T11401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2348'.
[  295.721744][T11401] batadv0: entered promiscuous mode
[  295.723800][T11401] batadv0: entered allmulticast mode
[  295.730783][T11401] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  296.226743][T11414] netlink: 'syz.1.2356': attribute type 39 has an invalid length.
[  296.340025][ T5873] Bluetooth: hci1: ISO packet too small
[  297.416586][T11431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  297.419075][T11431] IPv6: NLM_F_CREATE should be set when creating new route
[  297.421660][T11431] IPv6: NLM_F_CREATE should be set when creating new route
[  297.424076][T11431] IPv6: NLM_F_CREATE should be set when creating new route
[  298.004369][T11453] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2372'.
[  298.213280][ T5873] Bluetooth: hci0: Malformed LE Event: 0x0d
[  298.672030][T11474] netlink: 'syz.0.2381': attribute type 1 has an invalid length.
[  298.677674][T11474] netlink: 'syz.0.2381': attribute type 2 has an invalid length.
[  298.681706][T11474] netlink: 12374 bytes leftover after parsing attributes in process `syz.0.2381'.
[  301.411643][T11484] netlink: 'syz.0.2385': attribute type 21 has an invalid length.
[  301.701660][T11500] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2394'.
[  302.283502][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'.
[  302.445434][T11527] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2405'.
[  302.506930][T11529] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  302.665426][T11531] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2407'.
[  302.733090][T11535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2409'.
[  302.745140][T11535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2409'.
[  302.750197][T11535] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2409'.
[  303.027387][T11545] can: request_module (can-proto-0) failed.
[  303.900852][T11569] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2423'.
[  303.964693][T11576] netlink: 'syz.3.2426': attribute type 4 has an invalid length.
[  303.976018][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'.
[  303.987375][T11574] netlink: 'syz.0.2424': attribute type 29 has an invalid length.
[  304.002841][T11574] netlink: 'syz.0.2424': attribute type 29 has an invalid length.
[  304.063894][T11574] syzkaller0: entered promiscuous mode
[  304.066999][T11574] syzkaller0: entered allmulticast mode
[  304.071061][T11579] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2427'.
[  305.493717][T11584] netlink: 'syz.1.2429': attribute type 2 has an invalid length.
[  305.496158][T11584] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  305.502448][T11588] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  305.505823][T11594] lo: entered allmulticast mode
[  305.512995][T11596] lo: entered promiscuous mode
[  305.517377][T11596] lo: left allmulticast mode
[  306.074892][T11633] delete_channel: no stack
[  306.076555][T11633] delete_channel: no stack
[  307.482047][T11700] netlink: 'syz.0.2478': attribute type 4 has an invalid length.
[  307.563071][T11706] __nla_validate_parse: 4 callbacks suppressed
[  307.563095][T11706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2481'.
[  307.573254][T11706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2481'.
[  307.579004][T11706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2481'.
[  307.650675][T11712] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2484'.
[  307.783751][T11725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2488'.
[  308.456012][T11742] netlink: 'syz.3.2498': attribute type 21 has an invalid length.
[  308.460224][T11742] netlink: 'syz.3.2498': attribute type 10 has an invalid length.
[  308.463541][T11742] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2498'.
[  309.936661][T11748] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2500'.
[  310.903492][T11754] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2502'.
[  310.976633][T11760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2505'.
[  310.985357][T11760] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2505'.
[  311.318430][T11780] netlink: 'syz.3.2514': attribute type 21 has an invalid length.
[  312.264998][T11805] delete_channel: no stack
[  312.325532][ T5873] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  312.862265][T11841] netlink: 'syz.1.2540': attribute type 25 has an invalid length.
[  312.869994][T11841] __nla_validate_parse: 2 callbacks suppressed
[  312.870012][T11841] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2540'.
[  313.414869][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'.
[  313.789994][T11883] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2560'.
[  315.019956][T11892] netlink: 'syz.1.2564': attribute type 21 has an invalid length.
[  315.114493][T11896] netlink: 'syz.1.2566': attribute type 21 has an invalid length.
[  315.119825][T11896] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2566'.
[  315.382251][T11900] syzkaller0: entered promiscuous mode
[  315.384655][T11900] syzkaller0: entered allmulticast mode
[  315.596315][T11918] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2576'.
