last executing test programs:

1m4.789039941s ago: executing program 0 (id=2075):
r0 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x20011, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x14, 0x7, 0xa, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0xc104)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @u32=0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m3.989209105s ago: executing program 1 (id=2097):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000c00)=""/213, 0xd5}, {&(0x7f0000003100)=""/4073, 0xfe9}, {&(0x7f00000007c0)=""/204, 0xcc}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xc}, 0x40010102)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

1m3.899819748s ago: executing program 1 (id=2099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x60, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x39, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x35}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}}, 0x0)

1m3.874291323s ago: executing program 0 (id=2100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0)

1m3.805590006s ago: executing program 1 (id=2101):
r0 = socket(0x10, 0x80002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)

1m3.804900649s ago: executing program 0 (id=2103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m3.725340944s ago: executing program 1 (id=2105):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102}, @in=@multicast2, {@in6=@private2, @in6=@local, 0x0, 0x40}, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb1}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa3}}]}, 0x134}}, 0x0)

1m3.725058775s ago: executing program 0 (id=2106):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd706806dbdf25080043"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040)

1m3.639969553s ago: executing program 0 (id=2107):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @extra_flags={0x8, 0x18, 0xe}]}, 0x10c}}, 0x0)

1m3.639622889s ago: executing program 1 (id=2108):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
sendmsg$kcm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86ddfd356fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9c777b801f21fc42abd02c158f01a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m3.358919413s ago: executing program 0 (id=2109):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000180001"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m3.250880458s ago: executing program 32 (id=2109):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000180001"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m1.987022975s ago: executing program 1 (id=2116):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

1m1.832169675s ago: executing program 33 (id=2116):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

6.582780723s ago: executing program 3 (id=2851):
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080))

6.504535149s ago: executing program 3 (id=2852):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000180), 0x12)

6.444254696s ago: executing program 3 (id=2854):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x6e96dab972a62943, 0x1, 0x0, 0x3, 0x5, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0xf3, 0x7, 0x1, 0x4, 0x0, 0x1, 0x8100, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x2100, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0xb8, 0x7, 0x0, 0x4, 0x0, 0x1000}, 0xffffffffffffffff, 0x10, r0, 0xc)
r2 = socket$kcm(0x2, 0x1, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x28, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x0, 0x80, 0x3, 0x5, 0x3, 0xfe, 0x0, 0x2, 0xaa0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x100000, 0x5, 0x6, 0x1, 0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x8922})
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)

6.236430438s ago: executing program 4 (id=2857):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0xfb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x1e, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%ps    \x00'}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x300000, '\x00', 0x0, r4, 0x4, 0x3, 0x4}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x18, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)

6.064544759s ago: executing program 4 (id=2860):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$TUNGETDEVNETNS(r0, 0x8982, 0x20000700)

6.063914162s ago: executing program 4 (id=2862):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x22, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0xf3ff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100002, 0x0, 0x8, 0x8}, 0x256}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

6.017575493s ago: executing program 3 (id=2864):
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0)

5.953112832s ago: executing program 4 (id=2866):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x2400, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x24}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x10)

5.943791326s ago: executing program 4 (id=2867):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000002000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x20044885)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='bcache_invalidate\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001014010025bd7000fcdbdf2508000100edffffff0700030003"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20004090)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff6c, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

5.854521486s ago: executing program 3 (id=2868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000240)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x2663}, 0x40400c0)

5.633801793s ago: executing program 4 (id=2869):
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x11, &(0x7f0000000000)=r0, 0x4)

5.517953031s ago: executing program 34 (id=2869):
perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x11, &(0x7f0000000000)=r0, 0x4)

5.484201151s ago: executing program 3 (id=2871):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001780)="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", 0xec1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

5.45458216s ago: executing program 35 (id=2871):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001780)="ad4b1eb9686af6923535342e6fb07576d469a39f5b2134d34e8a822309d4ae922f827b243407c374e1d480bd5017873984c2172bb3290b40cf2f8e030bac492af12cd18bb3ddde6bb99f40ad572aeaf5dfb6ee222b5123d71ec49353b044687d177a6001a0cd62aeff5a95d5b2bcbf930803484124dd311889b6d409ed93c75399d601ff26f157c528324a9626ad46b7a3a2c3257743706cc318ce02cd0ec56418598e194becc5233233560cb8a4159b6dbdc844d5c4d369307ed4416f1c98a5d256942242f1222e5633feae0b8b2780dc550a5d2f57c8337cf13dc472e19900481a9d2d47c2882fdebbb2235570db8d6a35a66afc692f77d8085fbf6163e4d9f5c6af04484c8318af9a8085f763706f3eed8fe7f87525e1d1d99f85bd5fddb8f1d75e1babf67c57143d173581e6599a96a259f920d53b43e0d83b76e7f761e8067c948ca5192664d0315ba41359d0c6b8f69b493113f537c5bc53c142bd5a1b7f0bbb079b74224f811a38dca9df2aeb1156293d58bcfcc5275c2ab283b3837ae3d5ceed4aa244479423d6bb52dcbea918a6b3b18903cc733e88f2af9b9ff6273444e1f72af169ad54e487a27cd91d0f4ad91594ecc6a41e78ab64b5380b72f61cac5b3833f0652b9eea83188a885005e04fba22adf616e21d702cb1fc6e899328ce9c13d125364b82af6fbbcda4a3ea5dc975d311d248945d8ef9bde25d28eb571a04f89b8215d28e37ba576c80b19a93628dc7d585f02f2a68e9827e896fc178e32ad56eb8e9bc5c2608427994c4587bda641fd419d9b9e7f74c077fa9d9838cfbaad6d97f99863b643a2838aaefa47e2c7fe1ee7a61842e8da5efdd81a77d12d6b003b427a52a6cfaebc272b8342e8523aa1629cf4871d9033e42b05871596e8d7b5e441c31de99a8197aca0aec083cfa00811755e314772226e2689b07afd6ea31668f686f86127f364ada8694d6dd22670d494dc88772e73837e6e456358aaadab5614f74a4790e801772f79f7bf965ed80156409efe173f371ac52dceadbe14fe11404bc3e156806525e42262c36ecf413574291fa6451b13cca9308bc43ebe3c1c0d6f57bc8b39bb162f8f895a81f5fdabc6feb465162792a73042684f12785d0b8f8b346632816f40da5094c1783405a2c36eb66ad9aea7a2412950d731907ace15d49b7749a1aa2775b3743b93366a74009f7718e9b249c8b1d84e46b2e31c82d7292101eae129c524df1e66aa2bda879da0977030c7fa9214f702506e33f550da5275caef139bf280af208fcc7869b347f5f11b7d51e00722cf3f384d187a59b3ebab346d3c73a3c3862bfa67134637a84a035436541790735a114e1992a02816b9c49a2abc3e21610cf688cb3e733725e149c00a4c104caf5718250c85237235aab9e12b82f454e6afcf4908e92d9e5e177fbc70718a2f2556a5a7117e41e04c0f0e6deebf32d16e8a25396587fcf8764f56e272d68d3bdd5ee1542045792cb229a8a30d57b04b2c40a06d3ac4a32c6cfdad1b690da12639639311bb396127f63826e161c55b81fc7fdf2d7e8ec187e2af2a6466e57fdff9f478e5ebe2c022a56dc85a949f2911d3db81847f8f6074d1da2bc7808319126c10f69c995772b616296659d0c4ff93de6a8ecff6a02136fe75e0f53fbf8b869018d7f04a79e601bcd069b76f2fd57ab61d0712003b2761ffcc2e941ecc2a4bbe3b574955675e88b1fae0c2f2e28b3313b6427378baf53d1cadc764de0ee743a886a3df507122c50a43cae441a1f8b0fb7feae7d5049698d076f23c1389b98e1551ad2dec1f5224155678a7afd51f229862b487dd8252d6ccc4862cd1722d9126d1d2cfd710ee11efc096f7ca844daca5d50e87a2f856df6d5117bfe244628568eaee5e8238d5f37830df039bde2385589c26f1d0fc7ee54115de6bfc759204b278440debaa9acef73a6ba59e11fbaf6f835f0adbd98e971159c2de82274669543c1a93fcdc9aeff016405e58ffc3e362f0d27ec09efa3624cc944008887730bd3f31b050716e471b89fd3a96e9d7014a04547b26a4fde69123e95369a8f887430463ca052cbdfe8b20ce198548814f2acc9201652ffeec29496b219afd84a02a1616a0a76e1bdf9f9268b6786a0177e2d9067057ba346acafb5f483621b91b802ab827f04f6e5a747bbb5f68873d7d04414c04412256fa6e28aaaefbb765928cb9b0ce1a7daa7990816ea0e91f939eae2d5aae0e5a5813f329809133dac0fd03cdfa0b1cc67a9c8a27324342d6a959353833e747afc7240ae7fd5f8515fd58dc0e43487012ecbae44f73bd2b3f57008ee7a1a995e893111e5e1cde7c2b5dd8fe50d77f40550640b0ba0cd026426262aa04a95558a008f7edad31b96bfa260d4706029db831b6e06e4bbdf615541a63b09c5cb03f21f950f635ee541016c9d105b2fa305df6d79354698e7df282bacc62c488e35965919fd8a6e85e9c9e5aed6011693b58d7e605159fa34bf68a81630aa8d61d50d8a50a458087a86603f09190bad940ea3dbbe13b24a2ce680b9c7f38874cb85317b16e16a31fca1b82d2ebb86b8aa17b9fbb08f55eebad9186ea8948df2d39791fbac71767f64cbfc0533c15520cab2f312f5257ce1dc2433c9bbc6ceea5df1fb36f5b037c5345dcfc54cebad2662006a9d3ec7a838f9d34a44895bb808610cac2e9b98f6a7c552f48d08dd251b788ba73fa82e1a545e762c9d7f3adfce87a77a7247391d869ef2498c7db5d88632b8e3e937138cca0dd878f8f8e997e07e39a272708064cb7ba7bb768dcdbf49a485ad9f0e08b51db8c761bb6295454bdc619dc8de8fd1738109538ec1f087d6885bfe45581b61905414e6071cdee428039ca431e1ad1b9efabd46dcb4e924c69368ecf1fc08432bb2e923d053a95e525fff5e8245d0524780c775092ef739c5151d511063c8ee4bc9502acc1fdb85a6cefd16a8be4425080869b1627149f5f7fc4a784ef5a59801e6eb6b13836152bc25455539bea4db70643f3fc481be71516a62e7e0de3d6bedbbbdd0a69690006e6a7525da4320525328b54aa36d54f7c5e909e753c8a4afe1b5564c2e78eab3d0fc5e30297fdbc624689b233b6ebc1a7f7f540f233aeaac42bbcb5ddf1fd03917faadb4562ae59261c25f384e86b8cdcb687f686d20b477a09d2e9d2b7e7b48dae2020fdfb0f4ea83057a7c3f4a48a2bd40e1b201d4e92f9f76e5307ab9623a1c2c125b8ec432ee7c2614b746dc8d3e0d0387b81338c668faff50feec17bdafefca858881005f67296db356c1e0afd801573f6cd7b78b693926a9f322cf5b3fc8faac766a0eed3774359236d9a221f1185c5c7c77f9183e59c77111c7931cd757cc09d4c9f34dae1287462b742c8f0ee6cbc821144d70ee0856e5f806b70a323dd79bddfec1486e678f74ebff621c49aa852470d569980f0c2c4024f237fa46ca5c7a0494c53e2313acb15b80f0cd0a7d82ef70254ffbbca3489b65de013ca778717a8a04d372b0e19f8a91a9cacdf79b17654af31ed21e8c340da3c1aa3fc02fd814ae0306175b3df392bca508a497c1668a41b70dcb4849f93117fc7a29162a64ba54f93bf270cd91c072ad3091e86dd50ffc93a150fdfb549f0daf30736dbd46a6f928939c91e3a2bac68bbad70653757825978ab67d1ff1ce6eb85625fab562f5074a6689ffea437938b5125631c724f8f2cf866f7e8c891b9a52b7864af5b5018d5d2414b638160d4dc5b1b7e26abfb8fbd1d1377960fcab177e1d8ae26ee6294b66e59fb86fcfccef27fdf1cf475a28ac40c6b09437b8ba400adae7c317a89ccc2f1a8fa11776dea3963b2df24314d5c9f93a5d3f0aff17c5dfe142892fc3d7292eca2b6b21e38760e69d738e11da585a68413e5f6c9f6f31273acb3c62113d3f8d13702546427fb01115a104aa38bf6876a7b5f811933fc0348fbc74931f97b3c192d4efb1e51c6c85b995a9957e73de8fe4e7342b99ef9f927e69a8e21a8966267834b1c05a8ced9367fe3ed53cae1419dd0b3c2e1240e6440703b2e9568457d68b7539829a6e0eb900f9e23b9714f7db33962875d074f3f1174d735ed98086b60174eca4a0406276dff6934e7c6d14c6238c0fb68815fa648360a7acf0473afc303960e613526cf72ef68c3aad520102f14ed9de18c2eebe823db9c9f3d193ba2efe24c9caee93e32cccff1f742413c64758e9688887a636b31285bf4de99ebc47e870c6512a8bf16fef2955f8e4ec769fb833c207db8e17f0d0b065adb7571cb0b0a6efe08a6e93448375c1868113a926227d52876671e80b5c6b61253d542db5cac9a5c2efbfb1019a39f6838fbc03bc4f78384d4afb6ec2600d1a0f0978b10194c9d3b52b996a607605c048647d84f897c1e6cdfe4e97d2282d17eaebb11a3139482fc1cee5efe89ec41873983c65a1d3be33b4b16b88e3162447f6eb0e32cda464ba3543222382ffba486ed6132806ff704044adef92e94db3daf47596a862b570b2714ea1b43c89b41d2415dec4b2ad5951b5820bc31d28abef30b49d688cf0391d5851770115b304ddc2e5a0192aac8aade564404b6a77c1b420018137dbfe910076d54d57ee957d457849ba70f3c0496c7268a9a87c515e0f7f434bd1165728038ef6028c08c0180a8d5af81ecd45e75ea92195497b079b1e5d53b02d39c83af3302afdad16fea07f36ef378e8bf4d4c9bc88cea0f38bc9fdceacbe872e28715bc0ad3199e15072e7736a71b9f061016943e752d3359cd816fd88f290f41ddd03657d106438d7d366d6536258d02a4adc6f820275ab5c32e3af2759cf3a9185a3502037241d8caca2bbd47af21a02cffda9d4d5a08d2be2d5d2d4fc8b5db8bfcacd324157902822f088088f73b49fe482f25793a8b8ee720aa27cec6a39ec30f3c0c33b0cbc006442042790d0feb46609914b428e4e8812de5d499ca28e16512bee47da2041fec53d2235c8a5c4ebb41a15713ad0b796426e8cb245eaa954a65dbfde5fd79e098c0b6180463c1fef3541c67cb585c9c2890bdc2115261cf10eb24c3c04c2157b270f427119f8862230c37bd660b0c09bbdee68d5ab7e76fbbb25f347793d901ce0c2e2ba235e3f62ea78374ec4226991b5209fca8622699650e1f3b27a9757ab5e5e98113119b3726f656ad7661cc1a438f8a32a8117239acf0ccb2e33030fe553b6736c2a151fb2c9d2ee4c8efa852aa7bbab33867c87e4d58529423f361792eb2a3a4f58f4231e9f8cc91cc91380be3f0ddb3a23c1acfdcfa550d7467b477c06e6a2dee18d3ef720e5a52b4b1f23e1475a2e125a5d74626f9b4cb36fc58e09d180b470", 0xec1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

