last executing test programs:

4m19.059195986s ago: executing program 2 (id=320):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, 0x0, 0xa8}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001280)}, {0x0}], 0x2}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4)
sendmsg$kcm(r6, 0x0, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

4m18.633606124s ago: executing program 2 (id=323):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

4m18.43723887s ago: executing program 2 (id=330):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x29, 0x42, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x84)
syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

4m18.209204674s ago: executing program 2 (id=335):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd56, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

4m17.270997049s ago: executing program 2 (id=337):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

4m16.98270909s ago: executing program 2 (id=343):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x7, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRES8=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x40080)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, 0x0, 0x200ce0c0)
write$cgroup_subtree(r6, 0x0, 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="c6", 0x1}], 0x1}, 0x20000850)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3", 0x12}], 0x1}, 0x0)

4m1.180583495s ago: executing program 32 (id=343):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x7, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRES8=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048010}, 0x40080)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r7, 0x0, 0x200ce0c0)
write$cgroup_subtree(r6, 0x0, 0xfe33)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="c6", 0x1}], 0x1}, 0x20000850)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3", 0x12}], 0x1}, 0x0)

3m38.718519997s ago: executing program 1 (id=684):
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)

3m38.718151143s ago: executing program 1 (id=685):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

3m38.715406096s ago: executing program 1 (id=686):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r0, 0x0, 0x200000}, 0x18)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)

3m38.674101498s ago: executing program 1 (id=687):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x100000}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

3m37.643016226s ago: executing program 1 (id=693):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

3m37.545422922s ago: executing program 1 (id=696):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffd75, 0x0, 0x0, 0x0, 0x2}, 0xffffff39)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c", @ANYRES16, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)

3m22.565831414s ago: executing program 33 (id=696):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffd75, 0x0, 0x0, 0x0, 0x2}, 0xffffff39)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c", @ANYRES16, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)

3m21.511055636s ago: executing program 0 (id=863):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$kcm(r0, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)="ebb28f7fab53b914689eb969ff0ebd7dfe01c185fedbdd584a09829b5ee698f3b61432de4c91ab0fb3bac33a", 0x2c}], 0x1}, 0x4800)

3m21.509237612s ago: executing program 0 (id=865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009fffe0000000008000003"], 0x34}}, 0x84)

3m21.379100031s ago: executing program 0 (id=866):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3e, 0x0, 0x0)

3m21.37884038s ago: executing program 0 (id=867):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000032, 0xfffffbff, 0x3, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x20008080)

3m21.3765147s ago: executing program 0 (id=868):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

3m21.130136297s ago: executing program 0 (id=869):
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r1, 0x4)

3m6.142375853s ago: executing program 34 (id=869):
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000)=r1, 0x4)

2m37.361514528s ago: executing program 4 (id=1359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

2m37.292701011s ago: executing program 4 (id=1360):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x7f0}}, 0x0)

2m37.29246162s ago: executing program 4 (id=1361):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x23, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

2m37.222453944s ago: executing program 4 (id=1362):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x20004010)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x2200871, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0)

2m37.173484153s ago: executing program 4 (id=1363):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m35.677004352s ago: executing program 4 (id=1374):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x47, &(0x7f0000003fc0)}, 0xe)

2m20.672153751s ago: executing program 35 (id=1374):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x47, &(0x7f0000003fc0)}, 0xe)

58.413089253s ago: executing program 3 (id=2729):
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t')

58.2151457s ago: executing program 3 (id=2731):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000), 0x8)

58.214737587s ago: executing program 3 (id=2732):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000000400000008", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000000000000000000000080000000000000000000"], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x10)
perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1470c, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)

58.142319594s ago: executing program 3 (id=2733):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x45, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

58.140841489s ago: executing program 3 (id=2735):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000002fc0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)

57.850457116s ago: executing program 3 (id=2737):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

42.694168783s ago: executing program 36 (id=2737):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

1.020898554s ago: executing program 7 (id=3423):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2d, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x1000000}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20044841)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = socket$kcm(0x10, 0x2, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1b2968150001", @ANYRES16=r5, @ANYBLOB="33f38ed0"], 0xffdd)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r6, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4)
openat$cgroup_ro(r1, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random})
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840)
socketpair(0x24, 0xa, 0x3ff, &(0x7f0000000600))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100), 0x1001)

746.115991ms ago: executing program 6 (id=3427):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"})

651.715903ms ago: executing program 6 (id=3429):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)

451.362947ms ago: executing program 6 (id=3432):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc60", 0x14}], 0x1}, 0x40)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x174, 0xd}, 0x0, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x7fffffff, 0xffdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000ead751b3048b55071dfd09cd98da2ca461213b065627e9d6a7ece107ccf227d59042f0323791a2d0f03a127248a02aa88670b92747671c81de5b99a599f3230f883eb535ddf5b392811d4b58098772e8b66279da67ee589148b51a065b9cc62ce721446cb7fb385229249e36f9808dca97383a42b2b86d9bf7505edc684bc2338abcecb1cedb15499f700f0b4343be331dde94905972dbc5011c46c6abe074d0", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"})

361.778497ms ago: executing program 5 (id=3435):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x1, 0x5, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff8880b870dff9, 0x2}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33)
recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x2c)

316.994153ms ago: executing program 5 (id=3436):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a0104000000000000000001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

310.24906ms ago: executing program 7 (id=3437):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x8c}]}, {0x0, [0x30, 0x2e, 0x61, 0x3, 0x41, 0x3e]}}, 0x0, 0x2c, 0x0, 0x1, 0x1}, 0x28)

247.964883ms ago: executing program 7 (id=3438):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000000), 0x4)

247.673393ms ago: executing program 5 (id=3439):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000007c0), 0x4}, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004808}, 0x4004040)

236.080696ms ago: executing program 6 (id=3440):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x0)

235.674011ms ago: executing program 7 (id=3441):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

149.611715ms ago: executing program 7 (id=3442):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x400000000002, 0x6}, 0x8224, 0x3, 0x200, 0x6, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x5, 0x5811c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r1, 0x0, 0x3}, 0x18)

149.250399ms ago: executing program 5 (id=3443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)

89.471693ms ago: executing program 5 (id=3444):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c45630002008daa"], 0xfdef)
recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef)