[  316.036380][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'.
[  316.043808][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2582'.
[  316.733194][T11942] syzkaller0: tun_chr_ioctl cmd 1074025677
[  316.735799][T11942] syzkaller0: Linktype set failed because interface is up
[  316.740536][ T6220] syzkaller0: tun_net_xmit 76
[  316.743672][ T6220] syzkaller0: tun_net_xmit 48
[  316.777229][   T47] syzkaller0: tun_net_xmit 76
[  316.822749][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.825470][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  318.846723][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'.
[  320.241850][T12039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2628'.
[  322.780604][T12116] mac80211_hwsim hwsim7 .3c: renamed from wlan1
[  323.315177][T12141] blkio.reset_stats is deprecated
[  323.383577][T12147] netlink: 'syz.0.2679': attribute type 21 has an invalid length.
[  323.386269][T12147] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2679'.
[  323.418968][T12148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2678'.
[  323.423026][T12145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2678'.
[  323.761522][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'.
[  323.766547][T12159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2684'.
[  324.716346][T12180] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2694'.
[  324.854494][T12188] netlink: 'syz.0.2698': attribute type 2 has an invalid length.
[  324.857168][T12188] netlink: 110008 bytes leftover after parsing attributes in process `syz.0.2698'.
[  325.091136][T12206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2707'.
[  325.097853][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'.
[  325.107303][T12206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2707'.
[  325.268773][T12217] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2712'.
[  325.279968][T12218] : renamed from gre0 (while UP)
[  325.406617][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'.
[  325.417256][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'.
[  325.420090][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2714'.
[  325.666908][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'.
[  325.672463][ T5873] Bluetooth: hci0: Unable to find connection for big 0x00
[  326.475335][T12267] netlink: 'syz.0.2732': attribute type 4 has an invalid length.
[  326.673478][T12277] syzkaller0: entered promiscuous mode
[  326.675225][T12277] syzkaller0: entered allmulticast mode
[  326.934069][T12295] netlink: 'syz.0.2746': attribute type 1 has an invalid length.
[  327.255513][T12326] netlink: 'syz.1.2755': attribute type 2 has an invalid length.
[  328.073322][T12335] netlink: 'syz.1.2764': attribute type 1 has an invalid length.
[  328.075784][T12335] netlink: 'syz.1.2764': attribute type 1 has an invalid length.
[  328.883784][T12366] netlink: 'syz.3.2778': attribute type 21 has an invalid length.
[  328.887509][T12366] netlink: 'syz.3.2778': attribute type 15 has an invalid length.
[  328.890891][T12366] IPv6: NLM_F_CREATE should be specified when creating new route
[  328.894095][T12366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.896684][T12366] IPv6: NLM_F_CREATE should be set when creating new route
[  328.899012][T12366] IPv6: NLM_F_CREATE should be set when creating new route
[  328.901292][T12366] IPv6: NLM_F_CREATE should be set when creating new route
[  329.073989][T12373] macvtap0: refused to change device tx_queue_len
[  330.463279][T12406] netlink: 'syz.0.2794': attribute type 5 has an invalid length.
[  330.503462][ T5873] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6
[  330.559295][T12413] __nla_validate_parse: 10 callbacks suppressed
[  330.559313][T12413] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2797'.
[  330.628942][T12420] netlink: 'syz.1.2801': attribute type 29 has an invalid length.
[  330.633326][T12420] netlink: 'syz.1.2801': attribute type 29 has an invalid length.
[  330.643433][T12420] netlink: 'syz.1.2801': attribute type 29 has an invalid length.
[  330.654171][T12420] netlink: 'syz.1.2801': attribute type 29 has an invalid length.
[  330.890512][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'.
[  331.202676][T12464] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2820'.
[  331.452497][T12472] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  331.455981][T12472] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  331.490175][T12476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2826'.
[  331.493416][T12477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2823'.
[  331.495836][T12476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2826'.
[  332.077042][T12501] netlink: 'syz.3.2836': attribute type 21 has an invalid length.
[  332.080598][T12501] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2836'.
[  332.085029][T12501] netlink: 'syz.3.2836': attribute type 4 has an invalid length.
[  332.097174][T12501] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2836'.
[  332.613306][T12532] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2850'.