1.007609222s ago: executing program 2 (id=2890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000002060102000000000000000067030000140007800800134001a576ea08000600000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

912.763769ms ago: executing program 2 (id=2891):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x18, 0x1411, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x408c}, 0x40040)

647.499919ms ago: executing program 2 (id=2892):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x45, 0x9, 0x7}, {0x3, 0x2, 0xc, 0xa}], 0x10, 0x4f}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x8}}}, 0x24}}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

647.067063ms ago: executing program 2 (id=2893):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

470.34µs ago: executing program 2 (id=2894):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x25dfdbfb, {{@in=@empty, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0xa0, 0x16}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x33}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x401, 0x3, 0x2d}, 0x70bd2d, 0x0, 0xa, 0x1, 0x0, 0x92}}, 0xf0}}, 0x24000058)

0s ago: executing program 2 (id=2895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
close(0x3)

kernel console output (not intermixed with test programs):

 to the list of known hosts.
syzkaller login: [   56.499493][ T5790] cgroup: Unknown subsys name 'net'
[   56.592392][ T5790] cgroup: Unknown subsys name 'cpuset'
[   56.598700][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.803535][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.945258][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.954693][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.958291][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.965642][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.968458][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.057128][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.060681][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.063691][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.067739][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.071369][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.088874][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.092463][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.098852][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.103015][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.106552][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.271583][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   64.327803][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.406153][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.409361][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.412019][ T5846] bridge_slave_0: entered allmulticast mode
[   64.415285][ T5846] bridge_slave_0: entered promiscuous mode
[   64.427030][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.430591][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.433325][ T5846] bridge_slave_1: entered allmulticast mode
[   64.437320][ T5846] bridge_slave_1: entered promiscuous mode
[   64.499098][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.520481][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.545652][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.548595][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.551081][ T5851] bridge_slave_0: entered allmulticast mode
[   64.553833][ T5851] bridge_slave_0: entered promiscuous mode
[   64.572854][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.575618][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.578300][ T5851] bridge_slave_1: entered allmulticast mode
[   64.581494][ T5851] bridge_slave_1: entered promiscuous mode
[   64.622476][ T5846] team0: Port device team_slave_0 added
[   64.627005][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.631490][ T5846] team0: Port device team_slave_1 added
[   64.636169][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.647197][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.694065][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.698252][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.709027][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.733181][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.737389][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.749111][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.755730][ T5851] team0: Port device team_slave_0 added
[   64.781100][ T5851] team0: Port device team_slave_1 added
[   64.839481][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.842712][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.846956][ T5852] bridge_slave_0: entered allmulticast mode
[   64.851130][ T5852] bridge_slave_0: entered promiscuous mode
[   64.856726][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.859811][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.871814][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.897634][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.900304][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.903227][ T5852] bridge_slave_1: entered allmulticast mode
[   64.907770][ T5852] bridge_slave_1: entered promiscuous mode
[   64.911691][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.915153][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.927638][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.936661][ T5846] hsr_slave_0: entered promiscuous mode
[   64.939178][ T5846] hsr_slave_1: entered promiscuous mode
[   64.981711][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.988671][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.080172][ T5851] hsr_slave_0: entered promiscuous mode
[   65.083409][ T5851] hsr_slave_1: entered promiscuous mode
[   65.087396][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   65.089831][ T5851] Cannot create hsr debugfs directory
[   65.093904][ T5852] team0: Port device team_slave_0 added
[   65.099974][ T5852] team0: Port device team_slave_1 added
[   65.162368][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.165387][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.175622][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.200664][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.203479][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.214270][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.326216][ T5852] hsr_slave_0: entered promiscuous mode
[   65.328571][ T5852] hsr_slave_1: entered promiscuous mode
[   65.330769][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.332547][ T5852] Cannot create hsr debugfs directory
[   65.460699][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.470669][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.481623][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.500488][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.563584][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.589791][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.597629][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.607685][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.676067][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.683259][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.696933][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.705282][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.761456][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.790608][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.810251][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.812568][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.833458][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.835848][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.901316][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.942682][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.962296][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.981472][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.984680][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.001062][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.006046][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.009262][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.025915][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.028749][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.046648][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.050385][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.056430][ T5856] Bluetooth: hci0: command tx timeout
[   66.124372][ T5856] Bluetooth: hci1: command tx timeout
[   66.136262][ T5856] Bluetooth: hci2: command tx timeout
[   66.173897][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.234245][ T5846] veth0_vlan: entered promiscuous mode
[   66.249128][ T5846] veth1_vlan: entered promiscuous mode
[   66.276852][ T5846] veth0_macvtap: entered promiscuous mode
[   66.293493][ T5846] veth1_macvtap: entered promiscuous mode
[   66.340917][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.376254][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.394066][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.403209][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.416341][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.420191][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.440028][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.467384][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.566001][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.569617][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.578067][ T5851] veth0_vlan: entered promiscuous mode
[   66.610085][ T5852] veth0_vlan: entered promiscuous mode
[   66.619358][ T5851] veth1_vlan: entered promiscuous mode
[   66.641600][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.643557][ T5852] veth1_vlan: entered promiscuous mode
[   66.646944][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.682786][ T5851] veth0_macvtap: entered promiscuous mode
[   66.694683][ T5851] veth1_macvtap: entered promiscuous mode
[   66.711022][ T5852] veth0_macvtap: entered promiscuous mode
[   66.723457][ T5852] veth1_macvtap: entered promiscuous mode
[   66.725086][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.736328][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.755462][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.786206][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.796915][ T5866] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.802366][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.810029][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.820471][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.828013][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.856795][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.860394][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.864004][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.890398][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.980439][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.989480][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.080382][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.096005][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.112170][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.115764][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.174810][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.185815][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.706672][ T5930] syzkaller0: entered promiscuous mode
[   67.708782][ T5930] syzkaller0: entered allmulticast mode
[   67.882956][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'.
[   67.946071][ T5936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.125045][ T5856] Bluetooth: hci0: command tx timeout
[   68.205966][ T5236] Bluetooth: hci1: command tx timeout
[   68.208316][ T5856] Bluetooth: hci2: command tx timeout
[   68.427631][ T5944] netlink: 'syz.0.14': attribute type 10 has an invalid length.
[   69.041206][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   69.704138][    C1] hrtimer: interrupt took 45195 ns
[   69.711305][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1027155594 wd_nsec: 1027155485
[   69.777788][ T5975] netlink: 'syz.2.27': attribute type 21 has an invalid length.
[   70.049437][ T5993] netlink: 'syz.2.36': attribute type 33 has an invalid length.
[   70.053286][ T5993] netlink: 'syz.2.36': attribute type 3 has an invalid length.
[   70.061234][ T5993] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.36'.
[   70.197937][ T5996] Zero length message leads to an empty skb
[   70.215162][ T5856] Bluetooth: hci0: command tx timeout
[   70.280256][ T6007] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   70.296186][ T5856] Bluetooth: hci2: command tx timeout
[   70.298046][ T5856] Bluetooth: hci1: command tx timeout
[   70.348143][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'.
[   70.924385][ T6029] Driver unsupported XDP return value 0 on prog  (id 21) dev N/A, expect packet loss!
[   71.255922][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.258604][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.391765][ T6051] delete_channel: no stack
[   71.639255][ T6071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.72'.
[   71.705204][ T6067] netlink: 112 bytes leftover after parsing attributes in process `syz.2.73'.
[   72.289806][ T5236] Bluetooth: hci0: command tx timeout
[   72.370819][ T5236] Bluetooth: hci1: command tx timeout
[   72.373244][ T5236] Bluetooth: hci2: command tx timeout
[   72.399017][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   73.172547][ T6120] lo speed is unknown, defaulting to 1000
[   73.182928][ T6128] warning: `syz.1.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.209926][ T6120] lo speed is unknown, defaulting to 1000
[   73.270590][ T6120] lo speed is unknown, defaulting to 1000
[   73.605888][ T6143] =======================================================
[   73.605888][ T6143] WARNING: The mand mount option has been deprecated and
[   73.605888][ T6143]          and is ignored by this kernel. Remove the mand
[   73.605888][ T6143]          option from the mount to silence this warning.
[   73.605888][ T6143] =======================================================
[   74.046742][ T6120] infiniband syz2: set active
[   74.050690][   T47] lo speed is unknown, defaulting to 1000
[   74.057645][ T6120] infiniband syz2: added lo
[   74.062724][ T6120] syz2: rxe_create_cq: returned err = -12
[   74.086705][ T6120] infiniband syz2: Couldn't create ib_mad CQ
[   74.088947][ T6120] infiniband syz2: Couldn't open port 1
[   74.139786][ T6120] RDS/IB: syz2: added
[   74.141968][ T6120] smc: adding ib device syz2 with port count 1
[   74.154529][ T6120] smc:    ib device syz2 port 1 has pnetid 
[   74.158902][ T5314] lo speed is unknown, defaulting to 1000
[   74.172199][ T6120] lo speed is unknown, defaulting to 1000
[   74.270491][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'.
[   74.427738][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.122'.
[   74.490137][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.498836][ T6120] lo speed is unknown, defaulting to 1000
[   74.658545][ T5856] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   74.724565][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'.
[   74.733741][ T6120] lo speed is unknown, defaulting to 1000
[   75.850620][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.140'.
[   75.855501][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.140'.
[   76.036560][ T6214] syzkaller0: entered promiscuous mode
[   76.039011][ T6214] syzkaller0: entered allmulticast mode
[   76.148375][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.144'.
[   76.152527][ T6222] netlink: 48 bytes leftover after parsing attributes in process `syz.2.144'.
[   76.694439][ T5856] Bluetooth: hci0: command tx timeout
[   77.625814][ T6234] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.148'.
[   77.724518][ T6240] netlink: 'syz.2.152': attribute type 10 has an invalid length.
[   77.727998][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.152'.
[   77.779463][ T6240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.036754][ T6255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.156'.
[   79.294337][ T6277] __nla_validate_parse: 1 callbacks suppressed
[   79.294355][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'.
[   79.305241][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'.
[   79.761388][ T6301] netlink: 'syz.2.174': attribute type 21 has an invalid length.
[   79.772568][ T6301] netlink: 'syz.2.174': attribute type 1 has an invalid length.
[   79.968971][ T6308] netlink: 830 bytes leftover after parsing attributes in process `syz.0.177'.
[   80.083271][ T6310] syz.1.180 (6310) used greatest stack depth: 19328 bytes left
[   80.141890][ T6316] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   80.197439][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'.
[   80.202076][ T6323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.184'.
[   80.493244][ T6341] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[   80.549663][ T6343] syz.2.192 uses obsolete (PF_INET,SOCK_PACKET)
[   80.572475][ T6345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.536236][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'.
[   81.588546][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.199'.
[   81.591712][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.199'.
[   81.849237][ T6362] siw: device registration error -23
[   83.007976][ T6374] xt_time: invalid argument - start or stop time greater than 23:59:59
[   83.113543][ T6381] netlink: 180 bytes leftover after parsing attributes in process `syz.1.208'.
[   83.182837][ T6389] netlink: 'syz.2.212': attribute type 10 has an invalid length.
[   83.205948][ T6389] macvlan0: entered promiscuous mode