87.588069ms ago: executing program 7 (id=3445):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x1e, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r5 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
gettid()
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40))

81.258343ms ago: executing program 5 (id=3446):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
setsockopt$sock_attach_bpf(r0, 0x107, 0x17, &(0x7f0000000000)=r3, 0x4)

688.284µs ago: executing program 6 (id=3447):
socket$netlink(0x10, 0x3, 0x7)

0s ago: executing program 6 (id=3448):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1942}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000100001600010025bd7000ffdbdf2500000000000000000000ffff64010100000000000000000000000000000000000ec8dbfd4e200003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d233000000ac1414aa00000000000000000000000001000000000000001000000000000000040000000000000001800000000000000c00000000000000f707000000000000f0aa000000000000feffffffffffffff000050000000000004000000000000000400000000000000020000000000000008c9000088262721080000002bbd7000073500000a0000001000000000000000ff0000000200008008001600ff010000"], 0x100}, 0x1, 0x0, 0x0, 0x8880}, 0x48000)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc300000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000004000380140000001100010000000000000000000102000a02421f67d98bb86931cca62eae7a8a5656bc3e8e44283655af282a0aa536bd4a2ffa717cf4fa6d661d951c806656cc65"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0xffffffffffffffae)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="15000000040000000600"/20, @ANYRES32, @ANYBLOB="0000e81400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000200000000000000000000000000000000000000000491bf3230cae49be1f884d5a97596523b8ed8ee52460836e5a477eb1dcbc44a4977f7513ad9a416ca7bb06e1ca24093df3be5cee024d733623ad148a03a7688e994ab4d0e95e3545a077ddc20c8e391d248a9880b7130c014f483135d80c497ba12ce6764db035f8d7de869c49767fb8f7bd40aa9c68d3f927d8241c5588fc51e71f46f122570369a0dea9c9124733e00a60c7f68159efcfce6b248e25a2c14a7d0b7cc0cd11548f984b7606345d77d524ef1e433b10"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