[  333.559632][T12572] delete_channel: no stack
[  333.561745][T12572] delete_channel: no stack
[  333.674319][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'.
[  335.188151][T12612] netlink: 'syz.0.2886': attribute type 33 has an invalid length.
[  335.191733][T12612] netlink: 'syz.0.2886': attribute type 3 has an invalid length.
[  335.498059][T12631] netlink: 'syz.1.2895': attribute type 1 has an invalid length.
[  335.852235][T12643] __nla_validate_parse: 4 callbacks suppressed
[  335.852251][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'.
[  335.869901][T12644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2900'.
[  335.927435][T12646] pim6reg1: entered allmulticast mode
[  335.932929][T12646] pim6reg1: left allmulticast mode
[  336.029587][T12653] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2904'.
[  336.485281][T12678] netlink: 'syz.3.2917': attribute type 5 has an invalid length.
[  338.527446][ T5873] Bluetooth: hci3: unexpected event for opcode 0x0000
[  339.416957][T12757] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2954'.
[  339.474949][T12763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2957'.
[  339.482187][T12763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.536295][T12767] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2958'.
[  339.545053][T12767] netlink: zone id is out of range
[  339.573126][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'.
[  339.589914][T12767] netlink: zone id is out of range
[  339.593619][T12767] netlink: zone id is out of range
[  339.596971][T12767] netlink: zone id is out of range
[  339.601489][T12767] netlink: zone id is out of range
[  339.604495][T12767] netlink: zone id is out of range
[  339.612505][T12771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2961'.
[  339.664280][T12767] netlink: zone id is out of range
[  339.667831][T12767] netlink: zone id is out of range
[  339.670888][T12767] netlink: zone id is out of range
[  340.023609][T12795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2972'.
[  340.404989][T12820] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2984'.
[  342.579152][ T5873] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  342.582518][ T5873] Bluetooth: hci3: Injecting HCI hardware error event
[  342.587338][ T5236] Bluetooth: hci3: hardware error 0x00
[  343.778741][T12838] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2990'.
[  343.781557][T12838] netlink: 6264 bytes leftover after parsing attributes in process `syz.1.2990'.
[  343.784921][T12838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2990'.
[  343.868648][T12848] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2994'.
[  344.000131][T12850] netlink: 'syz.0.2995': attribute type 3 has an invalid length.
[  344.003190][T12850] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2995'.
[  344.143533][T12859] netlink: 'syz.3.2999': attribute type 2 has an invalid length.
[  344.306967][T12872] netlink: 'syz.1.3005': attribute type 64 has an invalid length.
[  344.605076][T12885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3012'.
[  345.020799][T12911] netlink: 'syz.1.3024': attribute type 4 has an invalid length.
[  345.180870][T12919] netlink: 'syz.1.3029': attribute type 10 has an invalid length.
[  345.617172][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  346.565657][T12952] net_ratelimit: 76 callbacks suppressed
[  346.565707][T12952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  346.590010][T12952] syz.0.3044 (12952) used greatest stack depth: 18688 bytes left
[  347.481436][T13011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3073'.
[  347.575606][T13015] netlink: 'syz.3.3072': attribute type 10 has an invalid length.
[  347.593033][T13015] bond0: (slave wlan1): Opening slave failed
[  347.770219][T13025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3079'.
[  347.775831][T13025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3079'.
[  347.784339][T13025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3079'.
[  348.516812][T13058] sock: sock_timestamping_bind_phc: sock not bind to device
[  348.564295][ T5236] Bluetooth: hci0: unknown advertising packet type: 0xc5
[  349.134671][T13102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.351870][T13113] __nla_validate_parse: 8 callbacks suppressed
[  349.351887][T13113] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3121'.
[  349.990745][T13123] netlink: 'syz.1.3125': attribute type 29 has an invalid length.
[  350.109468][T13131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3130'.
[  350.182395][T13141] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3133'.
[  350.185656][T13140] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3134'.
[  350.340915][T13155] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3142'.
[  350.420775][T13159] netlink: 'syz.3.3144': attribute type 1 has an invalid length.
[  350.424003][T13159] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3144'.
[  350.549423][T13163] netlink: 'syz.0.3146': attribute type 21 has an invalid length.
[  350.552920][T13163] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3146'.
[  353.489304][T13179] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3152'.