[   83.208224][ T6389] macvlan0: entered allmulticast mode
[   83.209826][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'.
[   83.215702][ T6389] veth1_vlan: entered allmulticast mode
[   83.218877][ T6389] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   83.653676][ T5856] Bluetooth: hci1: Malformed HCI Event: 0x22
[   84.042532][ T5856] Bluetooth: hci0: adv larger than maximum supported
[   84.355042][ T6448] lo speed is unknown, defaulting to 1000
[   86.550830][ T6501] __nla_validate_parse: 3 callbacks suppressed
[   86.550844][ T6501] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.256'.
[   86.623091][    T9] cfg80211: failed to load regulatory.db
[   87.028330][ T6523] netlink: 'syz.0.266': attribute type 1 has an invalid length.
[   87.379541][ T6550] netlink: 'syz.1.279': attribute type 2 has an invalid length.
[   87.382514][ T6550] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.279'.
[   87.966162][ T6555] bridge0: port 3(veth0_to_team) entered blocking state
[   87.968639][ T6555] bridge0: port 3(veth0_to_team) entered disabled state
[   87.971636][ T6555] veth0_to_team: entered allmulticast mode
[   87.976342][ T6555] veth0_to_team: entered promiscuous mode
[   87.979396][ T6555] bridge0: port 3(veth0_to_team) entered blocking state
[   87.981811][ T6555] bridge0: port 3(veth0_to_team) entered forwarding state
[   88.353322][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'.
[   88.438648][ T6576] netlink: 'syz.0.291': attribute type 21 has an invalid length.
[   88.570036][ T6581] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.626808][ T6584] netlink: 176 bytes leftover after parsing attributes in process `syz.1.294'.
[   88.639989][ T6579] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.292'.
[   90.450523][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[   90.459029][ T6631] netlink: 33 bytes leftover after parsing attributes in process `syz.2.316'.
[   90.475230][ T6631] netlink: 33 bytes leftover after parsing attributes in process `syz.2.316'.
[   90.900418][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.938156][ T6654] netlink: 232 bytes leftover after parsing attributes in process `syz.0.325'.
[   91.011679][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.015468][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.018871][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.022335][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.025601][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.028800][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.032066][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.035344][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.036746][ T6658] raw_sendmsg: syz.2.328 forgot to set AF_INET. Fix it!
[   91.038331][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.044312][ T6656] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   91.089761][ T6660] netlink: 'syz.0.327': attribute type 1 has an invalid length.
[   91.092868][ T6660] netlink: 15534 bytes leftover after parsing attributes in process `syz.0.327'.
[   91.351087][ T6674] sctp: [Deprecated]: syz.2.335 (pid 6674) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.351087][ T6674] Use struct sctp_sack_info instead
[   92.956238][ T6740] wlan1 speed is unknown, defaulting to 1000
[   92.958797][ T6740] wlan1 speed is unknown, defaulting to 1000
[   92.962829][ T6740] wlan1 speed is unknown, defaulting to 1000
[   93.001980][ T6740] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.021783][ T6740] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   93.086447][ T6740] wlan1 speed is unknown, defaulting to 1000
[   93.091805][ T6740] wlan1 speed is unknown, defaulting to 1000
[   93.099966][ T6740] wlan1 speed is unknown, defaulting to 1000
[   93.170100][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.367'.
[   94.262604][ T6811] netlink: 'syz.2.396': attribute type 10 has an invalid length.
[   94.279009][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.296153][ T6811] team0: Port device batadv0 added
[   94.552814][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'.
[   94.689792][ T6830] netlink: 'syz.0.404': attribute type 10 has an invalid length.
[   94.771999][ T6830] team0: Port device netdevsim0 added
[   94.882689][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'.
[   94.950832][ T6842] netlink: 56 bytes leftover after parsing attributes in process `syz.0.409'.
[   94.958263][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'.
[   97.079965][ T6881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.426'.
[   97.148899][ T6886] netlink: 'syz.1.427': attribute type 1 has an invalid length.
[   97.152059][ T6886] netlink: 17 bytes leftover after parsing attributes in process `syz.1.427'.
[   97.315745][ T6897] delete_channel: no stack
[   97.318067][ T6897] delete_channel: no stack
[   97.715141][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'.
[   97.825540][ T6933] netlink: 'syz.1.451': attribute type 1 has an invalid length.
[   97.903937][ T6931] netlink: 88 bytes leftover after parsing attributes in process `syz.0.450'.
[   98.317372][ T6950] netlink: 'syz.1.459': attribute type 4 has an invalid length.
[   98.347474][ T6950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.459'.
[   98.630943][ T6950] netlink: 6 bytes leftover after parsing attributes in process `syz.1.459'.
[   98.634078][ T6950] net_ratelimit: 3322 callbacks suppressed
[   98.636210][ T6950] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   98.673500][ T6950] syz.1.459 (6950) used greatest stack depth: 18104 bytes left
[   98.762842][ T6953] syzkaller0: entered promiscuous mode
[   98.769126][ T6953] syzkaller0: entered allmulticast mode
[   98.966345][ T6971] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.469'.
[   99.316656][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'.
[   99.321082][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.471'.
[  100.321068][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.404045][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.497903][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.504704][ T6989] netlink: 400 bytes leftover after parsing attributes in process `syz.0.477'.
[  100.630238][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.815811][ T7005] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  100.880687][   T12] bridge_slave_1: left allmulticast mode
[  100.882674][   T12] bridge_slave_1: left promiscuous mode
[  100.891206][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.939668][   T12] bridge_slave_0: left promiscuous mode
[  100.942471][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.947780][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.951068][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.954970][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.962181][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.968162][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.418314][ T7038] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.548277][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.561264][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.570368][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  101.573621][   T12] veth1_vlan: left allmulticast mode
[  101.577269][   T12] bond0 (unregistering): Released all slaves
[  101.593248][ T7032] netlink: 'syz.1.494': attribute type 13 has an invalid length.
[  101.630941][ T7012] lo speed is unknown, defaulting to 1000
[  102.083029][ T7067] netlink: 182 bytes leftover after parsing attributes in process `syz.0.508'.
[  102.088875][ T7067] netlink: 'syz.0.508': attribute type 10 has an invalid length.
[  102.107553][ T7067] veth0_vlan: left promiscuous mode
[  102.112265][ T7067] veth0_vlan: entered promiscuous mode
[  102.119331][ T7067] team0: Device veth0_vlan failed to register rx_handler
[  102.133284][ T7012] wlan1 speed is unknown, defaulting to 1000
[  102.251809][ T7076] netlink: 216 bytes leftover after parsing attributes in process `syz.0.508'.
[  102.383540][ T7067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.508'.
[  102.591925][   T12] hsr_slave_0: left promiscuous mode
[  102.599619][   T12] hsr_slave_1: left promiscuous mode
[  102.607320][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.615041][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.622142][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.627195][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.654703][   T12] veth1_macvtap: left promiscuous mode
[  102.657318][   T12] veth0_macvtap: left promiscuous mode
[  102.659868][   T12] veth1_vlan: left promiscuous mode
[  102.662471][   T12] veth0_vlan: left promiscuous mode
[  103.004736][ T5856] Bluetooth: hci2: command tx timeout
[  103.153265][   T12] team0 (unregistering): Port device team_slave_1 removed
[  103.179352][   T12] team0 (unregistering): Port device team_slave_0 removed
[  103.333887][   T12] team0 (unregistering): Port device batadv0 removed
[  103.457086][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'.
[  103.485034][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'.
[  103.491596][ T7095] netlink: 33 bytes leftover after parsing attributes in process `syz.1.514'.
[  103.498191][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'.
[  103.501584][ T7095] netlink: 33 bytes leftover after parsing attributes in process `syz.1.514'.
[  103.508705][ T7012] chnl_net:caif_netlink_parms(): no params data found
[  103.587745][ T7098] netlink: 'syz.0.515': attribute type 29 has an invalid length.
[  103.660590][ T7098] netlink: 'syz.0.515': attribute type 29 has an invalid length.
[  103.683931][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.688009][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.690439][ T7012] bridge_slave_0: entered allmulticast mode
[  103.694045][ T7012] bridge_slave_0: entered promiscuous mode
[  103.698419][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.700749][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.705936][ T7012] bridge_slave_1: entered allmulticast mode
[  103.723304][ T7012] bridge_slave_1: entered promiscuous mode
[  103.803042][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.825018][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.869286][ T7012] team0: Port device team_slave_0 added
[  103.888956][ T7012] team0: Port device team_slave_1 added
[  103.948978][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.953210][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.962520][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.969419][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.971661][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.980641][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.049098][ T7122] netlink: 56 bytes leftover after parsing attributes in process `syz.0.523'.
[  104.060716][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'.
[  104.063831][ T7122] netlink: 31 bytes leftover after parsing attributes in process `syz.0.523'.
[  104.071907][ T7122] netlink: 'syz.0.523': attribute type 2 has an invalid length.
[  104.075666][ T7122] netlink: 31 bytes leftover after parsing attributes in process `syz.0.523'.
[  104.086764][ T7012] hsr_slave_0: entered promiscuous mode
[  104.094686][ T7012] hsr_slave_1: entered promiscuous mode
[  104.099870][ T7012] debugfs: 'hsr0' already exists in 'hsr'
[  104.101840][ T7012] Cannot create hsr debugfs directory
[  104.160042][ T7126] netlink: 'syz.0.524': attribute type 3 has an invalid length.
[  104.298178][ T7136] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.528'.
[  104.850368][ T7177] openvswitch: netlink: Flow key attribute not present in set flow.
[  104.896504][ T7012] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  104.932816][ T7012] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  104.954550][ T7012] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  104.968249][ T7012] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  105.084526][ T5856] Bluetooth: hci2: command tx timeout
[  105.182947][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.203813][ T7012] 8021q: adding VLAN 0 to HW filter on device team0
[  105.220329][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.222804][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.241365][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.244435][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.486724][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.560031][ T7012] veth0_vlan: entered promiscuous mode
[  105.571931][ T7012] veth1_vlan: entered promiscuous mode
[  105.608789][ T7012] veth0_macvtap: entered promiscuous mode
[  105.617811][ T7012] veth1_macvtap: entered promiscuous mode
[  105.640345][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.656272][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.671324][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.682224][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.689955][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.921998][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.131082][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.139182][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.205652][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.208760][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.248687][ T7222] netlink: 'syz.1.550': attribute type 21 has an invalid length.
[  106.430687][ T7234] netlink: 'syz.1.555': attribute type 21 has an invalid length.
[  106.678631][ T7252] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[  107.165536][ T5856] Bluetooth: hci2: command tx timeout
[  107.773827][ T5856] Bluetooth: hci0: Dropping invalid advertising data
[  107.777833][ T5856] Bluetooth: hci0: Malformed LE Event: 0x02
[  108.588331][ T7287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.748574][ T7298] __nla_validate_parse: 4 callbacks suppressed
[  108.748591][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  109.072474][ T7307] netlink: 'syz.1.588': attribute type 10 has an invalid length.
[  109.077734][ T7307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.588'.
[  109.082948][ T7307] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  109.244630][ T5856] Bluetooth: hci2: command tx timeout
[  109.692696][ T7311] netlink: 'syz.0.589': attribute type 2 has an invalid length.
[  109.998675][ T7330] : renamed from wg2 (while UP)
[  110.413429][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'.
[  110.522097][ T7348] syzkaller1: tun_chr_ioctl cmd 1074812117
[  110.631781][ T7354] netlink: 'syz.1.608': attribute type 2 has an invalid length.
[  110.686963][ T7356] netlink: 'syz.1.610': attribute type 2 has an invalid length.
[  110.690046][ T7356] netlink: 'syz.1.610': attribute type 1 has an invalid length.
[  110.714253][ T7356] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.610'.
[  110.726206][ T7356] nbd: couldn't find device at index 16
[  110.778200][ T7363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'.
[  110.786466][ T7360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'.
[  110.793776][ T7363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'.
[  110.889022][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'.
[  111.857228][ T7385] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.622'.
[  112.115650][ T7403] netlink: 'syz.1.631': attribute type 10 has an invalid length.
[  113.120879][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.640'.
[  113.478579][ T7441] netlink: 'syz.0.646': attribute type 1 has an invalid length.
[  113.862188][ T7455] __nla_validate_parse: 3 callbacks suppressed
[  113.862204][ T7455] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.654'.
[  114.106019][ T7473] netlink: 'syz.0.662': attribute type 10 has an invalid length.
[  114.137336][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.142143][ T7473] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  114.246035][ T7481] netlink: 'syz.0.667': attribute type 39 has an invalid length.
[  115.490918][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.677'.
[  115.494069][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.677'.
[  115.675795][ T7515] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[  115.838697][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'.
[  115.990873][ T7537] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.693'.
[  116.665259][ T7561] netlink: 'syz.1.704': attribute type 39 has an invalid length.
[  116.768833][ T7570] delete_channel: no stack
[  116.918941][ T7587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.712'.
[  116.922516][ T7587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.712'.
[  116.927300][ T7587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.712'.
[  118.217727][ T7612] netlink: 'syz.2.714': attribute type 29 has an invalid length.
[  118.220881][ T7612] netlink: 'syz.2.714': attribute type 29 has an invalid length.
[  118.305899][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'.
[  119.028563][ T7671] netlink: 'syz.1.740': attribute type 39 has an invalid length.
[  119.639929][ T7679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.743'.
[  119.799622][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'.
[  119.931063][ T7704] openvswitch: netlink: Flow actions attr not present in new flow.
[  119.952115][ T7706] netlink: 92 bytes leftover after parsing attributes in process `syz.2.756'.
[  120.326856][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'.
[  120.330837][ T7734] netlink: 'syz.0.770': attribute type 2 has an invalid length.
[  120.337807][ T7734] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  120.341671][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'.
[  121.381022][ T7772] netlink: 'syz.1.787': attribute type 23 has an invalid length.
[  121.420302][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.788'.
[  121.433887][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'.