[ T6351]  kernel_misc_reclaimable:0
[   87.483212][ T6351]  free:305121 free_pcp:15788 free_cma:0
[   87.551667][ T6351] Node 0 active_anon:11348kB inactive_anon:0kB active_file:3216kB inactive_file:145048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36976kB dirty:5308kB writeback:0kB shmem:4676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6716kB pagetables:1756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.570461][ T6202] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.581401][ T6351] Node 1 active_anon:9664kB inactive_anon:0kB active_file:1656kB inactive_file:7904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35088kB dirty:452kB writeback:0kB shmem:5084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4364kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.586353][ T6202] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.592881][ T6351] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.621718][ T6202] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.632693][ T6351] lowmem_reserve[]: 0 811 811 811 811
[   87.639896][ T6351] Node 0 DMA32 free:304680kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11552kB inactive_anon:0kB active_file:3216kB inactive_file:145048kB unevictable:3536kB writepending:5308kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:28736kB local_pcp:14992kB free_cma:0kB
[   87.694559][ T6351] lowmem_reserve[]: 0 0 0 0 0
[   87.697380][ T6351] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   87.755391][ T6351] lowmem_reserve[]: 0 0 854 854 854
[   87.759199][ T6351] Node 1 Normal free:439824kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10312kB inactive_anon:0kB active_file:1656kB inactive_file:7912kB unevictable:3536kB writepending:452kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37112kB local_pcp:19848kB free_cma:0kB
[   87.817005][ T6351] lowmem_reserve[]: 0 0 0 0 0
[   87.819694][ T6351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   87.846168][ T6351] Node 0 DMA32: 1842*4kB (ME) 986*8kB (UME) 311*16kB (UME) 303*32kB (UME) 87*64kB (UM) 39*128kB (UME) 14*256kB (UM) 7*512kB (UM) 5*1024kB (ME) 3*2048kB (ME) 60*4096kB (M) = 304680kB
[   87.865798][ T6202] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.884566][ T6351] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   87.888130][ T6202] 8021q: adding VLAN 0 to HW filter on device team0
[   87.893909][ T6351] Node 1 Normal: 2*4kB (UE) 5*8kB (UME) 1*16kB (U) 103*32kB 
[   87.910251][ T3117] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.913164][ T3117] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.920061][ T3117] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.920115][ T3117] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.078543][ T6351] (U) 54*64kB (UE) 10*128kB (UE) 5*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (UME) 102*4096kB (M) = 437920kB
[   88.086053][ T6351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.090118][ T6351] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.094093][ T6351] 41893 total pagecache pages
[   88.097653][ T6351] 0 pages in swap cache
[   88.099530][ T6351] Free swap  = 124996kB
[   88.101385][ T6351] Total swap = 124996kB
[   88.103342][ T6351] 786301 pages RAM
[   88.105139][ T6351] 0 pages HighMem/MovableOnly
[   88.107274][ T6351] 241329 pages reserved
[   88.109214][ T6351] 0 pages cma reserved
[   88.144920][ T6202] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.258099][ T6202] veth0_vlan: entered promiscuous mode
[   88.273788][ T6202] veth1_vlan: entered promiscuous mode
[   88.370228][ T6202] veth0_macvtap: entered promiscuous mode
[   88.386020][ T6202] veth1_macvtap: entered promiscuous mode
[   88.425264][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.464171][ T6202] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.571625][ T5865] Bluetooth: hci1: command tx timeout
[   88.630920][ T5890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.646646][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.658078][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.665973][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.147968][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.150664][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.220044][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.225772][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.345858][ T6416] netlink: 'syz.1.126': attribute type 7 has an invalid length.
[   89.469544][ T6418] netlink: 'syz.2.186': attribute type 17 has an invalid length.
[   89.472139][ T6418] netlink: 'syz.2.186': attribute type 16 has an invalid length.
[   89.475751][ T6418] netlink: 152 bytes leftover after parsing attributes in process `syz.2.186'.
[   89.856239][ T6433] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   89.871549][ T6430] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   89.944788][ T6433] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   89.971476][ T6430] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   90.644047][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'.
[   90.664992][ T6443] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   91.425343][ T6464] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   91.430350][ T6464] netlink: 17 bytes leftover after parsing attributes in process `syz.2.204'.
[   91.493411][ T6466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.564132][ T6473] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   91.703994][ T6487] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[   91.745776][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'.
[   91.869785][ T6500] netlink: 'syz.2.218': attribute type 10 has an invalid length.
[   91.875744][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.885682][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.955487][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.960081][ T6500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.967303][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.971373][ T6500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.996131][ T6500] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   92.030271][ T6501] : renamed from pim6reg1
[   92.480571][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'.
[   93.082128][ T6523] veth1_to_bond: entered allmulticast mode
[   93.566408][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'.
[   94.015985][ T6573] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.249'.
[   94.226640][ T6579] syz.0.252 uses obsolete (PF_INET,SOCK_PACKET)
[   95.350193][ T6579] infiniband syz!: set active
[   95.353868][ T6579] infiniband syz!: added team_slave_0
[   95.363736][ T6579] syz!: rxe_create_cq: returned err = -12
[   95.368251][ T6579] infiniband syz!: Couldn't create ib_mad CQ
[   95.370846][ T6579] infiniband syz!: Couldn't open port 1
[   95.423821][ T6579] RDS/IB: syz!: added
[   95.427746][ T6579] smc: adding ib device syz! with port count 1
[   95.430197][ T6579] smc:    ib device syz! port 1 has pnetid 
[   99.491865][ T6622] sched: DL replenish lagged too much
[   99.875400][ T6651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.882185][ T6654] netlink: 'syz.2.282': attribute type 5 has an invalid length.
[   99.941251][ T6661] netlink: 'syz.2.285': attribute type 21 has an invalid length.
[   99.946030][ T6661] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.285'.
[  100.100388][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'.
[  100.909887][ T6684] netlink: 56 bytes leftover after parsing attributes in process `syz.1.296'.
[  100.912780][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'.
[  100.917717][ T6684] netlink: 31 bytes leftover after parsing attributes in process `syz.1.296'.
[  100.920574][ T6684] netlink: 'syz.1.296': attribute type 2 has an invalid length.
[  100.924120][ T6684] netlink: 31 bytes leftover after parsing attributes in process `syz.1.296'.
[  101.183401][ T6701] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.304'.
[  102.255921][ T6754] netlink: 188 bytes leftover after parsing attributes in process `syz.2.320'.
[  104.142006][ T6808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.243752][ T6811] netlink: 'syz.1.345': attribute type 13 has an invalid length.
[  104.249749][ T6811] netlink: 'syz.1.345': attribute type 17 has an invalid length.
[  104.260767][ T6811] gretap0: refused to change device tx_queue_len
[  104.263628][ T6811] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  105.897688][ T5865] Bluetooth: hci2: adv larger than maximum supported
[  106.047931][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'.
[  106.057628][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'.
[  106.151927][ T6850] Dead loop on virtual device ip6_vti0, fix it urgently!
[  106.238083][ T6857] netlink: 2 bytes leftover after parsing attributes in process `syz.1.366'.
[  106.242470][ T6857] netlink: 2 bytes leftover after parsing attributes in process `syz.1.366'.
[  106.439952][ T6867] netlink: 26 bytes leftover after parsing attributes in process `syz.0.371'.
[  106.597497][ T6872] : entered promiscuous mode
[  106.947530][ T6877] netlink: 'syz.0.375': attribute type 13 has an invalid length.
[  107.046922][ T6880] netlink: 'syz.1.373': attribute type 1 has an invalid length.