[  353.739773][T13189] netlink: 'syz.0.3155': attribute type 27 has an invalid length.
[  353.871932][T13199] netlink: 'syz.3.3160': attribute type 1 has an invalid length.
[  353.966161][T13207] netlink: 'syz.0.3163': attribute type 39 has an invalid length.
[  354.101837][T13211] sock: sock_timestamping_bind_phc: sock not bind to device
[  354.216588][T13215] netlink: 948 bytes leftover after parsing attributes in process `syz.3.3166'.
[  354.608727][T13235] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.3175'.
[  354.855022][T13242] netlink: 'syz.1.3178': attribute type 27 has an invalid length.
[  354.860090][T13242] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3178'.
[  355.060805][T13246] netlink: 'syz.1.3179': attribute type 10 has an invalid length.
[  355.922516][T13240] !: renamed from dummy0 (while UP)
[  356.243852][ T5236] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  356.247859][ T5236] Bluetooth: hci0: unexpected event for opcode 0x1004
[  357.671337][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3215'.
[  357.866486][T13336] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3219'.
[  358.072686][T13342] netlink: 'syz.0.3222': attribute type 1 has an invalid length.
[  358.076087][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3222'.
[  358.141566][T13346] netlink: 'syz.0.3224': attribute type 21 has an invalid length.
[  358.144737][T13346] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3224'.
[  359.293153][T13387] netlink: 'syz.3.3238': attribute type 6 has an invalid length.
[  359.296326][T13387] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3238'.
[  359.448405][T13364] delete_channel: no stack
[  360.130853][T13419] netlink: 'syz.3.3251': attribute type 11 has an invalid length.
[  360.134004][T13419] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3251'.
[  360.157444][T13422] netlink: 'syz.1.3252': attribute type 29 has an invalid length.
[  360.167840][T13422] netlink: 'syz.1.3252': attribute type 29 has an invalid length.
[  360.259530][ T5236] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  360.264435][ T5236] Bluetooth: hci0: Injecting HCI hardware error event
[  360.268063][ T5236] Bluetooth: hci0: hardware error 0x00
[  360.992517][T13442] netlink: 'syz.1.3259': attribute type 3 has an invalid length.
[  360.995526][T13442] netlink: 'syz.1.3259': attribute type 1 has an invalid length.
[  361.012082][T13442] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3259'.
[  361.179027][T13452] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3265'.
[  361.588359][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  361.600747][T13482] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3277'.
[  361.908377][T13497] syzkaller0: left promiscuous mode
[  361.910696][T13497] syzkaller0: left allmulticast mode
[  362.082862][T13501] netlink: 'syz.1.3286': attribute type 10 has an invalid length.
[  362.199731][T13505] netlink: 'syz.1.3288': attribute type 2 has an invalid length.
[  362.203114][T13505] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3288'.
[  362.222606][T13505] netlink: 'syz.1.3288': attribute type 2 has an invalid length.
[  362.235238][T13505] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3288'.
[  362.427033][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  362.465261][T13513] netlink: 'syz.1.3291': attribute type 21 has an invalid length.
[  362.474785][T13513] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3291'.
[  364.115240][T13567] netlink: 'syz.3.3314': attribute type 39 has an invalid length.
[  364.168032][T13572] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3317'.
[  364.210305][T13575] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3318'.
[  365.796509][T13652] validate_nla: 3 callbacks suppressed
[  365.796527][T13652] netlink: 'syz.3.3355': attribute type 13 has an invalid length.
[  365.798154][T13651] netlink: 'syz.0.3354': attribute type 21 has an invalid length.
[  365.801505][T13652] netlink: 'syz.3.3355': attribute type 58 has an invalid length.
[  365.811310][T13652] __nla_validate_parse: 3 callbacks suppressed
[  365.811327][T13652] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3355'.
[  366.122323][T13672] netlink: 'syz.3.3365': attribute type 2 has an invalid length.
[  366.125337][T13672] netlink: 'syz.3.3365': attribute type 1 has an invalid length.
[  366.520522][T13689] netlink: 'syz.3.3373': attribute type 11 has an invalid length.
[  366.523349][T13689] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3373'.
[  366.534341][T13689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.632426][T13696] netlink: 'syz.1.3377': attribute type 1 has an invalid length.