[  121.506549][ T7782] xt_policy: neither incoming nor outgoing policy selected
[  121.597374][ T7787] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  121.827895][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  121.835977][ T7797] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  122.338688][ T7810] lo speed is unknown, defaulting to 1000
[  122.462566][ T7810] wlan1 speed is unknown, defaulting to 1000
[  122.879112][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[  123.653002][ T7866] netlink: 'syz.0.827': attribute type 21 has an invalid length.
[  123.816461][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'.
[  123.977209][ T7879] netlink: 'syz.1.832': attribute type 25 has an invalid length.
[  124.142245][ T7889] C: renamed from team_slave_0 (while UP)
[  124.159635][ T7889] netlink: 'syz.1.837': attribute type 3 has an invalid length.
[  124.162409][ T7889] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  124.207790][ T7891] batadv_slave_1: entered promiscuous mode
[  124.370196][ T7904] sctp: [Deprecated]: syz.0.840 (pid 7904) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.370196][ T7904] Use struct sctp_sack_info instead
[  125.621186][ T7939] __nla_validate_parse: 3 callbacks suppressed
[  125.621202][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  125.649090][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  125.652810][ T7939] netlink: 19 bytes leftover after parsing attributes in process `syz.0.859'.
[  126.026457][ T7960] netlink: 'syz.0.868': attribute type 5 has an invalid length.
[  126.152410][ T7973] netlink: 72 bytes leftover after parsing attributes in process `syz.2.874'.
[  126.156554][ T7973] netlink: 72 bytes leftover after parsing attributes in process `syz.2.874'.
[  126.202215][ T7977] netlink: 'syz.1.876': attribute type 15 has an invalid length.
[  126.257202][ T7980] netlink: 'syz.1.878': attribute type 2 has an invalid length.
[  126.259744][ T7980] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  126.426486][ T7991] netlink: 'syz.1.882': attribute type 12 has an invalid length.
[  126.430160][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.882'.
[  126.779879][ T5856] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6
[  127.181439][ T5856] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  127.247784][ T5856] Bluetooth: hci0: unexpected event 0x31 length: 82 > 6
[  127.493823][ T8030] netlink: 'syz.0.899': attribute type 1 has an invalid length.
[  127.612672][ T8042] netlink: 68 bytes leftover after parsing attributes in process `syz.1.905'.
[  128.031067][ T8053] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.910'.
[  128.554393][ T8101] netlink: 'syz.2.932': attribute type 11 has an invalid length.
[  128.558107][ T8101] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.932'.
[  128.562491][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.770678][ T8120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'.
[  129.773646][ T8136] nbd: must specify a size in bytes for the device
[  130.710511][ T8200] netlink: 'syz.0.979': attribute type 11 has an invalid length.
[  130.725032][ T8200] __nla_validate_parse: 4 callbacks suppressed
[  130.725052][ T8200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.979'.
[  130.745261][ T8200] netlink: 'syz.0.979': attribute type 11 has an invalid length.
[  130.748746][ T8200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.979'.
[  130.759969][ T8199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.808391][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.981'.
[  130.812484][ T8206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.982'.
[  131.008533][ T8217] netlink: 'syz.2.987': attribute type 1 has an invalid length.
[  131.011543][ T8217] netlink: 'syz.2.987': attribute type 2 has an invalid length.
[  131.421422][ T8227] syz2: rxe_newlink: already configured on lo
[  131.500752][ T8237] netlink: 'syz.2.996': attribute type 25 has an invalid length.
[  131.503875][ T8237] netlink: 'syz.2.996': attribute type 28 has an invalid length.
[  131.521529][ T8244] netlink: 45 bytes leftover after parsing attributes in process `syz.0.999'.
[  131.921493][ T8263] netlink: 'syz.0.1008': attribute type 5 has an invalid length.
[  131.967603][ T8265] netlink: 'syz.1.1007': attribute type 10 has an invalid length.
[  131.973035][ T8265] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1007'.
[  132.689013][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.691371][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.842242][ T8312] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1030'.
[  132.892648][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1032'.
[  132.920646][ T8320] netlink: 'syz.2.1034': attribute type 19 has an invalid length.
[  133.231705][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'.
[  133.284068][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'.
[  133.596720][ T8373] netlink: 'syz.0.1059': attribute type 64 has an invalid length.
[  133.722373][ T8379] netlink: 'syz.0.1062': attribute type 4 has an invalid length.
[  133.742787][ T8369] delete_channel: no stack
[  133.881205][ T8379] .`: renamed from bond0 (while UP)
[  134.694559][ T8428] netlink: 'syz.2.1082': attribute type 42 has an invalid length.
[  135.088338][ T8430] syz.2.1083 (8430) used greatest stack depth: 17840 bytes left
[  136.221455][ T8463] __nla_validate_parse: 4 callbacks suppressed
[  136.221467][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'.
[  136.383323][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'.
[  136.895627][ T8481] syzkaller0: entered promiscuous mode
[  136.898115][ T8481] syzkaller0: entered allmulticast mode
[  137.250650][ T8491] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1107'.
[  137.350728][ T8490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  137.357659][ T8490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  137.520068][ T8488] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1107'.
[  137.528264][ T8488] lo speed is unknown, defaulting to 1000
[  137.766082][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'.
[  137.770712][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'.
[  138.095305][ T8518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1116'.
[  138.530872][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'.
[  138.632252][ T8546] rdma_rxe: rxe_newlink: failed to add erspan0
[  138.987746][ T8555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1134'.
[  140.028836][ T8599] netlink: 'syz.2.1153': attribute type 2 has an invalid length.
[  140.032155][ T8599] netlink: 'syz.2.1153': attribute type 1 has an invalid length.
[  140.866786][ T8622] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1163'.
[  141.331969][ T8647] netlink: 'syz.0.1174': attribute type 1 has an invalid length.
[  141.467852][ T8656] __nla_validate_parse: 2 callbacks suppressed
[  141.468009][ T8656] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1175'.
[  141.869076][ T8673] netlink: 'syz.1.1186': attribute type 2 has an invalid length.
[  141.872351][ T8673] netlink: 'syz.1.1186': attribute type 3 has an invalid length.
[  141.876283][ T8673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1186'.
[  142.260115][ T8685] netlink: 'syz.1.1191': attribute type 10 has an invalid length.
[  142.295513][ T8685] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  142.462706][ T8693] netlink: 'syz.0.1195': attribute type 11 has an invalid length.
[  142.601192][ T8705] netlink: 'syz.0.1201': attribute type 1 has an invalid length.
[  142.626060][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'.
[  143.531741][ T5856] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  143.718803][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1211'.
[  143.722154][ T8721] unsupported nlmsg_type 40
[  144.557310][ T8760] netlink: 'syz.0.1224': attribute type 10 has an invalid length.
[  144.716850][ T5856] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  145.968300][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1240'.
[  145.981796][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1240'.
[  145.987982][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1240'.
[  146.076041][ T8804] netlink: 'syz.2.1239': attribute type 10 has an invalid length.
[  146.079159][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'.
[  146.095847][ T8803] syzkaller0: entered promiscuous mode
[  146.098486][ T8803] syzkaller0: entered allmulticast mode
[  146.101962][ T8804] ipvlan1: entered promiscuous mode
[  146.105275][ T8804] ipvlan1: entered allmulticast mode
[  146.107564][ T8804] veth0_vlan: entered allmulticast mode
[  146.114013][ T8804] bridge0: port 3(ipvlan1) entered blocking state
[  146.117090][ T8804] bridge0: port 3(ipvlan1) entered disabled state
[  146.122203][ T8804] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  146.481188][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'.
[  146.767348][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  147.742972][ T8825] tmpfs: Bad value for 'uid'
[  147.750173][ T8825] tmpfs: Bad value for 'uid'
[  147.997889][ T8844] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1258'.
[  148.035845][ T8848] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1260'.
[  148.083118][ T8846] netlink: 'syz.2.1259': attribute type 10 has an invalid length.
[  148.087197][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.091252][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.126734][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.129842][ T8846] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.133169][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.136381][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.159390][ T8846] team0: Port device bridge0 added
[  148.161974][ T8853] bridge_slave_1: left allmulticast mode
[  148.164616][ T8853] bridge_slave_1: left promiscuous mode
[  148.169925][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.177048][ T8853] bridge_slave_0: left promiscuous mode
[  148.179438][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.235654][ T8853] team0: Port device bridge0 removed
[  148.671917][ T8870] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1269'.
[  149.605503][ T8881] netlink: 'syz.0.1273': attribute type 10 has an invalid length.
[  149.839592][ T8891] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1278'.
[  150.177627][ T8906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.666572][ T5236] Bluetooth: hci1: Malformed LE Event: 0x0d
[  151.072626][ T8944] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1302'.
[  151.616446][ T8966] syzkaller0: entered promiscuous mode
[  151.618517][ T8966] syzkaller0: entered allmulticast mode
[  152.962268][ T8970] netlink: 177 bytes leftover after parsing attributes in process `syz.1.1314'.
[  152.968251][ T8978] netlink: 'syz.2.1318': attribute type 6 has an invalid length.
[  152.971331][ T8978] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1318'.
[  156.322112][ T5236] Bluetooth: hci2: ISO packet too small
[  156.371796][ T9005] delete_channel: no stack
[  156.393216][ T9005] delete_channel: no stack
[  156.420890][ T9005] netlink: 'syz.0.1327': attribute type 6 has an invalid length.
[  156.423908][ T9005] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1327'.
[  156.690234][ T9017] netlink: 'syz.2.1332': attribute type 1 has an invalid length.
[  156.944534][ T9034] netlink: 'syz.0.1340': attribute type 1 has an invalid length.
[  156.947378][ T9034] netlink: 'syz.0.1340': attribute type 4 has an invalid length.
[  156.949756][ T9034] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1340'.
[  157.006775][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  157.009621][ T9041] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  157.063900][ T9046] openvswitch: netlink: Multiple metadata blocks provided
[  157.190024][ T9050] netlink: 822 bytes leftover after parsing attributes in process `syz.2.1348'.
[  157.213033][ T9050] bond0: vlans aren't supported yet for dev_uc|mc_add()
[  157.956013][ T9060] netlink: 'syz.2.1352': attribute type 39 has an invalid length.
[  158.652547][ T9102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.820024][ T9104] netlink: 'syz.2.1371': attribute type 3 has an invalid length.
[  158.823339][ T9104] netlink: 'syz.2.1371': attribute type 3 has an invalid length.
[  158.840269][ T9104] netlink: 130500 bytes leftover after parsing attributes in process `syz.2.1371'.
[  159.393649][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1376'.
[  159.399304][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1376'.
[  159.468790][ T9124] netlink: 'syz.2.1375': attribute type 39 has an invalid length.
[  159.566539][ T9124] hsr_slave_0 (unregistering): left promiscuous mode
[  159.919465][ T9147] netlink: 'syz.2.1389': attribute type 16 has an invalid length.
[  159.926761][ T9147] netlink: 'syz.2.1389': attribute type 17 has an invalid length.
[  159.960073][ T9147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.414659][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1397'.
[  160.419081][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1397'.
[  160.426232][ T9165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1397'.
[  160.468595][ T9167] netlink: 'syz.2.1398': attribute type 29 has an invalid length.
[  160.473440][ T9167] netlink: 'syz.2.1398': attribute type 29 has an invalid length.
[  160.478633][ T9167] netlink: 488 bytes leftover after parsing attributes in process `syz.2.1398'.
[  160.871447][ T9181] netlink: 'syz.0.1405': attribute type 21 has an invalid length.
[  160.874905][ T9181] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1405'.
[  160.887105][ T9183] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1406'.
[  162.071688][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1410'.
[  162.158930][ T5236] Bluetooth: hci2: Malformed LE Event: 0x0b
[  162.563878][ T9214] netlink: 'syz.2.1419': attribute type 4 has an invalid length.
[  163.082353][ T9235] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  163.879899][ T9264] __nla_validate_parse: 8 callbacks suppressed
[  163.879918][ T9264] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1442'.
[  163.999889][ T9275] syzkaller0: entered promiscuous mode
[  168.287635][ T5236] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  169.136404][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1496'.
[  169.430789][ T9382] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1497'.
[  169.605015][ T9390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.608447][ T9390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.612693][ T9390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.624281][ T9390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.247045][ T9427] openvswitch: netlink: Flow key attr not present in new flow.
[  170.413607][ T9435] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1519'.
[  170.574834][ T9443] netlink: 'syz.1.1523': attribute type 3 has an invalid length.
[  171.836098][ T9472] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1536'.
[  172.476487][ T9487] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1543'.
[  173.088454][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'.
[  173.092579][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'.
[  173.392744][ T9521] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1558'.
[  173.798894][ T9547] netlink: 'syz.0.1571': attribute type 11 has an invalid length.
[  173.801546][ T9547] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1571'.
[  173.845481][ T9546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.862343][ T5236] Bluetooth: hci2: Malformed LE Event: 0x0d
[  173.950344][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1576'.
[  174.018629][ T9563] netlink: 'syz.2.1579': attribute type 21 has an invalid length.
[  174.888092][ T9577] __nla_validate_parse: 4 callbacks suppressed
[  174.888103][ T9577] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1586'.
[  175.022624][ T9591] netlink: 'syz.2.1590': attribute type 2 has an invalid length.
[  175.026041][ T9591] netlink: 110008 bytes leftover after parsing attributes in process `syz.2.1590'.
[  175.113990][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'.
[  175.169145][ T9599] netlink: 'syz.2.1597': attribute type 1 has an invalid length.
[  175.172516][ T9599] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1597'.
[  175.220307][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.156843][ T9640] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1616'.
[  176.223259][ T5236] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  177.838818][ T9666] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1627'.
[  177.952864][ T9677] delete_channel: no stack
[  177.955086][ T9677] delete_channel: no stack
[  178.020528][ T9680] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1634'.
[  178.233795][ T9697] netlink: 'syz.1.1642': attribute type 4 has an invalid length.
[  178.239217][ T9697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1642'.
[  178.243962][ T9697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  178.395237][ T9701] netlink: 'syz.1.1643': attribute type 2 has an invalid length.
[  178.399976][ T9701] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1643'.
[  178.570256][ T9711] netlink: 'syz.1.1646': attribute type 29 has an invalid length.
[  178.575836][ T9711] netlink: 'syz.1.1646': attribute type 29 has an invalid length.
[  184.066740][ T9742] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1659'.
[  184.187546][ T9748] netlink: 'syz.1.1657': attribute type 8 has an invalid length.
[  185.310324][ T9797] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1683'.
[  185.749507][ T9826] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1694'.
[  186.085288][ T9846] netlink: zone id is out of range
[  186.087389][ T9846] netlink: del zone limit has 8 unknown bytes