[  107.049722][ T6880] netlink: 17 bytes leftover after parsing attributes in process `syz.1.373'.
[  107.183917][ T6885] netlink: 64 bytes leftover after parsing attributes in process `syz.0.378'.
[  107.291273][ T6889] netlink: 'syz.1.380': attribute type 13 has an invalid length.
[  107.304251][ T6889] gretap0: refused to change device tx_queue_len
[  107.307265][ T6889] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  107.335990][ T6887] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  107.339074][ T6887] netlink: 'syz.0.379': attribute type 2 has an invalid length.
[  107.342083][ T6887] netlink: 'syz.0.379': attribute type 4 has an invalid length.
[  107.368731][ T6887] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[  107.371818][ T6887] netlink: 'syz.0.379': attribute type 2 has an invalid length.
[  107.379608][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  107.383025][ T6887] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.379'.
[  107.390105][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  108.495936][ T6913] netlink: 'syz.1.390': attribute type 29 has an invalid length.
[  108.877005][ T6929] netlink: 'syz.1.396': attribute type 10 has an invalid length.
[  109.625872][ T6924] delete_channel: no stack
[  114.215567][ T7001] validate_nla: 1 callbacks suppressed
[  114.215591][ T7001] netlink: 'syz.0.427': attribute type 4 has an invalid length.
[  114.219921][ T7001] __nla_validate_parse: 2 callbacks suppressed
[  114.219928][ T7001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.427'.
[  114.756791][ T7015] netlink: 'syz.0.434': attribute type 13 has an invalid length.
[  114.763467][ T7015] netlink: 'syz.0.434': attribute type 17 has an invalid length.
[  115.005805][ T7015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.329783][ T7023] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  116.928971][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.442'.
[  116.971388][ T7046] : renamed from dummy0 (while UP)
[  116.983935][ T7046] netlink: 188 bytes leftover after parsing attributes in process `syz.1.444'.
[  117.477112][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'.
[  120.122898][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.127332][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.131655][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.135511][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.139182][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.653468][ T7070] chnl_net:caif_netlink_parms(): no params data found
[  120.731970][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'.
[  120.738403][ T7097] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  120.741404][ T7097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.805955][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.810391][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.818765][ T7070] bridge_slave_0: entered allmulticast mode
[  120.822954][ T7070] bridge_slave_0: entered promiscuous mode
[  120.846757][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.850387][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.853445][ T7070] bridge_slave_1: entered allmulticast mode
[  120.868112][ T7070] bridge_slave_1: entered promiscuous mode
[  120.948425][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.954204][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.962349][   T54] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  121.010406][ T7070] team0: Port device team_slave_0 added
[  121.025262][ T7070] team0: Port device team_slave_1 added
[  121.086571][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.089370][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.104186][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.114850][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.118847][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.135177][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.182549][ T7070] hsr_slave_0: entered promiscuous mode
[  121.192945][ T7070] hsr_slave_1: entered promiscuous mode
[  121.198641][ T7070] debugfs: 'hsr0' already exists in 'hsr'
[  121.201183][ T7070] Cannot create hsr debugfs directory
[  121.329220][ T7112] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.472'.
[  121.490642][ T7070] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  121.502855][ T7070] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  121.518294][ T7070] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  121.523778][ T7070] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  121.573280][ T7119] netlink: 168 bytes leftover after parsing attributes in process `syz.0.476'.
[  121.645445][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.661010][ T7070] 8021q: adding VLAN 0 to HW filter on device team0
[  121.673699][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.676551][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.700679][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.703590][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.837312][ T7129] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  121.840416][ T7129] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  121.931600][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.980688][ T7070] veth0_vlan: entered promiscuous mode
[  121.993802][ T7070] veth1_vlan: entered promiscuous mode
[  122.045496][ T7070] veth0_macvtap: entered promiscuous mode
[  122.050952][ T7070] veth1_macvtap: entered promiscuous mode
[  122.063092][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.078125][ T7147] netlink: 'syz.1.483': attribute type 2 has an invalid length.
[  122.078479][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.081470][ T7147] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[  122.088161][ T7147] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.483'.
[  122.092597][ T7147] nbd: couldn't find device at index 65542
[  122.097838][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.101931][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.109923][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.114147][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.160309][   T54] Bluetooth: hci3: command tx timeout
[  122.188269][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.196717][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.224231][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.228050][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.392081][ T7157] netlink: 'syz.1.487': attribute type 3 has an invalid length.
[  122.401567][ T7157] netlink: 'syz.1.487': attribute type 2 has an invalid length.
[  122.406951][ T7157] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.487'.
[  122.557312][ T7163] netlink: 'syz.1.489': attribute type 10 has an invalid length.
[  122.561734][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.565584][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.586466][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.589007][ T7163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.591928][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.594516][ T7163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.606989][ T7163] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  122.611258][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.488'.
[  122.619273][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.3.488'.
[  122.622909][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.488'.
[  122.738946][ T7170] netlink: 'syz.3.492': attribute type 13 has an invalid length.
[  122.741569][ T7170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.492'.
[  122.751213][ T7170] : renamed from syz_tun (while UP)
[  122.757111][ T7170] : refused to change device tx_queue_len
[  122.759479][ T7170] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  122.894935][ T7179] netlink: 184 bytes leftover after parsing attributes in process `syz.3.496'.
[  123.730435][ T7213] netlink: 'syz.0.512': attribute type 2 has an invalid length.
[  124.240021][   T54] Bluetooth: hci3: command tx timeout
[  124.710170][ T7222] syzkaller0: create flow: hash 1175116097 index 1
[  125.158640][ T7223] syzkaller0: delete flow: hash 1175116097 index 1
[  125.210314][ T7225] netlink: 'syz.0.517': attribute type 4 has an invalid length.
[  126.326995][   T54] Bluetooth: hci3: command tx timeout
[  126.347890][ T7237] netlink: 'syz.3.523': attribute type 3 has an invalid length.
[  126.366945][ T7237] __nla_validate_parse: 2 callbacks suppressed
[  126.366963][ T7237] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.523'.
[  126.567714][ T7258] netlink: 'syz.3.533': attribute type 10 has an invalid length.
[  126.583257][ T7258] team0: Port device macvlan1 added
[  128.637285][   T54] Bluetooth: hci3: command tx timeout
[  129.164227][ T7272] syzkaller0: entered promiscuous mode
[  129.168683][ T7272] syzkaller0: entered allmulticast mode
[  129.602690][ T7274] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  129.716764][ T7280] netlink: 'syz.1.543': attribute type 10 has an invalid length.
[  130.825535][ T7280] team0: Device veth1_macvtap failed to register rx_handler
[  130.879548][ T7294] netlink: 'syz.3.550': attribute type 1 has an invalid length.