[  366.699415][T13701] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  366.780557][T13707] dvmrp1: tun_chr_ioctl cmd 35108
[  366.988414][T13721] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.992372][T13721] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  367.360065][T13747] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3400'.
[  367.400992][T13751] netlink: 'syz.3.3402': attribute type 21 has an invalid length.
[  367.475670][T13755] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3404'.
[  367.572038][T13761] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3407'.
[  367.818403][T13779] netlink: 'syz.3.3416': attribute type 10 has an invalid length.
[  367.821020][T13779] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3416'.
[  368.113013][T13801] netlink: 'syz.1.3428': attribute type 2 has an invalid length.
[  368.121200][T13801] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.3428'.
[  368.306301][T13817] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.3433'.
[  368.359750][T13823] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3436'.
[  368.436122][T13827] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.3439'.
[  368.630134][T13842] netlink: 'syz.0.3445': attribute type 7 has an invalid length.
[  369.441858][ T5236] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[  369.465833][T13874] netlink: 'syz.3.3459': attribute type 11 has an invalid length.
[  369.534827][T13879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.911804][T13895] tc_dump_action: action bad kind
[  371.385889][T13948] validate_nla: 1 callbacks suppressed
[  371.385909][T13948] netlink: 'syz.3.3491': attribute type 7 has an invalid length.
[  371.438468][T13949] __nla_validate_parse: 5 callbacks suppressed
[  371.438489][T13949] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3490'.
[  371.460142][T13947] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3490'.
[  371.465467][T13947] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3490'.
[  371.891626][T13975] netlink: 'syz.3.3500': attribute type 10 has an invalid length.
[  371.894110][T13975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3500'.
[  371.900794][T13977] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3501'.
[  371.987600][T13985] netlink: 'syz.0.3505': attribute type 46 has an invalid length.
[  372.048541][T13987] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3506'.
[  372.144154][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3513'.
[  372.304049][T14018] tap0: tun_chr_ioctl cmd 1074025677
[  372.305906][T14018] tap0: linktype set to 768
[  372.691417][T14047] netlink: 'syz.1.3536': attribute type 2 has an invalid length.
[  372.694991][T14047] netlink: 'syz.1.3536': attribute type 1 has an invalid length.
[  372.698726][T14047] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3536'.
[  372.703196][T14047] block nbd5: not configured, cannot reconfigure
[  372.769714][T14057] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3541'.
[  372.833604][T14067] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3547'.
[  375.683763][T14151] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32
[  375.781811][T14159] sctp: [Deprecated]: syz.3.3584 (pid 14159) Use of struct sctp_assoc_value in delayed_ack socket option.
[  375.781811][T14159] Use struct sctp_sack_info instead
[  376.211457][T14171] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  376.757606][T14204] netlink: 'syz.3.3604': attribute type 7 has an invalid length.
[  377.134936][T14237] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  377.354718][T14265] netlink: 'syz.3.3633': attribute type 29 has an invalid length.
[  377.367253][T14265] netlink: 'syz.3.3633': attribute type 3 has an invalid length.
[  377.370516][T14265] __nla_validate_parse: 8 callbacks suppressed
[  377.370532][T14265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3633'.
[  377.453536][T14273] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3637'.
[  377.456474][T14273] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3637'.
[  377.613928][T14288] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3644'.