[  186.135460][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1707'.
[  186.138663][ T9853] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1707'.
[  186.142362][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1707'.
[  186.148361][ T9853] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1707'.
[  186.151191][ T9853] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1707'.
[  186.231924][ T9861] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1711'.
[  186.237494][ T9861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1711'.
[  186.336721][ T9873] netlink: 'syz.2.1717': attribute type 1 has an invalid length.
[  186.657642][ T9895] TCP: TCP_TX_DELAY enabled
[  188.909685][ T9924] netlink: 'syz.2.1739': attribute type 2 has an invalid length.
[  189.178397][ T9939] netlink: 'syz.2.1747': attribute type 4 has an invalid length.
[  189.181634][ T9939] netlink: 'syz.2.1747': attribute type 1 has an invalid length.
[  189.189034][ T9939] netlink: 'syz.2.1747': attribute type 2 has an invalid length.
[  189.192732][ T9939] __nla_validate_parse: 4 callbacks suppressed
[  189.192766][ T9939] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.1747'.
[  189.236163][ T9942] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1745'.
[  189.419392][ T9942] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1745'.
[  189.882602][ T9971] netlink: 'syz.2.1755': attribute type 5 has an invalid length.
[  190.151292][ T9985] tap0: tun_chr_ioctl cmd 1074025672
[  190.153705][ T9985] tap0: ignored: set checksum enabled
[  190.385702][ T9987] netlink: 'syz.2.1761': attribute type 29 has an invalid length.
[  190.389384][ T9988] netlink: 'syz.2.1761': attribute type 29 has an invalid length.
[  190.953992][T10011] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  191.060784][T10018] netlink: 'syz.2.1776': attribute type 4 has an invalid length.
[  191.087161][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.089587][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  191.339001][T10038] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1783'.
[  191.619742][T10043] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1785'.
[  191.772429][T10051] netlink: 'syz.0.1789': attribute type 10 has an invalid length.
[  191.798758][T10051] 8021q: adding VLAN 0 to HW filter on device team0
[  191.802751][T10051] .`: (slave team0): Enslaving as an active interface with an up link
[  192.789513][T10096] syzkaller0: entered promiscuous mode
[  192.791927][T10096] syzkaller0: entered allmulticast mode
[  192.792942][T10102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1813'.
[  194.131440][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.133514][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.548702][T10155] netlink: 'syz.0.1836': attribute type 7 has an invalid length.
[  194.551949][T10155] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1836'.
[  194.716417][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1843'.
[  195.937210][T10205] netlink: 'syz.2.1860': attribute type 4 has an invalid length.
[  195.939798][T10205] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1860'.
[  195.995015][T10205] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  196.041130][T10214] netlink: 'syz.1.1864': attribute type 33 has an invalid length.
[  196.044502][T10214] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1864'.
[  196.312726][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1871'.
[  196.319167][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1871'.
[  196.322764][T10232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1871'.
[  196.396175][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'.
[  196.400139][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'.
[  196.436524][T10243] x_tables: ip_tables: udp match: only valid for protocol 17
[  197.287010][T10267] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1888'.
[  197.694049][T10297] cgroup: fork rejected by pids controller in /syz1
[  197.970847][T10312] netlink: 'syz.0.1907': attribute type 29 has an invalid length.
[  198.152477][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.268505][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.392842][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.491625][   T13] bond0: (slave netdevsim0): Releasing backup interface
[  198.498732][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.610527][T10324] netlink: 'syz.0.1913': attribute type 210 has an invalid length.
[  198.653572][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.665755][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.669583][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.678450][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.682218][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.760596][   T13] veth0_to_team: left allmulticast mode
[  198.763003][   T13] veth0_to_team: left promiscuous mode
[  198.766327][   T13] bridge0: port 3(veth0_to_team) entered disabled state
[  198.778495][   T13] bridge_slave_1: left allmulticast mode
[  198.780951][   T13] bridge_slave_1: left promiscuous mode
[  198.783456][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.791466][   T13] bridge_slave_0: left promiscuous mode
[  198.793870][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.883901][T10308] syz.2.1905: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  198.895177][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.2.1905 Not tainted syzkaller #0 PREEMPT(full) 
[  198.895190][T10308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.895195][T10308] Call Trace:
[  198.895199][T10308]  <TASK>
[  198.895204][T10308]  dump_stack_lvl+0x189/0x250
[  198.895230][T10308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.895239][T10308]  ? __pfx__printk+0x10/0x10
[  198.895251][T10308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  198.895262][T10308]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  198.895271][T10308]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  198.895281][T10308]  warn_alloc+0x214/0x310
[  198.895292][T10308]  ? __pfx_warn_alloc+0x10/0x10
[  198.895304][T10308]  ? __get_vm_area_node+0x28f/0x300
[  198.895315][T10308]  ? hash_netport4_resize+0x235/0x1b60
[  198.895328][T10308]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  198.895353][T10308]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  198.895367][T10308]  ? rcu_is_watching+0x15/0xb0
[  198.895376][T10308]  ? hash_netport4_resize+0x235/0x1b60
[  198.895385][T10308]  ? hash_netport4_resize+0x235/0x1b60
[  198.895393][T10308]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  198.895406][T10308]  ? hash_netport4_resize+0x235/0x1b60
[  198.895419][T10308]  hash_netport4_resize+0x235/0x1b60
[  198.895428][T10308]  ? hash_netport4_uadt+0xc97/0xf30
[  198.895440][T10308]  ? __pfx_hash_netport4_add+0x10/0x10
[  198.895450][T10308]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  198.895464][T10308]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  198.895496][T10308]  call_ad+0x44e/0xb00
[  198.895507][T10308]  ? __pfx_call_ad+0x10/0x10
[  198.895521][T10308]  ? __nla_parse+0x40/0x60
[  198.895531][T10308]  ip_set_ad+0x791/0x930
[  198.895542][T10308]  ? __pfx_ip_set_ad+0x10/0x10
[  198.895566][T10308]  nfnetlink_rcv_msg+0xb4d/0x1130
[  198.895579][T10308]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  198.895598][T10308]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  198.895632][T10308]  netlink_rcv_skb+0x208/0x470
[  198.895641][T10308]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  198.895654][T10308]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  198.895667][T10308]  ? bpf_lsm_capable+0x9/0x20
[  198.895702][T10308]  ? security_capable+0x7e/0x2e0
[  198.895713][T10308]  nfnetlink_rcv+0x26a/0x2520
[  198.895731][T10308]  ? __dev_queue_xmit+0x1d79/0x3b50
[  198.895754][T10308]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  198.895765][T10308]  ? __pfx___dev_queue_xmit+0x10/0x10
[  198.895783][T10308]  ? perf_trace_run_bpf_submit+0xee/0x170
[  198.895794][T10308]  ? perf_trace_lock+0x2f8/0x3b0
[  198.895805][T10308]  ? __pfx_perf_trace_lock+0x10/0x10
[  198.895812][T10308]  ? skb_clone+0x246/0x3a0
[  198.895825][T10308]  ? __netlink_deliver_tap+0x807/0x850
[  198.895833][T10308]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.895844][T10308]  ? netlink_deliver_tap+0x2e/0x1b0
[  198.895855][T10308]  netlink_unicast+0x82f/0x9e0
[  198.895866][T10308]  ? __pfx_netlink_unicast+0x10/0x10
[  198.895874][T10308]  ? netlink_sendmsg+0x642/0xb30
[  198.895881][T10308]  ? skb_put+0x11b/0x210
[  198.895892][T10308]  netlink_sendmsg+0x805/0xb30
[  198.895904][T10308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.895914][T10308]  ? aa_sock_msg_perm+0xf1/0x1d0
[  198.895923][T10308]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  198.895931][T10308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  198.895940][T10308]  __sock_sendmsg+0x21c/0x270
[  198.895953][T10308]  ____sys_sendmsg+0x505/0x830
[  198.895965][T10308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  198.895979][T10308]  ? import_iovec+0x74/0xa0
[  198.895991][T10308]  ___sys_sendmsg+0x21f/0x2a0
[  198.896002][T10308]  ? __pfx____sys_sendmsg+0x10/0x10
[  198.896021][T10308]  ? __fget_files+0x2a/0x420
[  198.896034][T10308]  ? __fget_files+0x2a/0x420
[  198.896040][T10308]  ? __fget_files+0x3a0/0x420
[  198.896052][T10308]  __x64_sys_sendmsg+0x19b/0x260
[  198.896063][T10308]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  198.896080][T10308]  ? do_syscall_64+0xbe/0x3b0
[  198.896092][T10308]  do_syscall_64+0xfa/0x3b0
[  198.896101][T10308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.896108][T10308]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  198.896122][T10308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.896132][T10308] RIP: 0033:0x7f532e18eba9
[  198.896143][T10308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.896153][T10308] RSP: 002b:00007f532ef31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  198.896163][T10308] RAX: ffffffffffffffda RBX: 00007f532e3d5fa0 RCX: 00007f532e18eba9
[  198.896169][T10308] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000b
[  198.896173][T10308] RBP: 00007f532e211e19 R08: 0000000000000000 R09: 0000000000000000
[  198.896178][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.896182][T10308] R13: 00007f532e3d6038 R14: 00007f532e3d5fa0 R15: 00007ffdd5395608
[  198.896195][T10308]  </TASK>
[  198.896199][T10308] Mem-Info:
[  199.060509][T10308] active_anon:5595 inactive_anon:0 isolated_anon:0
[  199.060509][T10308]  active_file:15300 inactive_file:38295 isolated_file:0
[  199.060509][T10308]  unevictable:1768 dirty:180 writeback:0
[  199.060509][T10308]  slab_reclaimable:9921 slab_unreclaimable:54975
[  199.060509][T10308]  mapped:18030 shmem:2452 pagetables:1124
[  199.060509][T10308]  sec_pagetables:0 bounce:0
[  199.060509][T10308]  kernel_misc_reclaimable:0
[  199.060509][T10308]  free:291874 free_pcp:12373 free_cma:0
[  199.075117][T10308] Node 0 active_anon:11824kB inactive_anon:0kB active_file:37840kB inactive_file:139468kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27552kB dirty:608kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7516kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  199.100846][T10308] Node 1 active_anon:10420kB inactive_anon:0kB active_file:23360kB inactive_file:13712kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44568kB dirty:112kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3836kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  199.113923][T10308] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  199.135994][T10308] lowmem_reserve[]: 0 811 811 811 811
[  199.138411][T10308] Node 0 DMA32 free:288004kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11688kB inactive_anon:0kB active_file:37840kB inactive_file:139468kB unevictable:3536kB writepending:608kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:16280kB local_pcp:13448kB free_cma:0kB
[  199.151759][T10308] lowmem_reserve[]: 0 0 0 0 0
[  199.153832][T10308] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  199.170140][T10308] lowmem_reserve[]: 0 0 854 854 854
[  199.172381][T10308] Node 1 Normal free:405640kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10488kB inactive_anon:0kB active_file:23360kB inactive_file:13712kB unevictable:3536kB writepending:112kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33712kB local_pcp:14428kB free_cma:0kB
[  199.188914][T10308] lowmem_reserve[]: 0 0 0 0 0
[  199.191181][T10308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  199.196820][T10308] Node 0 DMA32: 487*4kB (U) 435*8kB (UM) 279*16kB (UM) 584*32kB (UM) 412*64kB (UM) 267*128kB (UME) 103*256kB (UM) 75*512kB (UME) 63*1024kB (UME) 8*2048kB (UM) 13*4096kB (UM) = 288036kB
[  199.205960][T10308] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  199.212962][T10308] Node 1 Normal: 3*4kB (UME) 11*8kB (ME) 2*16kB (UM) 72*32kB (UM) 180*64kB (UME) 242*128kB (UM) 211*256kB (UM) 191*512kB (UME) 166*1024kB (UM) 5*2048kB (ME) 7*4096kB (M) = 405636kB
[  199.221545][T10308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.227005][T10308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  199.231176][T10308] 56013 total pagecache pages
[  199.233373][T10308] 0 pages in swap cache
[  199.235292][T10308] Free swap  = 124996kB
[  199.237232][T10308] Total swap = 124996kB
[  199.239181][T10308] 786301 pages RAM
[  199.240825][T10308] 0 pages HighMem/MovableOnly
[  199.242813][T10308] 241347 pages reserved
[  199.248067][T10308] 0 pages cma reserved
[  199.371240][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.380126][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.386150][   T13] bond0 (unregistering): Released all slaves
[  199.418677][T10325] lo speed is unknown, defaulting to 1000
[  199.915928][T10354] netlink: 'syz.0.1922': attribute type 29 has an invalid length.
[  199.929222][T10354] netlink: 'syz.0.1922': attribute type 29 has an invalid length.
[  199.937509][T10325] wlan1 speed is unknown, defaulting to 1000
[  199.940242][T10354] netlink: 'syz.0.1922': attribute type 29 has an invalid length.
[  200.409591][   T13] hsr_slave_0: left promiscuous mode
[  200.413439][   T13] hsr_slave_1: left promiscuous mode
[  200.424047][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.428500][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.431880][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.436022][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.759176][T10384] netlink: 'syz.2.1932': attribute type 10 has an invalid length.
[  200.764589][ T5856] Bluetooth: hci0: command tx timeout
[  200.766984][   T13] team0 (unregistering): Port device team_slave_1 removed
[  200.810212][   T13] team0 (unregistering): Port device C removed
[  201.162523][T10400] __nla_validate_parse: 1 callbacks suppressed
[  201.162534][T10400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1940'.
[  201.269907][T10384] bond0: (slave bond_slave_0): Releasing backup interface
[  201.317706][T10325] chnl_net:caif_netlink_parms(): no params data found
[  201.479092][T10421] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1946'.
[  201.482759][T10421] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1946'.
[  201.489791][T10325] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.492979][T10325] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.506944][T10325] bridge_slave_0: entered allmulticast mode
[  201.523119][T10325] bridge_slave_0: entered promiscuous mode
[  201.551980][T10325] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.559536][T10325] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.562738][T10325] bridge_slave_1: entered allmulticast mode
[  201.566132][T10325] bridge_slave_1: entered promiscuous mode
[  201.611917][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.618856][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.649827][T10325] team0: Port device team_slave_0 added
[  201.656990][T10325] team0: Port device team_slave_1 added
[  201.688349][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.690812][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.701339][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.706317][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.708540][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.734881][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.852335][T10325] hsr_slave_0: entered promiscuous mode
[  201.856048][T10325] hsr_slave_1: entered promiscuous mode
[  202.878581][ T5856] Bluetooth: hci0: command tx timeout
[  204.046514][T10325] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  204.075922][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'.
[  204.079052][T10325] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  204.083666][T10473] openvswitch: netlink: Unknown nsh attribute 0
[  204.087000][T10473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.097104][T10325] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  204.109845][T10325] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.317794][T10493] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1961'.
[  204.338854][T10325] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.391426][T10325] 8021q: adding VLAN 0 to HW filter on device team0
[  204.399417][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'.
[  204.437268][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.440323][ T7935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.474243][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.477079][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.731764][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.822003][T10325] veth0_vlan: entered promiscuous mode
[  204.828426][T10325] veth1_vlan: entered promiscuous mode
[  204.868196][T10325] veth0_macvtap: entered promiscuous mode
[  204.872653][T10325] veth1_macvtap: entered promiscuous mode