[  130.882848][ T7294] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.550'.
[  131.091977][ T7310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.156592][ T7310] syz.0.557 (7310) used greatest stack depth: 19648 bytes left
[  131.301969][ T7314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.308102][ T7314] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.397930][ T7326] netlink: 'syz.1.564': attribute type 23 has an invalid length.
[  131.759057][ T7346] netlink: 152 bytes leftover after parsing attributes in process `syz.3.573'.
[  132.379548][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'.
[  132.519745][ T7382] netlink: 'syz.0.591': attribute type 12 has an invalid length.
[  132.522977][ T7382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.591'.
[  132.575669][ T7385] netlink: 64507 bytes leftover after parsing attributes in process `syz.3.589'.
[  132.717834][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.719929][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.807858][ T7404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.596'.
[  133.022873][ T7406] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.597'.
[  133.130576][ T7408] netlink: 92 bytes leftover after parsing attributes in process `syz.1.598'.
[  133.373120][ T7408] netlink: 'syz.1.598': attribute type 39 has an invalid length.
[  134.319164][ T7420] netlink: 'syz.1.604': attribute type 12 has an invalid length.
[  134.322263][ T7420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.604'.
[  134.465774][ T7426] syz.1.604 (7426) used obsolete PPPIOCDETACH ioctl
[  134.746210][ T7420] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  134.749604][ T7420] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  135.381207][ T7456] netlink: 'syz.1.619': attribute type 9 has an invalid length.
[  135.384265][ T7456] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.619'.
[  135.523098][ T7464] netlink: 'syz.1.623': attribute type 33 has an invalid length.
[  135.526641][ T7464] netlink: 152 bytes leftover after parsing attributes in process `syz.1.623'.
[  135.530974][ T7464] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  135.858196][ T7469] netlink: 'syz.1.625': attribute type 13 has an invalid length.
[  136.722815][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.726100][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.828032][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.838236][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.970197][ T5890] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.974522][ T5890] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.977796][ T5890] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.001451][ T5890] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.111260][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'.
[  137.129410][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'.
[  137.132743][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'.
[  137.420935][ T7517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.647'.
[  138.609586][ T7543] sctp: [Deprecated]: syz.0.657 (pid 7543) Use of int in max_burst socket option deprecated.
[  138.609586][ T7543] Use struct sctp_assoc_value instead
[  139.062037][ T7556] netlink: 196 bytes leftover after parsing attributes in process `syz.3.662'.
[  139.882616][ T7582] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.210273][ T7591] netlink: 'syz.3.678': attribute type 21 has an invalid length.
[  141.496889][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.680'.
[  141.501637][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.680'.
[  141.507389][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.680'.
[  141.608180][ T7606] netlink: 'syz.1.683': attribute type 4 has an invalid length.
[  141.610566][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'.
[  142.440607][ T7617] ]X: renamed from veth0_vlan (while UP)
[  143.820074][ T7642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.699'.
[  143.823132][ T7641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.699'.
[  143.826625][ T7642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.699'.
[  144.391513][ T7653] netlink: 'syz.3.704': attribute type 22 has an invalid length.
[  144.394263][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'.
[  145.634011][ T7683] netlink: 'syz.0.717': attribute type 14 has an invalid length.
[  146.120390][ T7698] netlink: 1018 bytes leftover after parsing attributes in process `syz.3.724'.
[  146.789291][ T7718] netlink: 104 bytes leftover after parsing attributes in process `syz.0.733'.
[  148.208366][ T7741] netlink: 'syz.0.742': attribute type 21 has an invalid length.
[  148.215681][ T7741] netlink: 'syz.0.742': attribute type 1 has an invalid length.
[  148.236061][ T7743] netlink: 'syz.3.743': attribute type 39 has an invalid length.
[  148.393775][ T7753] netlink: 'syz.0.748': attribute type 13 has an invalid length.
[  148.396849][ T7753] netlink: 160 bytes leftover after parsing attributes in process `syz.0.748'.
[  148.413522][ T7753] erspan0: refused to change device tx_queue_len
[  148.424769][ T7753] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  148.441265][ T7755] netlink: 'syz.3.749': attribute type 21 has an invalid length.
[  148.444239][ T7755] netlink: 'syz.3.749': attribute type 4 has an invalid length.
[  148.447660][ T7755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.749'.
[  149.059361][ T7790] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.766'.
[  151.149102][   T54] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  152.622611][ T7862] netlink: 'syz.0.797': attribute type 64 has an invalid length.
[  153.896135][ T7887] netlink: 'syz.3.809': attribute type 11 has an invalid length.
[  153.904636][ T7886] unsupported nla_type 256
[  153.973713][ T7891] netlink: 'syz.0.811': attribute type 21 has an invalid length.
[  153.979428][ T7891] netlink: 128 bytes leftover after parsing attributes in process `syz.0.811'.
[  153.998291][ T7891] netlink: 'syz.0.811': attribute type 5 has an invalid length.
[  154.001252][ T7891] netlink: 'syz.0.811': attribute type 6 has an invalid length.
[  154.004152][ T7891] netlink: 3 bytes leftover after parsing attributes in process `syz.0.811'.
[  155.600781][ T7918] netlink: 48 bytes leftover after parsing attributes in process `syz.3.823'.
[  155.943966][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'.
[  156.580162][ T7937] IPv6: Can't replace route, no match found
[  157.250138][ T7952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  157.303652][ T7955] netlink: 'syz.3.839': attribute type 4 has an invalid length.
[  158.783241][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'.
[  158.822534][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.837141][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.840789][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.845097][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.848401][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.260197][ T7992] chnl_net:caif_netlink_parms(): no params data found
[  159.353010][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.355569][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.357990][ T7992] bridge_slave_0: entered allmulticast mode
[  159.360768][ T7992] bridge_slave_0: entered promiscuous mode
[  159.364210][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.367589][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.370424][ T7992] bridge_slave_1: entered allmulticast mode
[  159.373160][ T7992] bridge_slave_1: entered promiscuous mode
[  159.402207][ T8007] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.859'.
[  159.420890][ T7992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.443160][ T7992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.496238][ T7992] team0: Port device team_slave_0 added
[  159.501437][ T7992] team0: Port device team_slave_1 added
[  159.552500][   T13] bridge_slave_1: left allmulticast mode
[  159.555982][   T13] bridge_slave_1: left promiscuous mode
[  159.567507][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.573739][   T13] bridge_slave_0: left allmulticast mode
[  159.576605][   T13] bridge_slave_0: left promiscuous mode
[  159.579033][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.605254][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  159.912335][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  160.197796][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.209732][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.214154][   T13] bond0 (unregistering): Released all slaves
[  160.250826][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.252993][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.272165][ T7992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.290839][ T7992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.293468][ T7992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.311782][ T7992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.429566][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.872'.
[  160.431585][ T7992] hsr_slave_0: entered promiscuous mode
[  160.445926][ T7992] hsr_slave_1: entered promiscuous mode
[  160.448923][ T7992] debugfs: 'hsr0' already exists in 'hsr'