[  377.711089][T14292] wg2: entered promiscuous mode
[  377.715481][T14292] wg2: entered allmulticast mode
[  378.276613][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  378.279622][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  379.321507][ T6220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.449492][ T6220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.632298][ T6220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.730267][ T6220] bond0: (slave ): Releasing backup interface
[  379.733379][ T6220] netdevsim netdevsim3  (unregistering): left promiscuous mode
[  379.747814][ T6220] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.975551][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  379.982478][T14328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  379.983398][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  379.988790][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  379.991821][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  379.991846][T14328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  379.998194][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.001664][T14328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.002033][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.010300][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.160925][ T6220] geneve1 (unregistering): left promiscuous mode
[  380.165371][ T6220] team0: Port device geneve1 removed
[  380.243279][ T6220] bond0 (unregistering): left promiscuous mode
[  380.245303][ T6220] bond_slave_0: left promiscuous mode
[  380.247725][ T6220] bond_slave_1: left promiscuous mode
[  380.250331][ T6220] team0: Port device bond0 removed
[  380.253468][ T6220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.263921][ T6220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.268834][ T6220] bond0 (unregistering): Released all slaves
[  380.296225][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.300865][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.303588][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.307702][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.310830][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.639137][T14324] chnl_net:caif_netlink_parms(): no params data found
[  380.650203][T14325] chnl_net:caif_netlink_parms(): no params data found
[  380.786304][T14330] chnl_net:caif_netlink_parms(): no params data found
[  380.811895][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.814328][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.818566][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.820840][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.833139][ T6220] veth1_macvtap: left promiscuous mode
[  381.089262][ T6220] team_slave_1 (unregistering): left promiscuous mode
[  381.092959][ T6220] team0 (unregistering): Port device team_slave_1 removed
[  381.132773][ T6220] C (unregistering): left promiscuous mode
[  381.135353][ T6220] team0 (unregistering): Port device C removed
[  381.576825][T14324] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.580345][T14324] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.582754][T14324] bridge_slave_0: entered allmulticast mode
[  381.585628][T14324] bridge_slave_0: entered promiscuous mode
[  381.602226][T14325] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.605226][T14325] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.608848][T14325] bridge_slave_0: entered allmulticast mode
[  381.612933][T14325] bridge_slave_0: entered promiscuous mode
[  381.648198][T14324] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.650548][T14324] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.652829][T14324] bridge_slave_1: entered allmulticast mode
[  381.655723][T14324] bridge_slave_1: entered promiscuous mode
[  381.671446][T14325] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.673926][T14325] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.676748][T14325] bridge_slave_1: entered allmulticast mode
[  381.683419][T14325] bridge_slave_1: entered promiscuous mode
[  381.764696][T14324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.770117][T14324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.774842][T14325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.836410][T14325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.859800][T14324] team0: Port device team_slave_0 added
[  381.871038][T14330] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.873415][T14330] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.875726][T14330] bridge_slave_0: entered allmulticast mode
[  381.882152][T14330] bridge_slave_0: entered promiscuous mode
[  381.886267][T14324] team0: Port device team_slave_1 added
[  381.900111][T14325] team0: Port device team_slave_0 added
[  381.903060][T14330] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.906558][T14330] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.910344][T14330] bridge_slave_1: entered allmulticast mode