[  204.892562][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.903650][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.915128][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.926292][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.926843][ T5856] Bluetooth: hci0: command tx timeout
[  204.939312][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.954076][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.007016][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.009737][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.045714][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.049461][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.151828][T10541] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1975'.
[  205.257360][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  205.310879][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'.
[  205.673288][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1990'.
[  205.725369][T10575] netlink: 'syz.0.1990': attribute type 1 has an invalid length.
[  205.729784][T10575] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1990'.
[  206.708814][T10590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1998'.
[  206.740808][T10593] netlink: 'syz.1.1999': attribute type 29 has an invalid length.
[  206.745207][T10593] netlink: 'syz.1.1999': attribute type 29 has an invalid length.
[  206.748728][T10593] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1999'.
[  206.752130][T10593] unsupported nla_type 58
[  206.754517][T10587] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1996'.
[  206.803024][T10596] syzkaller0: entered promiscuous mode
[  206.805755][T10596] syzkaller0: entered allmulticast mode
[  206.809857][T10597] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2001'.
[  206.830476][T10599] netlink: 'syz.2.2002': attribute type 2 has an invalid length.
[  206.833710][T10599] netlink: 'syz.2.2002': attribute type 1 has an invalid length.
[  206.838378][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2002'.
[  206.851493][T10599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'.
[  206.856705][T10599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'.
[  206.860727][T10599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'.
[  207.005076][ T5856] Bluetooth: hci0: command tx timeout
[  207.100783][T10612] netlink: 'syz.1.2008': attribute type 21 has an invalid length.
[  207.307874][T10622] sctp: [Deprecated]: syz.1.2012 (pid 10622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.307874][T10622] Use struct sctp_sack_info instead
[  208.600627][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'.
[  208.798300][T10662] netlink: 'syz.1.2030': attribute type 1 has an invalid length.
[  208.801479][T10662] netlink: 'syz.1.2030': attribute type 4 has an invalid length.
[  208.813917][T10662] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2030'.
[  208.823132][T10662] netlink: 'syz.1.2030': attribute type 1 has an invalid length.
[  208.826640][T10662] netlink: 'syz.1.2030': attribute type 4 has an invalid length.
[  211.043445][T10745] pim6reg1: entered allmulticast mode
[  211.050894][T10745] pim6reg1: left allmulticast mode
[  211.531304][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.536031][ T5856] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  211.901161][ T5856] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1
[  211.901839][ T5236] Bluetooth: hci0: hardware error 0x00
[  211.912786][ T5856] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10
[  211.978569][T10798] delete_channel: no stack
[  211.983539][T10798] delete_channel: no stack
[  212.229362][T10810] validate_nla: 4 callbacks suppressed
[  212.229399][T10810] netlink: 'syz.1.2097': attribute type 29 has an invalid length.
[  212.245427][T10810] netlink: 'syz.1.2097': attribute type 29 has an invalid length.
[  212.254518][T10810] netlink: 'syz.1.2097': attribute type 29 has an invalid length.
[  212.260412][T10810] netlink: 'syz.1.2097': attribute type 29 has an invalid length.
[  212.301884][T10814] __nla_validate_parse: 5 callbacks suppressed
[  212.301894][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'.
[  212.311879][T10814] netlink: 'syz.1.2099': attribute type 3 has an invalid length.
[  213.964559][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  214.066609][T10847] netlink: 'syz.2.2113': attribute type 21 has an invalid length.
[  214.070108][T10847] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2113'.
[  214.185971][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  214.191544][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  214.196110][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  214.201648][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  214.207418][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  214.269164][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.301069][T10852] lo speed is unknown, defaulting to 1000
[  214.335531][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.460763][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.507605][T10852] wlan1 speed is unknown, defaulting to 1000
[  214.584371][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.757587][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.763809][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.768758][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.772947][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.777515][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.842039][T10852] chnl_net:caif_netlink_parms(): no params data found
[  214.898901][   T12] bridge_slave_1: left allmulticast mode
[  214.905151][   T12] bridge_slave_1: left promiscuous mode
[  214.908160][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.918362][   T12] bridge_slave_0: left allmulticast mode
[  214.921031][   T12] bridge_slave_0: left promiscuous mode
[  214.923766][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.337660][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.343492][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.349370][   T12] bond0 (unregistering): Released all slaves
[  215.479591][T10864] lo speed is unknown, defaulting to 1000
[  215.479993][T10852] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.487858][T10852] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.491502][T10852] bridge_slave_0: entered allmulticast mode
[  215.497199][T10852] bridge_slave_0: entered promiscuous mode
[  215.568046][T10852] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.571034][T10852] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.578563][T10852] bridge_slave_1: entered allmulticast mode
[  215.583025][T10852] bridge_slave_1: entered promiscuous mode
[  215.663210][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.736589][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.740936][T10864] wlan1 speed is unknown, defaulting to 1000
[  215.780053][T10852] team0: Port device team_slave_0 added
[  215.785660][T10852] team0: Port device team_slave_1 added
[  215.825343][T10886] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2125'.
[  215.858931][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.861636][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.899346][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.912276][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.924367][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.933327][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.078320][   T12] hsr_slave_0: left promiscuous mode
[  216.081230][   T12] hsr_slave_1: left promiscuous mode
[  216.092418][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.095746][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.099413][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.101976][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.116620][   T12] veth1_macvtap: left promiscuous mode
[  216.118748][   T12] veth0_macvtap: left promiscuous mode
[  216.120704][   T12] veth1_vlan: left promiscuous mode
[  216.122893][   T12] veth0_vlan: left promiscuous mode
[  216.286304][ T5856] Bluetooth: hci0: command tx timeout
[  216.618115][   T12] team0 (unregistering): Port device team_slave_1 removed
[  216.649301][   T12] team0 (unregistering): Port device team_slave_0 removed
[  216.844267][ T5856] Bluetooth: hci1: command tx timeout
[  217.032300][T10852] hsr_slave_0: entered promiscuous mode
[  217.036641][T10852] hsr_slave_1: entered promiscuous mode
[  217.310194][T10864] chnl_net:caif_netlink_parms(): no params data found
[  217.596780][T10864] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.599464][T10864] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.602098][T10864] bridge_slave_0: entered allmulticast mode
[  217.605738][T10864] bridge_slave_0: entered promiscuous mode
[  217.630371][T10864] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.633064][T10864] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.635922][T10864] bridge_slave_1: entered allmulticast mode
[  217.639228][T10864] bridge_slave_1: entered promiscuous mode
[  217.701442][T10852] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  217.711670][T10864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.716785][T10852] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  217.729718][T10864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.734290][T10852] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  217.763298][T10852] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  217.801883][T10864] team0: Port device team_slave_0 added
[  217.809477][T10864] team0: Port device team_slave_1 added
[  217.847178][T10864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.849535][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.865189][T10864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.871767][T10864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.875815][T10864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.887052][T10864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.966220][T10864] hsr_slave_0: entered promiscuous mode
[  217.968966][T10864] hsr_slave_1: entered promiscuous mode
[  217.971412][T10864] debugfs: 'hsr0' already exists in 'hsr'
[  217.973320][T10864] Cannot create hsr debugfs directory
[  218.039320][T10946] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2139'.
[  218.172290][T10852] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.243007][T10852] 8021q: adding VLAN 0 to HW filter on device team0
[  218.262020][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.264687][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.283865][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.286336][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.301506][T10864] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  218.319410][T10864] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  218.326262][T10864] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  218.336799][T10864] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  218.366069][ T5856] Bluetooth: hci0: command tx timeout
[  218.519932][T10864] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.557774][T10864] 8021q: adding VLAN 0 to HW filter on device team0
[  218.579394][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.581596][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.598999][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.601502][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.611663][T10973] netlink: 'syz.2.2145': attribute type 29 has an invalid length.
[  218.617110][T10973] netlink: 'syz.2.2145': attribute type 29 has an invalid length.
[  218.633540][T10973] netlink: 'syz.2.2145': attribute type 29 has an invalid length.
[  218.646685][T10973] netlink: 'syz.2.2145': attribute type 29 has an invalid length.
[  218.709335][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.778348][T10852] veth0_vlan: entered promiscuous mode
[  218.796526][T10852] veth1_vlan: entered promiscuous mode
[  218.802200][T10983] xt_socket: unknown flags 0x6
[  218.836580][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.859064][T10852] veth0_macvtap: entered promiscuous mode
[  218.868756][T10852] veth1_macvtap: entered promiscuous mode
[  218.896582][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.912947][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.935080][ T5856] Bluetooth: hci1: command tx timeout
[  218.947588][ T5913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.960777][ T5913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.966400][ T5913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.970238][ T5913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.071364][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.073836][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.133723][T10995] delete_channel: no stack
[  219.134534][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.142282][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.181576][T10998] tQ6\bY4: renamed from lo (while UP)
[  219.205304][T10864] veth0_vlan: entered promiscuous mode
[  219.224768][T10864] veth1_vlan: entered promiscuous mode
[  219.270934][T10864] veth0_macvtap: entered promiscuous mode
[  219.276558][T10864] veth1_macvtap: entered promiscuous mode
[  219.290758][T10864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.303639][T10864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.317877][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.333770][ T5913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.339168][ T5913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.342272][ T5913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.428599][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.437309][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.507075][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.510231][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.597058][T11009] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2118'.
[  220.017619][T11025] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2161'.
[  220.021402][T11025] tc_dump_action: action bad kind
[  220.457883][ T5856] Bluetooth: hci0: command tx timeout
[  221.018596][ T5856] Bluetooth: hci1: command tx timeout
[  222.015733][T11048] netlink: 'syz.2.2167': attribute type 29 has an invalid length.
[  222.035901][T11048] netlink: 'syz.2.2167': attribute type 29 has an invalid length.
[  222.043130][T11048] netlink: 'syz.2.2167': attribute type 29 has an invalid length.
[  222.387865][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'.
[  222.524675][ T5856] Bluetooth: hci0: command tx timeout
[  223.084524][ T5856] Bluetooth: hci1: command tx timeout
[  223.146585][T11082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2181'.
[  223.149951][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'.
[  223.505658][T11104] netlink: 'syz.4.2190': attribute type 21 has an invalid length.
[  223.508658][T11104] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2190'.
[  223.512214][T11104] netlink: 'syz.4.2190': attribute type 4 has an invalid length.
[  223.658898][T11110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2195'.
[  223.881052][T11119] openvswitch: netlink: IP tunnel dst address not specified
[  224.530470][T11132] netlink: 26 bytes leftover after parsing attributes in process `syz.4.2205'.
[  224.540559][T11134] netlink: 'syz.3.2206': attribute type 21 has an invalid length.
[  224.543667][T11134] netlink: 'syz.3.2206': attribute type 1 has an invalid length.
[  224.555977][T11134] netlink: 15202 bytes leftover after parsing attributes in process `syz.3.2206'.
[  224.730449][T11142] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2210'.
[  224.968449][T11160] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2220'.
[  225.187601][T11180] netlink: 'syz.3.2228': attribute type 2 has an invalid length.
[  225.198809][T11180] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.2228'.
[  225.270956][T11186] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  225.706395][T11192] netlink: 'syz.4.2234': attribute type 1 has an invalid length.
[  225.816868][T11198] syzkaller0: entered promiscuous mode
[  225.819071][T11198] syzkaller0: entered allmulticast mode
[  226.111837][T11216] netlink: 'syz.4.2242': attribute type 5 has an invalid length.
[  226.115472][T11216] netlink: 'syz.4.2242': attribute type 7 has an invalid length.
[  226.117903][T11216] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2242'.
[  227.576611][T11224] C: renamed from team_slave_0 (while UP)
[  227.582774][T11224] netlink: 'syz.2.2247': attribute type 3 has an invalid length.
[  227.591488][T11224] netlink: 'syz.2.2247': attribute type 1 has an invalid length.
[  227.701824][T11232] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  227.981867][T11259] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  228.773366][T11271] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  229.737168][T11340] netlink: 'syz.4.2291': attribute type 29 has an invalid length.
[  229.741514][T11340] netlink: 'syz.4.2291': attribute type 29 has an invalid length.
[  229.749924][T11340] __nla_validate_parse: 3 callbacks suppressed
[  229.749941][T11340] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2291'.
[  230.749712][T11373] netlink: 'syz.4.2302': attribute type 1 has an invalid length.
[  231.085931][ T5856] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7
[  231.126218][T11406] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  231.253562][ T5856] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  231.583416][T11426] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2326'.
[  232.871696][T11463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.136151][T11481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2350'.
[  233.141896][T11481] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  233.282036][T11488] netlink: 'syz.4.2352': attribute type 10 has an invalid length.