[  160.451293][ T7992] Cannot create hsr debugfs directory
[  160.693665][ T8034] netlink: 'syz.3.873': attribute type 4 has an invalid length.
[  160.703221][ T8034] netlink: 209028 bytes leftover after parsing attributes in process `syz.3.873'.
[  160.851417][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'.
[  160.867519][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'.
[  160.870972][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.874'.
[  160.878647][   T54] Bluetooth: hci0: command tx timeout
[  160.905163][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'.
[  161.224910][ T7992] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  161.239277][   T13] hsr_slave_0: left promiscuous mode
[  161.242006][   T13] hsr_slave_1: left promiscuous mode
[  161.245110][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.248896][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.491693][   T13] team0 (unregistering): Port device team_slave_1 removed
[  161.526795][   T13] team0 (unregistering): Port device team_slave_0 removed
[  161.870261][ T7992] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  161.894009][ T7992] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  161.917506][ T7992] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  162.068747][ T7992] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.092699][ T7992] 8021q: adding VLAN 0 to HW filter on device team0
[  162.102579][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.105499][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.128970][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.132653][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.147544][   T54] Bluetooth: hci3: unexpected event 0x2c length: 82 > 17
[  162.242259][ T7992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.379151][ T7992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.631158][ T7992] veth0_vlan: entered promiscuous mode
[  162.643284][ T7992] veth1_vlan: entered promiscuous mode
[  162.673281][ T7992] veth0_macvtap: entered promiscuous mode
[  162.679835][ T7992] veth1_macvtap: entered promiscuous mode
[  162.713119][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.728885][ T7992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.754781][ T5890] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.758607][ T5890] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.762289][ T5890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.774227][ T5890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.891987][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.898415][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.925668][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.928198][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.955136][   T54] Bluetooth: hci0: command tx timeout
[  162.985236][ T8072] netlink: 'syz.4.851': attribute type 39 has an invalid length.
[  163.804051][ T8084] openvswitch: netlink: Message has 11 unknown bytes.
[  163.816002][ T8084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.967669][ T8089] netlink: 830 bytes leftover after parsing attributes in process `syz.3.889'.
[  164.271811][ T8095] netlink: 'syz.3.892': attribute type 11 has an invalid length.
[  164.284525][ T8095] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.892'.
[  164.418612][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.690034][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'.
[  164.718083][ T8110] : entered promiscuous mode
[  164.893559][ T8127] netlink: 'syz.4.907': attribute type 6 has an invalid length.
[  164.898492][ T8127] netlink: 'syz.4.907': attribute type 1 has an invalid length.
[  164.907862][ T8127] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.907'.
[  165.038966][   T54] Bluetooth: hci0: command tx timeout
[  166.722050][ T8157] C: renamed from team_slave_0 (while UP)
[  166.727207][ T8157] netlink: 'syz.4.921': attribute type 3 has an invalid length.
[  166.729856][ T8157] netlink: 152 bytes leftover after parsing attributes in process `syz.4.921'.
[  166.733718][ T8157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  167.116408][   T54] Bluetooth: hci0: command tx timeout
[  167.119455][ T8171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.928'.
[  167.164063][ T8173] netlink: 208 bytes leftover after parsing attributes in process `syz.4.929'.
[  167.867415][ T8193] netlink: 'syz.4.938': attribute type 29 has an invalid length.
[  168.038723][ T8203] netlink: 'syz.3.942': attribute type 29 has an invalid length.
[  168.042930][ T8203] netlink: 'syz.3.942': attribute type 29 has an invalid length.
[  168.575994][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.948'.
[  168.594820][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.948'.
[  168.619029][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.948'.
[  168.969920][ T8224] netlink: 'syz.4.952': attribute type 2 has an invalid length.
[  168.973064][ T8224] netlink: 'syz.4.952': attribute type 1 has an invalid length.
[  169.526290][ T8241] netlink: 'syz.4.960': attribute type 23 has an invalid length.
[  171.181062][ T8278] netlink: 'syz.3.976': attribute type 21 has an invalid length.
[  171.189614][ T8278] netlink: 128 bytes leftover after parsing attributes in process `syz.3.976'.
[  171.194199][ T8278] netlink: 'syz.3.976': attribute type 5 has an invalid length.
[  171.203465][ T8278] netlink: 3 bytes leftover after parsing attributes in process `syz.3.976'.
[  171.507033][ T8291] netlink: 'syz.3.982': attribute type 21 has an invalid length.
[  171.510133][ T8291] netlink: 156 bytes leftover after parsing attributes in process `syz.3.982'.
[  174.027620][ T8326] lo speed is unknown, defaulting to 1000
[  174.038753][ T8326] lo speed is unknown, defaulting to 1000
[  174.051110][ T8326] lo speed is unknown, defaulting to 1000
[  174.962575][ T8326] infiniband syz2: set active
[  174.964999][ T5312] lo speed is unknown, defaulting to 1000
[  174.967879][ T8326] infiniband syz2: added lo
[  174.969840][ T8326] syz2: rxe_create_cq: returned err = -12
[  174.971645][ T8326] infiniband syz2: Couldn't create ib_mad CQ
[  174.973588][ T8326] infiniband syz2: Couldn't open port 1
[  175.009743][ T8326] RDS/IB: syz2: added
[  175.011066][ T8326] smc: adding ib device syz2 with port count 1
[  175.013165][ T8326] smc:    ib device syz2 port 1 has pnetid 
[  175.024509][ T5312] lo speed is unknown, defaulting to 1000
[  175.027513][ T8326] lo speed is unknown, defaulting to 1000
[  175.046408][ T8337] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1000'.
[  175.254014][ T8326] lo speed is unknown, defaulting to 1000
[  175.331754][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.336156][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.339990][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.344257][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.348285][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.424811][ T8326] lo speed is unknown, defaulting to 1000
[  175.569092][ T8326] lo speed is unknown, defaulting to 1000
[  175.710040][ T8337] siw: device registration error -23
[  175.764162][ T8343] netlink: 'syz.3.1002': attribute type 21 has an invalid length.
[  175.784994][ T8343] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1002'.
[  175.844481][ T8340] lo speed is unknown, defaulting to 1000
[  176.005808][ T8338] smc: removing ib device syz!
[  176.337211][ T8340] chnl_net:caif_netlink_parms(): no params data found
[  176.614777][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.617981][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.620340][ T8340] bridge_slave_0: entered allmulticast mode
[  176.634737][ T8340] bridge_slave_0: entered promiscuous mode
[  176.638947][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.641110][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.643309][ T8340] bridge_slave_1: entered allmulticast mode
[  176.659248][ T8340] bridge_slave_1: entered promiscuous mode
[  176.760720][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.780694][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.907305][ T8340] team0: Port device team_slave_0 added
[  176.913540][ T8340] team0: Port device team_slave_1 added
[  177.041806][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.044925][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.059982][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.068618][ T8377] netlink: 'syz.3.1016': attribute type 2 has an invalid length.
[  177.071545][ T8377] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1016'.
[  177.084648][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.087255][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.099707][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.238223][ T8340] hsr_slave_0: entered promiscuous mode
[  177.241311][ T8340] hsr_slave_1: entered promiscuous mode
[  177.243960][ T8340] debugfs: 'hsr0' already exists in 'hsr'
[  177.248048][ T8340] Cannot create hsr debugfs directory
[  177.322354][ T8381] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1018'.
[  177.437842][ T5865] Bluetooth: hci1: command tx timeout
[  179.514940][ T5865] Bluetooth: hci1: command tx timeout