[  381.913299][T14330] bridge_slave_1: entered promiscuous mode
[  381.926846][T14325] team0: Port device team_slave_1 added
[  381.971961][T14324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  381.974115][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.982977][T14324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  381.988337][T14324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.990997][T14324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.001668][T14324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.011009][T14330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.014555][T14325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.017381][ T5236] Bluetooth: hci1: command tx timeout
[  382.019691][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.028160][T14325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.041918][T14330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.045498][T14325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.048171][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.057031][T14325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.064096][ T6220] ------------[ cut here ]------------
[  382.066618][ T6220] WARNING: CPU: 1 PID: 6220 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  382.071058][ T6220] Modules linked in:
[  382.072907][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  382.079282][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.082371][ T6220] Workqueue: netns cleanup_net
[  382.083891][ T6220] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  382.085670][ T6220] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 58 f3 02 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 b8 e3 f7 e8 e1 9f 9f f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d3 9f 9f f7 90 0f 0b 90 e9 60 fe ff ff
[  382.092438][ T6220] RSP: 0018:ffffc9000334f898 EFLAGS: 00010293
[  382.094900][ T6220] RAX: ffffffff8a1fff0f RBX: ffff888037ffa440 RCX: ffff888021051cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  382.098110][ T6220] RDX: 0000000000000000 RSI: ffffffff8dba01ee RDI: ffff888021051cc0
[  382.101819][ T6220] RBP: ffffc9000334f9b0 R08: ffffffff8fa32437 R09: 1ffffffff1f46486
[  382.104998][ T6220] R10: dffffc0000000000 R11: fffffbfff1f46487 R12: ffffffff8f62b420
[  382.108182][ T6220] R13: 1ffff92000669f40 R14: ffff888037ffb8c0 R15: dffffc0000000000
[  382.111244][ T6220] FS:  0000000000000000(0000) GS:ffff8881a3c2a000(0000) knlGS:0000000000000000
[  382.114702][ T6220] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  382.117367][ T5236] Bluetooth: hci0: command tx timeout
[  382.119500][ T6220] CR2: 00007f19f6ae7d60 CR3: 000000011d57c000 CR4: 00000000000006f0
[  382.122672][ T6220] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300
[  382.125826][ T6220] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  382.129171][ T6220] Call Trace:
[  382.130536][ T6220]  <TASK>
[  382.131743][ T6220]  xfrm_net_exit+0x2d/0x70
[  382.133697][ T6220]  ops_undo_list+0x49a/0x990
[  382.135622][ T6220]  ? __pfx_ops_undo_list+0x10/0x10
[  382.137713][ T6220]  ? do_raw_spin_unlock+0x4d/0x240
[  382.140107][ T6220]  cleanup_net+0x4c5/0x800
[  382.141945][ T6220]  ? __pfx_cleanup_net+0x10/0x10
[  382.143953][ T6220]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.146053][ T6220]  ? process_scheduled_works+0x9ef/0x17b0
[  382.148461][ T6220]  ? process_scheduled_works+0x9ef/0x17b0
[  382.150771][ T6220]  process_scheduled_works+0xae1/0x17b0
[  382.153047][ T6220]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.155477][ T6220]  worker_thread+0x8a0/0xda0
[  382.157428][ T6220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  382.160006][ T6220]  ? __kthread_parkme+0x7b/0x200
[  382.161988][ T6220]  kthread+0x711/0x8a0
[  382.163611][ T6220]  ? __pfx_worker_thread+0x10/0x10
[  382.165672][ T6220]  ? __pfx_kthread+0x10/0x10
[  382.167683][ T6220]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.169783][ T6220]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.171849][ T6220]  ? __pfx_kthread+0x10/0x10
[  382.173702][ T6220]  ret_from_fork+0x3fc/0x770
[  382.175542][ T6220]  ? __pfx_ret_from_fork+0x10/0x10
[  382.177976][ T6220]  ? __switch_to_asm+0x39/0x70
[  382.180242][ T6220]  ? __switch_to_asm+0x33/0x70
[  382.182151][ T6220]  ? __pfx_kthread+0x10/0x10
[  382.183956][ T6220]  ret_from_fork_asm+0x1a/0x30
[  382.185839][ T6220]  </TASK>
[  382.187223][ T6220] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  382.190118][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11113-gf3af62b6cee8-dirty #0 PREEMPT(full) 
[  382.194874][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.198747][ T6220] Workqueue: netns cleanup_net
[  382.200580][ T6220] Call Trace:
[  382.201863][ T6220]  <TASK>
[  382.203028][ T6220]  dump_stack_lvl+0x99/0x250