[  233.305987][T11488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2352'.
[  233.309565][T11488] ipvlan1: entered promiscuous mode
[  233.311507][T11488] ipvlan1: entered allmulticast mode
[  233.314072][T11488] veth0_vlan: entered allmulticast mode
[  233.320795][T11488] bridge0: port 3(ipvlan1) entered blocking state
[  233.326975][T11488] bridge0: port 3(ipvlan1) entered disabled state
[  233.332962][T11488] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  233.335429][ T5856] Bluetooth: hci0: command tx timeout
[  234.143919][T11497] bpf: Bad value for 'mode'
[  234.646471][T11495] netlink: 'syz.3.2355': attribute type 29 has an invalid length.
[  234.768617][T11506] netlink: 'syz.4.2359': attribute type 40 has an invalid length.
[  234.979429][T11506] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.038215][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2364'.
[  235.511803][T11542] netlink: 'syz.3.2375': attribute type 13 has an invalid length.
[  235.515292][T11542] netlink: 'syz.3.2375': attribute type 58 has an invalid length.
[  235.518339][T11542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2375'.
[  236.313409][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'.
[  236.322114][T11560] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2383'.
[  236.640156][ T5856] Bluetooth: hci1: Malformed LE Event: 0x0d
[  236.865160][T11591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.940696][T11594] sctp: [Deprecated]: syz.3.2399 (pid 11594) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.940696][T11594] Use struct sctp_sack_info instead
[  237.180584][T11592] svc: failed to register nfsdv3 RPC service (errno 111).
[  237.188068][T11592] svc: failed to register nfsaclv3 RPC service (errno 111).
[  237.772691][T11626] netlink: 'syz.3.2415': attribute type 2 has an invalid length.
[  237.920004][T11632] netlink: 'syz.3.2416': attribute type 29 has an invalid length.
[  237.951944][T11629] netlink: 'syz.3.2416': attribute type 10 has an invalid length.
[  237.979175][T11634] netlink: 'syz.4.2418': attribute type 10 has an invalid length.
[  237.982585][T11634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2418'.
[  238.860236][T11629] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.868649][T11629] team0: Port device bond0 added
[  238.871281][T11634] batadv0: entered promiscuous mode
[  238.873630][T11634] batadv0: entered allmulticast mode
[  238.880232][T11634] bridge0: port 3(batadv0) entered blocking state
[  238.888134][T11634] bridge0: port 3(batadv0) entered disabled state
[  238.893560][T11634] bridge0: port 3(batadv0) entered blocking state
[  238.896509][T11634] bridge0: port 3(batadv0) entered forwarding state
[  239.005362][T11641] netlink: 'syz.2.2421': attribute type 1 has an invalid length.
[  239.008166][T11641] netlink: 'syz.2.2421': attribute type 4 has an invalid length.
[  239.011170][T11641] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2421'.
[  239.016480][T11641] netlink: 'syz.2.2421': attribute type 1 has an invalid length.
[  239.021567][T11641] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2421'.
[  239.065353][T11648] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2422'.
[  239.137884][ T7068] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  239.141740][ T7068] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  239.388159][T11664] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2432'.
[  239.429214][T11669] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2434'.
[  239.786108][T11689] validate_nla: 4 callbacks suppressed
[  239.786125][T11689] netlink: 'syz.4.2443': attribute type 29 has an invalid length.
[  239.794064][T11689] netlink: 'syz.4.2443': attribute type 29 has an invalid length.
[  239.798537][T11689] netlink: 'syz.4.2443': attribute type 29 has an invalid length.
[  240.165559][T11703] netlink: 'syz.2.2450': attribute type 2 has an invalid length.
[  240.168446][T11703] netlink: 'syz.2.2450': attribute type 8 has an invalid length.
[  240.171054][T11703] __nla_validate_parse: 2 callbacks suppressed
[  240.171061][T11703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2450'.
[  240.592567][T11714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.278096][T11756] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.282525][T11756] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.359362][T11762] netlink: 'syz.3.2477': attribute type 2 has an invalid length.
[  241.614396][T11775] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2483'.
[  241.680756][T11780] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2485'.
[  241.688005][T11780] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2485'.
[  242.371515][T11812] netlink: 'syz.4.2500': attribute type 2 has an invalid length.
[  243.342148][T11834] netlink: 'syz.4.2509': attribute type 1 has an invalid length.
[  243.423345][T11840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2512'.
[  243.433146][T11840] netlink: 'syz.4.2512': attribute type 1 has an invalid length.
[  243.443202][T11840] netlink: 'syz.4.2512': attribute type 2 has an invalid length.
[  243.613162][T11849] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  243.617627][T11849] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  243.893686][T11860] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2522'.
[  243.897155][T11860] nbd: illegal input index 65540
[  244.469945][T11896] netlink: 802 bytes leftover after parsing attributes in process `syz.4.2539'.
[  244.622090][T11908] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2544'.
[  244.652105][T11910] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2546'.
[  244.912753][T11925] netlink: 628 bytes leftover after parsing attributes in process `syz.2.2553'.
[  245.705035][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2572'.
[  245.870780][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2577'.
[  246.201620][T11991] validate_nla: 2 callbacks suppressed
[  246.201636][T11991] netlink: 'syz.2.2584': attribute type 17 has an invalid length.
[  246.211908][T11991] netlink: 'syz.2.2584': attribute type 16 has an invalid length.
[  246.216278][T11991] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2584'.
[  246.523521][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'.
[  246.543002][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'.
[  246.623460][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'.
[  246.634738][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2590'.
[  246.963963][T12018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2597'.
[  247.319954][T12037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2605'.
[  247.450524][T12048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2610'.
[  248.187888][T12069] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  248.198022][T12069] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  248.811851][T12116] netlink: 'syz.2.2639': attribute type 1 has an invalid length.
[  248.876036][T12121] netlink: 'syz.4.2644': attribute type 29 has an invalid length.
[  248.879988][T12121] netlink: 'syz.4.2644': attribute type 29 has an invalid length.
[  249.032072][T12133] netlink: 'syz.3.2649': attribute type 14 has an invalid length.
[  249.670346][T12167] xt_l2tp: missing protocol rule (udp|l2tpip)
[  250.032670][T12175] tap0: tun_chr_ioctl cmd 1074025678
[  250.036844][T12175] tap0: group set to 0
[  251.232620][T12208] netlink: 'syz.2.2678': attribute type 10 has an invalid length.
[  255.951136][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.953758][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.738979][T12257] __nla_validate_parse: 4 callbacks suppressed
[  256.738996][T12257] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2704'.
[  256.804934][T12259] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  256.806855][T12266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2708'.
[  256.817304][T12266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2708'.
[  256.821712][T12266] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2708'.
[  257.093929][T12289] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2719'.
[  258.454559][T12328] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.459094][T12328] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.465792][T12328] bridge0: entered allmulticast mode
[  258.515104][T12328] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.518087][T12328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.521989][T12328] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.526065][T12328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.537482][T12328] bridge0: entered promiscuous mode
[  258.550635][T12335] netlink: 'syz.2.2740': attribute type 2 has an invalid length.
[  258.553644][T12335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2740'.
[  258.979686][T12356] openvswitch: netlink: Duplicate or invalid key (type 0).
[  258.983063][T12356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.110711][T12358] pimreg: tun_chr_ioctl cmd 1074025678
[  259.126458][T12358] pimreg: tun_chr_ioctl cmd 1074025677
[  259.129262][T12358] pimreg: linktype set to 778
[  261.917408][T12368] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2755'.
[  262.467735][T12407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2774'.
[  262.472784][T12405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2774'.
[  263.118569][T12411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2775'.
[  263.121687][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2775'.
[  263.220701][T12414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2776'.
[  264.313302][T12452] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2793'.
[  265.068703][ T5856] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  265.215762][T12466] netlink: 'syz.4.2799': attribute type 32 has an invalid length.
[  265.370770][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'.
[  265.412869][T12482] netlink: 'syz.3.2807': attribute type 4 has an invalid length.
[  265.757733][T12501] netlink: 'syz.3.2816': attribute type 33 has an invalid length.
[  265.760220][T12501] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2816'.
[  265.938328][T12506] syzkaller0: entered promiscuous mode
[  265.941373][T12506] syzkaller0: entered allmulticast mode
[  266.766079][T12518] netlink: set zone limit has 4 unknown bytes
[  267.236316][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2826'.
[  268.727816][T12534] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.730419][T12534] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.745048][T12534] bridge0: left promiscuous mode
[  268.798981][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'.
[  268.808037][T12541] bridge_slave_1: left allmulticast mode
[  268.810523][T12541] bridge_slave_1: left promiscuous mode
[  268.815929][T12541] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.837386][T12541] bridge_slave_0: left allmulticast mode
[  268.839667][T12541] bridge_slave_0: left promiscuous mode
[  268.842039][T12541] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.994558][T12551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.002109][T12551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  269.998682][T12592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2857'.
[  270.009046][T12592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2857'.
[  270.013051][T12592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'.
[  270.548799][ T5913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.666098][ T5913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.739541][ T5913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.812133][ T5913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.953551][ T5913] bridge0: port 3(batadv0) entered disabled state
[  270.967694][ T5913] bridge_slave_1: left allmulticast mode
[  270.970180][ T5913] bridge_slave_1: left promiscuous mode
[  270.972875][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.980237][ T5913] bridge_slave_0: left allmulticast mode
[  270.982726][ T5913] bridge_slave_0: left promiscuous mode
[  270.986372][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.353174][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.359620][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.366554][ T5913] bond0 (unregistering): Released all slaves
[  271.743396][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  271.756189][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  271.760815][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  271.766600][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.770521][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.827600][T12641] lo speed is unknown, defaulting to 1000
[  271.959180][ T5913] hsr_slave_0: left promiscuous mode
[  271.962106][ T5913] hsr_slave_1: left promiscuous mode
[  271.965793][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.968950][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.972688][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.977534][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.001069][ T5913] veth1_macvtap: left promiscuous mode
[  272.003417][ T5913] veth0_macvtap: left promiscuous mode
[  272.006269][ T5913] veth1_vlan: left promiscuous mode
[  272.008573][ T5913] veth0_vlan: left promiscuous mode
[  272.329343][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  272.334329][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  272.338034][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  272.338458][T12650] netlink: 'syz.2.2872': attribute type 28 has an invalid length.
[  272.343938][T12650] netlink: 'syz.2.2872': attribute type 29 has an invalid length.
[  272.352455][T12650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2872'.
[  272.356575][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  272.361111][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  272.585244][T12656] netlink: 'syz.2.2874': attribute type 1 has an invalid length.
[  272.588613][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'.
[  272.602798][ T5913] team0 (unregistering): Port device team_slave_1 removed
[  272.645623][ T5913] team0 (unregistering): Port device team_slave_0 removed
[  273.112283][T12641] wlan1 speed is unknown, defaulting to 1000
[  273.184323][T12651] lo speed is unknown, defaulting to 1000
[  273.367187][T12641] chnl_net:caif_netlink_parms(): no params data found
[  273.398782][T12651] wlan1 speed is unknown, defaulting to 1000
[  273.567647][T12641] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.576815][T12641] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.580441][T12641] bridge_slave_0: entered allmulticast mode
[  273.597586][T12641] bridge_slave_0: entered promiscuous mode
[  273.607277][T12641] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.610179][T12641] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.613185][T12641] bridge_slave_1: entered allmulticast mode
[  273.625417][T12641] bridge_slave_1: entered promiscuous mode
[  273.673487][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.700442][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.709636][T12682] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2880'.
[  273.769095][T12641] team0: Port device team_slave_0 added
[  273.805871][ T5913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.817226][T12641] team0: Port device team_slave_1 added
[  273.823994][T12651] chnl_net:caif_netlink_parms(): no params data found
[  273.881561][ T5913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.884449][ T5856] Bluetooth: hci0: command tx timeout
[  273.905527][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.908407][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.921106][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.945919][ T5913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.962169][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.965455][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.976716][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.016281][ T5913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.092211][T12651] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.096540][T12651] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.099762][T12651] bridge_slave_0: entered allmulticast mode
[  274.103720][T12651] bridge_slave_0: entered promiscuous mode
[  274.114973][T12651] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.120321][T12651] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.123320][T12651] bridge_slave_1: entered allmulticast mode
[  274.129088][T12651] bridge_slave_1: entered promiscuous mode
[  274.142159][T12641] hsr_slave_0: entered promiscuous mode
[  274.146116][T12641] hsr_slave_1: entered promiscuous mode
[  274.149284][T12641] debugfs: 'hsr0' already exists in 'hsr'
[  274.151990][T12641] Cannot create hsr debugfs directory
[  274.271764][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.318950][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.404454][T12651] team0: Port device team_slave_0 added
[  274.412510][T12651] team0: Port device team_slave_1 added
[  274.444465][ T5856] Bluetooth: hci1: command tx timeout
[  274.831122][ T5913] team0: Port device bond0 removed
[  274.838213][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.847600][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.852830][ T5913] bond0 (unregistering): Released all slaves
[  274.866375][T12702] netlink: 'syz.2.2884': attribute type 21 has an invalid length.
[  274.870160][T12702] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2884'.
[  274.895526][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.898496][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.910435][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.000919][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.003654][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.016033][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.150271][T12651] hsr_slave_0: entered promiscuous mode