[  179.545362][ T8340] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  179.552351][ T8340] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  179.569837][ T8340] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  179.587742][ T8340] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  179.611646][ T8394] pimreg: tun_chr_ioctl cmd 1074025677
[  179.613744][ T8394] pimreg: linktype set to 778
[  179.709931][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.752251][ T8340] 8021q: adding VLAN 0 to HW filter on device team0
[  179.764819][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.767777][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.787260][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.790300][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.811510][ T8412] netlink: 'syz.4.1029': attribute type 3 has an invalid length.
[  179.816525][ T8412] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  180.042980][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.298560][ T8340] veth0_vlan: entered promiscuous mode
[  180.316882][ T8340] veth1_vlan: entered promiscuous mode
[  180.347685][ T8340] veth0_macvtap: entered promiscuous mode
[  180.353739][ T8340] veth1_macvtap: entered promiscuous mode
[  180.371587][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.386196][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.400887][ T5890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.407305][ T5890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.410604][ T5890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.413770][ T5890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.484196][ T3117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.488897][ T3117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.529224][  T677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.532133][  T677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.988396][ T8463] syzkaller0: entered promiscuous mode
[  180.990631][ T8463] syzkaller0: entered allmulticast mode
[  181.159324][ T8473] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1050'.
[  181.343779][ T8475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1053'.
[  181.511689][ T8481] netlink: 'syz.4.1056': attribute type 1 has an invalid length.
[  181.569519][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'.
[  181.594857][ T5865] Bluetooth: hci1: command tx timeout
[  181.668086][ T8493] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  182.409700][ T8523] netlink: 'syz.3.1077': attribute type 10 has an invalid length.
[  182.537575][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.577961][ T8523] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  182.611430][ T8523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1077'.
[  182.624778][ T8523] unsupported nlmsg_type 40
[  182.706507][ T8523] netlink: 'syz.3.1077': attribute type 10 has an invalid length.
[  182.709724][ T8523] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1077'.
[  182.713460][ T8523] batadv0: entered promiscuous mode
[  182.745330][ T8523] batadv0: entered allmulticast mode
[  182.750213][ T8523] bond0: (slave batadv0): Releasing backup interface
[  182.809856][ T8523] bridge0: port 3(batadv0) entered blocking state
[  182.812366][ T8523] bridge0: port 3(batadv0) entered disabled state
[  183.058639][ T8531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1079'.
[  183.127825][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  183.131842][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  183.458267][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1088'.
[  183.462420][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1088'.
[  183.602572][ T8562] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1094'.
[  183.661455][ T8569] netlink: 'syz.5.1097': attribute type 17 has an invalid length.
[  183.685433][ T5865] Bluetooth: hci1: command tx timeout
[  183.987682][ T8586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1106'.
[  184.989657][   T33] audit: type=1107 audit(1757086431.593:2): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  185.670570][ T8618] netlink: 'syz.4.1117': attribute type 12 has an invalid length.
[  186.118424][ T8629] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  186.122397][ T8629] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  186.917086][ T8660] tap0: tun_chr_ioctl cmd 2147767517
[  186.954563][ T8662] netlink: 'syz.3.1136': attribute type 3 has an invalid length.
[  187.115527][ T8675] netlink: 'syz.3.1141': attribute type 1 has an invalid length.
[  187.118470][ T8675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.303584][ T8682] bridge_slave_1: left allmulticast mode
[  187.306333][ T8682] bridge_slave_1: left promiscuous mode
[  187.308868][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.662010][ T8682] bridge_slave_0: left allmulticast mode
[  187.671174][ T8682] bridge_slave_0: left promiscuous mode
[  187.673891][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.868925][ T8690] __nla_validate_parse: 5 callbacks suppressed
[  187.868942][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'.
[  187.876371][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'.
[  188.141557][ T8703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1147'.
[  188.152287][ T8698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1147'.
[  188.285527][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'.
[  188.498511][ T8708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.514489][ T5910] lo speed is unknown, defaulting to 1000
[  189.202258][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.376367][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.465908][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.563272][   T13] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.731016][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1162'.
[  189.806558][   T13] bridge_slave_1: left allmulticast mode
[  189.808237][   T13] bridge_slave_1: left promiscuous mode
[  189.810953][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.828087][   T13] bridge_slave_0: left allmulticast mode
[  189.830481][   T13] bridge_slave_0: left promiscuous mode
[  189.832934][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.273943][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.280591][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.285876][   T13] bond0 (unregistering): Released all slaves
[  190.296152][ T8749] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.1171'.
[  190.299610][ T8757] C: renamed from team_slave_0 (while UP)
[  190.306346][ T8757] netlink: 'syz.3.1175': attribute type 3 has an invalid length.
[  190.309424][ T8757] netlink: 'syz.3.1175': attribute type 1 has an invalid length.
[  190.312310][ T8757] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1175'.
[  190.320215][ T8757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  190.340841][   T13] : left promiscuous mode
[  190.633665][ T8766] option changes via remount are deprecated (pid=8760 comm=syz.3.1177)
[  191.534271][ T8778] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1180'.
[  191.719192][   T13] hsr_slave_0: left promiscuous mode
[  191.722078][   T13] hsr_slave_1: left promiscuous mode
[  191.726345][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.733069][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.737883][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.740841][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.743478][ T8791] netlink: 'syz.4.1185': attribute type 21 has an invalid length.
[  192.602782][   T13] veth1_macvtap: left promiscuous mode
[  192.607759][   T13] veth0_macvtap: left promiscuous mode
[  192.610148][   T13] veth1_vlan: left promiscuous mode
[  192.612336][   T13] veth0_vlan: left promiscuous mode
[  193.623293][   T13] team0 (unregistering): Port device team_slave_1 removed
[  193.657299][   T13] team0 (unregistering): Port device team_slave_0 removed
[  194.138857][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1197'.
[  194.142413][ T8818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1197'.
[  194.172175][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.174910][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.493625][ T8831] delete_channel: no stack
[  194.557679][ T8831] delete_channel: no stack
[  194.865919][ T8836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.147201][ T8841] netlink: 'syz.4.1207': attribute type 1 has an invalid length.
[  195.150469][ T8841] netlink: 'syz.4.1207': attribute type 1 has an invalid length.
[  195.220315][ T8843] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1208'.
[  195.870811][ T8867] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1219'.
[  195.882292][ T8867] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1219'.
[  196.172122][ T8882] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1225'.
[  196.221623][ T8884] C: renamed from team_slave_0 (while UP)
[  196.237654][ T8884] netlink: 'syz.5.1227': attribute type 2 has an invalid length.
[  196.246731][ T8884] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  196.479258][ T8894] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1231'.
[  197.297598][ T8947] bridge0: port 3(syz_tun) entered blocking state
[  197.300528][ T8947] bridge0: port 3(syz_tun) entered disabled state