[  382.204810][ T6220]  ? __asan_memcpy+0x40/0x70
[  382.206646][ T6220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.208634][ T6220]  ? __pfx__printk+0x10/0x10
[  382.210421][ T6220]  vpanic+0x27a/0x730
[  382.211950][ T6220]  ? __pfx__printk+0x10/0x10
[  382.213719][ T6220]  ? __pfx_vpanic+0x10/0x10
[  382.215488][ T6220]  ? is_bpf_text_address+0x292/0x2b0
[  382.217582][ T6220]  panic+0xb9/0xc0
[  382.219028][ T6220]  ? __pfx_panic+0x10/0x10
[  382.220817][ T6220]  __warn+0x31b/0x4b0
[  382.222454][ T6220]  ? xfrm_state_fini+0x270/0x2f0
[  382.224445][ T6220]  ? xfrm_state_fini+0x270/0x2f0
[  382.226389][ T6220]  report_bug+0x2be/0x4f0
[  382.228111][ T6220]  ? xfrm_state_fini+0x270/0x2f0
[  382.230052][ T6220]  ? xfrm_state_fini+0x270/0x2f0
[  382.232049][ T6220]  ? xfrm_state_fini+0x272/0x2f0
[  382.234046][ T6220]  handle_bug+0x84/0x160
[  382.235761][ T6220]  exc_invalid_op+0x1a/0x50
[  382.237611][ T6220]  asm_exc_invalid_op+0x1a/0x20
[  382.239583][ T6220] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  382.241805][ T6220] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 58 f3 02 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 b8 e3 f7 e8 e1 9f 9f f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d3 9f 9f f7 90 0f 0b 90 e9 60 fe ff ff
[  382.249414][ T6220] RSP: 0018:ffffc9000334f898 EFLAGS: 00010293
[  382.251850][ T6220] RAX: ffffffff8a1fff0f RBX: ffff888037ffa440 RCX: ffff888021051cc0
[  382.255047][ T6220] RDX: 0000000000000000 RSI: ffffffff8dba01ee RDI: ffff888021051cc0
[  382.258113][ T6220] RBP: ffffc9000334f9b0 R08: ffffffff8fa32437 R09: 1ffffffff1f46486
[  382.261273][ T6220] R10: dffffc0000000000 R11: fffffbfff1f46487 R12: ffffffff8f62b420
[  382.264432][ T6220] R13: 1ffff92000669f40 R14: ffff888037ffb8c0 R15: dffffc0000000000
[  382.267610][ T6220]  ? xfrm_state_fini+0x26f/0x2f0
[  382.269648][ T6220]  ? xfrm_state_fini+0x26f/0x2f0
[  382.271704][ T6220]  xfrm_net_exit+0x2d/0x70
[  382.273374][ T6220]  ops_undo_list+0x49a/0x990
[  382.275074][ T6220]  ? __pfx_ops_undo_list+0x10/0x10
[  382.276942][ T6220]  ? do_raw_spin_unlock+0x4d/0x240
[  382.278734][ T6220]  cleanup_net+0x4c5/0x800
[  382.280373][ T6220]  ? __pfx_cleanup_net+0x10/0x10
[  382.282171][ T6220]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.284084][ T6220]  ? process_scheduled_works+0x9ef/0x17b0
[  382.286160][ T6220]  ? process_scheduled_works+0x9ef/0x17b0
[  382.288257][ T6220]  process_scheduled_works+0xae1/0x17b0
[  382.290311][ T6220]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.292505][ T6220]  worker_thread+0x8a0/0xda0
[  382.294224][ T6220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  382.296493][ T6220]  ? __kthread_parkme+0x7b/0x200
[  382.298302][ T6220]  kthread+0x711/0x8a0
[  382.299791][ T6220]  ? __pfx_worker_thread+0x10/0x10
[  382.301644][ T6220]  ? __pfx_kthread+0x10/0x10
[  382.303334][ T6220]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.305226][ T6220]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.307124][ T6220]  ? __pfx_kthread+0x10/0x10
[  382.308787][ T6220]  ret_from_fork+0x3fc/0x770
[  382.310476][ T6220]  ? __pfx_ret_from_fork+0x10/0x10
[  382.312321][ T6220]  ? __switch_to_asm+0x39/0x70
[  382.314056][ T6220]  ? __switch_to_asm+0x33/0x70
[  382.315780][ T6220]  ? __pfx_kthread+0x10/0x10
[  382.317490][ T6220]  ret_from_fork_asm+0x1a/0x30
[  382.319256][ T6220]  </TASK>
[  382.321046][ T6220] Kernel Offset: disabled
[  382.322367][ T6220] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:59:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000003 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888020e70000 RBP=0000000000000007 RSP=ffffc90003cbe4c8
R8 =0000000000000000 R9 =ffffffff8172c025 R10=ffffc90003cbe718 R11=ffffffff81ac34b0
R12=0000000000020000 R13=0000000000000000 R14=ffff888020e70b40 R15=ffff888020e70af0
RIP=ffffffff819d600c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f581500 ffffffff 00c00000
GS =0000 ffff8880b862a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcf326e7d60 CR3=0000000024a7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 ff00000000000000 XMM03=0000000000000000 000000000000ff00
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000334f030
R8 =ffff888106d78237 R9 =1ffff11020daf046 R10=dffffc0000000000 R11=ffffffff854d32b0
R12=dffffc0000000000 R13=ffffffff99aeb911 R14=ffffffff99df0440 R15=0000000000000000
RIP=ffffffff854d332c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c2a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f19f6ae7d60 CR3=000000011d57c000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00ff0000000000 0000000000000000 XMM05=0000000000000000 00007fcf31a12e53
XMM06=0000000000000000 00007fcf31a12e4d XMM07=0000000000000000 00007fcf31a12e61
XMM08=0000000000000000 00007fcf31a12ee7 XMM09=0000000000000000 00007fcf31a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