[  275.153270][T12651] hsr_slave_1: entered promiscuous mode
[  275.157020][T12651] debugfs: 'hsr0' already exists in 'hsr'
[  275.159214][T12651] Cannot create hsr debugfs directory
[  275.359045][T12641] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  275.392490][T12641] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  275.487113][T12641] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  275.517283][T12641] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  275.521397][T12725] openvswitch: netlink: IP tunnel dst address not specified
[  275.569234][ T5913] hsr_slave_0: left promiscuous mode
[  275.585895][ T5913] hsr_slave_1: left promiscuous mode
[  275.592814][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.596266][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.600303][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.603324][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.969619][ T5856] Bluetooth: hci0: command tx timeout
[  276.030998][ T5913] veth1_macvtap: left promiscuous mode
[  276.033464][ T5913] veth0_macvtap: left promiscuous mode
[  276.040932][ T5913] veth1_vlan: left promiscuous mode
[  276.043183][ T5913] veth0_vlan: left promiscuous mode
[  276.265134][T12735] ==================================================================
[  276.268372][T12735] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  276.270939][T12735] Read of size 2 at addr ffff888114086e42 by task syz.2.2897/12735
[  276.275360][T12735] 
[  276.276426][T12735] CPU: 0 UID: 0 PID: 12735 Comm: syz.2.2897 Not tainted syzkaller #0 PREEMPT(full) 
[  276.276448][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.276459][T12735] Call Trace:
[  276.276468][T12735]  <TASK>
[  276.276478][T12735]  dump_stack_lvl+0x189/0x250
[  276.276501][T12735]  ? __kasan_check_byte+0x12/0x40
[  276.276524][T12735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.276541][T12735]  ? lock_release+0x4b/0x3e0
[  276.276563][T12735]  ? __virt_addr_valid+0x4a5/0x5c0
[  276.276584][T12735]  print_report+0xca/0x240
[  276.276599][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  276.276648][T12735]  kasan_report+0x118/0x150
[  276.276669][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  276.276690][T12735]  __xfrm_state_lookup+0x6ad/0x8d0
[  276.276710][T12735]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  276.276728][T12735]  ? xfrm_state_lookup+0x45/0x1e0
[  276.276748][T12735]  xfrm_state_lookup+0x11e/0x1e0
[  276.276778][T12735]  ipcomp4_init_state+0x205/0xb20
[  276.276800][T12735]  ? __xfrm_init_state+0x7ef/0x13f0
[  276.276822][T12735]  __xfrm_init_state+0xa76/0x13f0
[  276.276843][T12735]  ? __xfrm_init_state+0x7ef/0x13f0
[  276.276866][T12735]  xfrm_add_sa+0x2f5b/0x4070
[  276.276888][T12735]  ? __pfx_xfrm_add_sa+0x10/0x10
[  276.276906][T12735]  ? apparmor_capable+0x137/0x1b0
[  276.276925][T12735]  ? __nla_parse+0x40/0x60
[  276.276942][T12735]  xfrm_user_rcv_msg+0x7a3/0xab0
[  276.276965][T12735]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  276.277011][T12735]  ? __pfx___mutex_trylock_common+0x10/0x10
[  276.277028][T12735]  ? rcu_is_watching+0x15/0xb0
[  276.277045][T12735]  ? trace_contention_end+0x39/0x120
[  276.277061][T12735]  ? __mutex_lock+0x335/0x1350
[  276.277081][T12735]  netlink_rcv_skb+0x208/0x470
[  276.277099][T12735]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  276.277119][T12735]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.277140][T12735]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.277157][T12735]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.277173][T12735]  xfrm_netlink_rcv+0x79/0x90
[  276.277193][T12735]  netlink_unicast+0x82f/0x9e0
[  276.277209][T12735]  ? __pfx_netlink_unicast+0x10/0x10
[  276.277240][T12735]  ? netlink_sendmsg+0x642/0xb30
[  276.277253][T12735]  ? skb_put+0x11b/0x210
[  276.277271][T12735]  netlink_sendmsg+0x805/0xb30
[  276.277290][T12735]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.277307][T12735]  ? aa_sock_msg_perm+0xf1/0x1d0
[  276.277322][T12735]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.277338][T12735]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.277354][T12735]  __sock_sendmsg+0x21c/0x270
[  276.277375][T12735]  ____sys_sendmsg+0x505/0x830
[  276.277395][T12735]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.277416][T12735]  ? import_iovec+0x74/0xa0
[  276.277436][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  276.277454][T12735]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.277485][T12735]  ? __fget_files+0x2a/0x420
[  276.277498][T12735]  ? __fget_files+0x3a0/0x420
[  276.277513][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  276.277533][T12735]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  276.277554][T12735]  ? rcu_is_watching+0x15/0xb0
[  276.277570][T12735]  ? do_syscall_64+0xbe/0x3b0
[  276.277588][T12735]  do_syscall_64+0xfa/0x3b0
[  276.277604][T12735]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.277618][T12735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.277668][T12735]  ? exc_page_fault+0x9f/0xf0
[  276.277698][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.277714][T12735] RIP: 0033:0x7f532e18eba9
[  276.277729][T12735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.277744][T12735] RSP: 002b:00007f532ef31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.277762][T12735] RAX: ffffffffffffffda RBX: 00007f532e3d5fa0 RCX: 00007f532e18eba9
[  276.277784][T12735] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  276.277794][T12735] RBP: 00007f532e211e19 R08: 0000000000000000 R09: 0000000000000000
[  276.277804][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.277813][T12735] R13: 00007f532e3d6038 R14: 00007f532e3d5fa0 R15: 00007ffdd5395608
[  276.277833][T12735]  </TASK>
[  276.277839][T12735] 
[  276.447204][T12735] Allocated by task 9757:
[  276.449200][T12735]  kasan_save_track+0x3e/0x80
[  276.451151][T12735]  __kasan_slab_alloc+0x6c/0x80
[  276.453226][T12735]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  276.455468][T12735]  xfrm_state_alloc+0x24/0x2f0
[  276.457513][T12735]  __find_acq_core+0x8a7/0x1c00
[  276.459566][T12735]  xfrm_find_acq+0x78/0xa0
[  276.461471][T12735]  xfrm_alloc_userspi+0x6b3/0xc90
[  276.463840][T12735]  xfrm_user_rcv_msg+0x7a3/0xab0
[  276.465915][T12735]  netlink_rcv_skb+0x208/0x470
[  276.467957][T12735]  xfrm_netlink_rcv+0x79/0x90
[  276.470071][T12735]  netlink_unicast+0x82f/0x9e0
[  276.472106][T12735]  netlink_sendmsg+0x805/0xb30
[  276.474032][T12735]  __sock_sendmsg+0x21c/0x270
[  276.475972][T12735]  ____sys_sendmsg+0x505/0x830
[  276.477876][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  276.479804][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  276.481972][T12735]  do_syscall_64+0xfa/0x3b0
[  276.483883][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.486442][T12735] 
[  276.487568][T12735] Freed by task 5909:
[  276.489216][T12735]  kasan_save_track+0x3e/0x80
[  276.491109][T12735]  kasan_save_free_info+0x46/0x50
[  276.493110][T12735]  __kasan_slab_free+0x5b/0x80
[  276.495008][T12735]  kmem_cache_free+0x18f/0x400
[  276.496979][T12735]  xfrm_state_gc_task+0x52d/0x6b0
[  276.498976][T12735]  process_scheduled_works+0xae1/0x17b0
[  276.501221][T12735]  worker_thread+0x8a0/0xda0
[  276.503171][T12735]  kthread+0x711/0x8a0
[  276.504775][T12735]  ret_from_fork+0x439/0x7d0
[  276.507034][T12735]  ret_from_fork_asm+0x1a/0x30
[  276.509117][T12735] 
[  276.510171][T12735] The buggy address belongs to the object at ffff888114086d00
[  276.510171][T12735]  which belongs to the cache xfrm_state of size 928
[  276.516095][T12735] The buggy address is located 322 bytes inside of
[  276.516095][T12735]  freed 928-byte region [ffff888114086d00, ffff8881140870a0)
[  276.521401][T12735] 
[  276.522445][T12735] The buggy address belongs to the physical page:
[  276.525250][T12735] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888114087a80 pfn:0x114084
[  276.529559][T12735] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  276.533150][T12735] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  276.536800][T12735] page_type: f5(slab)
[  276.538574][T12735] raw: 057ff00000000040 ffff88801af2d640 dead000000000122 0000000000000000
[  276.542063][T12735] raw: ffff888114087a80 00000000800e000c 00000000f5000000 0000000000000000
[  276.545410][T12735] head: 057ff00000000040 ffff88801af2d640 dead000000000122 0000000000000000
[  276.548847][T12735] head: ffff888114087a80 00000000800e000c 00000000f5000000 0000000000000000
[  276.552477][T12735] head: 057ff00000000002 ffffea0004502101 00000000ffffffff 00000000ffffffff
[  276.555959][T12735] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  276.559337][T12735] page dumped because: kasan: bad access detected
[  276.561934][T12735] page_owner tracks the page as allocated
[  276.564276][T12735] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6329, tgid 6328 (syz.0.188), ts 80329132807, free_ts 80329091592
[  276.572271][T12735]  post_alloc_hook+0x240/0x2a0
[  276.574129][T12735]  get_page_from_freelist+0x21e4/0x22c0
[  276.576395][T12735]  __alloc_frozen_pages_noprof+0x181/0x370
[  276.578847][T12735]  alloc_pages_mpol+0x232/0x4a0
[  276.580912][T12735]  allocate_slab+0x8a/0x370
[  276.582669][T12735]  ___slab_alloc+0xbeb/0x1420
[  276.584388][T12735]  kmem_cache_alloc_noprof+0x283/0x3c0
[  276.586358][T12735]  xfrm_state_alloc+0x24/0x2f0
[  276.588082][T12735]  pfkey_add+0x6e4/0x2e00
[  276.589730][T12735]  pfkey_sendmsg+0xbfe/0x1090
[  276.591566][T12735]  __sock_sendmsg+0x21c/0x270
[  276.593463][T12735]  ____sys_sendmsg+0x505/0x830
[  276.595435][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  276.597417][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  276.599557][T12735]  do_syscall_64+0xfa/0x3b0
[  276.601567][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.604093][T12735] page last free pid 6329 tgid 6328 stack trace:
[  276.606659][T12735]  __free_frozen_pages+0xbc4/0xd30
[  276.608652][T12735]  stack_depot_save_flags+0x436/0x860
[  276.610741][T12735]  kasan_save_track+0x4f/0x80
[  276.612627][T12735]  __kasan_kmalloc+0x93/0xb0
[  276.614489][T12735]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  276.617080][T12735]  kmalloc_reserve+0x136/0x290
[  276.619087][T12735]  __alloc_skb+0x142/0x2d0
[  276.621053][T12735]  pfkey_sendmsg+0x1dd/0x1090
[  276.623100][T12735]  __sock_sendmsg+0x21c/0x270
[  276.625138][T12735]  ____sys_sendmsg+0x505/0x830
[  276.627116][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  276.629018][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  276.630983][T12735]  do_syscall_64+0xfa/0x3b0
[  276.632856][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.635223][T12735] 
[  276.636218][T12735] Memory state around the buggy address:
[  276.638563][T12735]  ffff888114086d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.642267][T12735]  ffff888114086d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.645551][T12735] >ffff888114086e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.648740][T12735]                                            ^
[  276.651147][T12735]  ffff888114086e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.654280][T12735]  ffff888114086f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.657609][T12735] ==================================================================
[  276.666373][ T5856] Bluetooth: hci1: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  276.673957][T12735] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  276.676877][T12735] CPU: 0 UID: 0 PID: 12735 Comm: syz.2.2897 Not tainted syzkaller #0 PREEMPT(full) 
[  276.680709][T12735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.685248][T12735] Call Trace:
[  276.686623][T12735]  <TASK>
[  276.687883][T12735]  dump_stack_lvl+0x99/0x250
[  276.689781][T12735]  ? __asan_memcpy+0x40/0x70
[  276.691650][T12735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.693724][T12735]  ? __pfx__printk+0x10/0x10
[  276.695588][T12735]  vpanic+0x281/0x750
[  276.697189][T12735]  ? preempt_schedule+0xae/0xc0
[  276.699122][T12735]  ? __pfx_vpanic+0x10/0x10
[  276.700947][T12735]  ? preempt_schedule_common+0x83/0xd0
[  276.703097][T12735]  ? preempt_schedule+0xae/0xc0
[  276.705039][T12735]  ? __pfx_preempt_schedule+0x10/0x10
[  276.707189][T12735]  panic+0xb9/0xc0
[  276.708797][T12735]  ? __pfx_panic+0x10/0x10
[  276.710681][T12735]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  276.713168][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  276.715384][T12735]  check_panic_on_warn+0x89/0xb0
[  276.717411][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  276.719506][T12735]  end_report+0x78/0x160
[  276.721258][T12735]  kasan_report+0x129/0x150
[  276.723114][T12735]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  276.725197][T12735]  __xfrm_state_lookup+0x6ad/0x8d0
[  276.727274][T12735]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  276.729469][T12735]  ? xfrm_state_lookup+0x45/0x1e0
[  276.731487][T12735]  xfrm_state_lookup+0x11e/0x1e0
[  276.733493][T12735]  ipcomp4_init_state+0x205/0xb20
[  276.735597][T12735]  ? __xfrm_init_state+0x7ef/0x13f0
[  276.737831][T12735]  __xfrm_init_state+0xa76/0x13f0
[  276.739992][T12735]  ? __xfrm_init_state+0x7ef/0x13f0
[  276.742202][T12735]  xfrm_add_sa+0x2f5b/0x4070
[  276.744190][T12735]  ? __pfx_xfrm_add_sa+0x10/0x10
[  276.746175][T12735]  ? apparmor_capable+0x137/0x1b0
[  276.748218][T12735]  ? __nla_parse+0x40/0x60
[  276.750042][T12735]  xfrm_user_rcv_msg+0x7a3/0xab0
[  276.751922][T12735]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  276.754227][T12735]  ? __pfx___mutex_trylock_common+0x10/0x10
[  276.756715][T12735]  ? rcu_is_watching+0x15/0xb0
[  276.758819][T12735]  ? trace_contention_end+0x39/0x120
[  276.760879][T12735]  ? __mutex_lock+0x335/0x1350
[  276.762863][T12735]  netlink_rcv_skb+0x208/0x470
[  276.764796][T12735]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  276.766997][T12735]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.769153][T12735]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.771300][T12735]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.773535][T12735]  xfrm_netlink_rcv+0x79/0x90
[  276.775653][T12735]  netlink_unicast+0x82f/0x9e0
[  276.777612][T12735]  ? __pfx_netlink_unicast+0x10/0x10
[  276.779811][T12735]  ? netlink_sendmsg+0x642/0xb30
[  276.781844][T12735]  ? skb_put+0x11b/0x210
[  276.783630][T12735]  netlink_sendmsg+0x805/0xb30
[  276.786115][T12735]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.788426][T12735]  ? aa_sock_msg_perm+0xf1/0x1d0
[  276.790537][T12735]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.793101][T12735]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.795214][T12735]  __sock_sendmsg+0x21c/0x270
[  276.797454][T12735]  ____sys_sendmsg+0x505/0x830
[  276.799421][T12735]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.801678][T12735]  ? import_iovec+0x74/0xa0
[  276.803500][T12735]  ___sys_sendmsg+0x21f/0x2a0
[  276.805483][T12735]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.807654][T12735]  ? __fget_files+0x2a/0x420
[  276.809656][T12735]  ? __fget_files+0x3a0/0x420
[  276.811595][T12735]  __x64_sys_sendmsg+0x19b/0x260
[  276.813733][T12735]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  276.816103][T12735]  ? rcu_is_watching+0x15/0xb0
[  276.818256][T12735]  ? do_syscall_64+0xbe/0x3b0
[  276.820284][T12735]  do_syscall_64+0xfa/0x3b0
[  276.822198][T12735]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.824266][T12735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.826614][T12735]  ? exc_page_fault+0x9f/0xf0
[  276.828488][T12735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.830958][T12735] RIP: 0033:0x7f532e18eba9
[  276.832905][T12735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.840981][T12735] RSP: 002b:00007f532ef31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.844322][T12735] RAX: ffffffffffffffda RBX: 00007f532e3d5fa0 RCX: 00007f532e18eba9
[  276.847742][T12735] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  276.851019][T12735] RBP: 00007f532e211e19 R08: 0000000000000000 R09: 0000000000000000
[  276.854302][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.857441][T12735] R13: 00007f532e3d6038 R14: 00007f532e3d5fa0 R15: 00007ffdd5395608
[  276.860653][T12735]  </TASK>
[  276.862665][T12735] Kernel Offset: disabled
[  276.864616][T12735] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:46:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013db RDI=00000000000013dc RBP=00000000000003f8 RSP=ffffc90003a0e930
R8 =ffff888020e10237 R9 =1ffff110041c2046 R10=dffffc0000000000 R11=ffffffff854fa300
R12=dffffc0000000000 R13=ffffffff99b02905 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa37c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f532ef316c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000038fc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f532e3a7498 00007f532e3a7470 XMM03=00007f532e3a74a8 00007f532e3a74a0
XMM04=00007f532ef0d100 00007f532e3a7460 XMM05=00007f532e3a7478 00007f532e3a74c0
XMM06=00007f532e3a74b8 00007f532e3a74b0 XMM07=00007f532e3a74a8 00007f532e3a74a0
XMM08=0000000000000000 00007f532e212ee7 XMM09=0000000000000000 00007f532e212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=72c3e326536ab700 RBX=ffffffff819695f8 RCX=72c3e326536ab700 RDX=0000000000000001
RSI=ffffffff8d9ba1cf RDI=ffffffff8be33e80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a930 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558dd795c8 CR3=0000000038fc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f532ef0d100 00007f532e3a7460 XMM05=00007f532e3a7478 00007f532e3a74c0
XMM06=00007f532e3a74b8 00007f532e3a74b0 XMM07=00007f532e3a74a8 00007f532e3a74a0
XMM08=0000000000000000 00007f532e212ee7 XMM09=0000000000000000 00007f532e212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