[  197.308342][ T8947] syz_tun: entered allmulticast mode
[  197.312932][ T8947] syz_tun: entered promiscuous mode
[  197.316465][ T8947] bridge0: port 3(syz_tun) entered blocking state
[  197.319365][ T8947] bridge0: port 3(syz_tun) entered forwarding state
[  197.495215][ T8943] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  197.650919][ T8943] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  198.302803][ T8971] netlink: 'syz.4.1266': attribute type 3 has an invalid length.
[  198.307589][ T8971] netlink: 'syz.4.1266': attribute type 1 has an invalid length.
[  198.311859][ T8971] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1266'.
[  199.664053][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.811105][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.879988][ T9022] netlink: 'syz.5.1287': attribute type 10 has an invalid length.
[  199.892429][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.901950][ T9022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.920262][ T9022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.947210][ T9022] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  200.000878][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.159489][   T12] bridge_slave_1: left allmulticast mode
[  200.161299][   T12] bridge_slave_1: left promiscuous mode
[  200.164379][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.182725][   T12] bridge_slave_0: left allmulticast mode
[  200.200365][   T12] bridge_slave_0: left promiscuous mode
[  200.202265][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.327715][ T9045] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  200.330199][ T9045] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  200.601585][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  200.748764][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.755528][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.761088][   T12] bond0 (unregistering): Released all slaves
[  201.200699][ T9067] IPv6: NLM_F_CREATE should be specified when creating new route
[  201.254199][   T12] hsr_slave_0: left promiscuous mode
[  201.256522][   T12] hsr_slave_1: left promiscuous mode
[  201.258552][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.260959][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.266656][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.271092][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.292346][   T12] veth1_macvtap: left promiscuous mode
[  201.299973][   T12] veth0_macvtap: left promiscuous mode
[  201.302764][   T12] veth1_vlan: left promiscuous mode
[  201.308706][   T12] veth0_vlan: left promiscuous mode
[  201.825878][ T9109] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  201.839851][   T12] team0 (unregistering): Port device team_slave_1 removed
[  201.873047][   T12] team0 (unregistering): Port device team_slave_0 removed
[  202.553663][ T9142] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.1345'.
[  202.650953][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.746457][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.809532][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.911923][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.031510][   T12] bridge0: port 3(batadv0) entered disabled state
[  203.047321][   T12] bridge_slave_1: left allmulticast mode
[  203.055395][   T12] bridge_slave_1: left promiscuous mode
[  203.067369][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.086620][   T12] bridge_slave_0: left allmulticast mode
[  203.088891][   T12] bridge_slave_0: left promiscuous mode
[  203.090818][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.146828][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  203.151655][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  203.155671][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  203.159505][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  203.162634][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  203.390156][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.396606][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.400278][   T12] bond0 (unregistering): Released all slaves
[  203.431500][ T9165] lo speed is unknown, defaulting to 1000
[  203.736126][ T9165] chnl_net:caif_netlink_parms(): no params data found
[  203.845706][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.847967][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.850174][ T9165] bridge_slave_0: entered allmulticast mode
[  203.853005][ T9165] bridge_slave_0: entered promiscuous mode
[  203.870380][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.872622][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.878166][ T9165] bridge_slave_1: entered allmulticast mode
[  203.889745][ T9165] bridge_slave_1: entered promiscuous mode
[  204.321243][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.360570][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.658476][   T12] hsr_slave_0: left promiscuous mode
[  204.669162][   T12] hsr_slave_1: left promiscuous mode
[  204.688836][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.691768][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.703714][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.710388][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.744226][   T12] veth1_macvtap: left promiscuous mode
[  204.752505][   T12] veth0_macvtap: left promiscuous mode
[  204.756543][   T12] veth1_vlan: left promiscuous mode
[  204.758379][   T12] ]X: left promiscuous mode
[  204.921624][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1366'.
[  205.008349][   T12] team0 (unregistering): Port device macvlan1 removed
[  205.031220][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1369'.
[  205.206029][   T54] Bluetooth: hci2: command tx timeout
[  205.452684][   T12] team0 (unregistering): Port device team_slave_1 removed
[  205.483250][   T12] team0 (unregistering): Port device C removed
[  205.873437][   T26] smc: removing ib device syz2
[  205.894059][ T9165] team0: Port device team_slave_0 added
[  205.906116][   T10] lo speed is unknown, defaulting to 1000
[  205.914665][   T10] syz2: Port: 1 Link DOWN
[  205.916727][  T846] infiniband syz0: ib_query_port failed (-19)
[  205.931716][ T9165] team0: Port device team_slave_1 added
[  206.034735][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.036945][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.048305][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.059478][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.061673][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.073379][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.233907][ T9165] hsr_slave_0: entered promiscuous mode
[  206.237888][ T9165] hsr_slave_1: entered promiscuous mode
[  207.068804][ T9165] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  207.078639][ T9165] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.085070][ T9165] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  207.091174][ T9165] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  207.177706][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.202849][ T9165] 8021q: adding VLAN 0 to HW filter on device team0
[  207.212143][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.215178][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.234405][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.237288][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.263308][ T9239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.283404][   T54] Bluetooth: hci2: command tx timeout
[  207.323077][ T9244] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.1384'.
[  207.380767][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.424983][ T9165] veth0_vlan: entered promiscuous mode
[  207.430848][ T9165] veth1_vlan: entered promiscuous mode
[  207.463998][ T9165] veth0_macvtap: entered promiscuous mode
[  207.471770][ T9165] veth1_macvtap: entered promiscuous mode
[  207.482817][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.493871][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.503958][ T5890] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.511258][ T5890] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.514155][ T5890] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.544094][ T5890] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.585110][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.587499][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.606990][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.609488][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.669976][ T9256] netlink: 'syz.3.1347': attribute type 9 has an invalid length.
[  207.672448][ T9256] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1347'.
[  208.655675][ T9285] veth1_macvtap: left promiscuous mode
[  209.416864][   T54] Bluetooth: hci2: command tx timeout
[  210.470804][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1419'.
[  210.473833][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1419'.
[  211.447248][   T54] Bluetooth: hci2: command tx timeout
[  212.216257][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1426'.
[  212.219055][ T9342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1426'.
[  212.294156][   T54] Bluetooth: hci1: Malformed LE Event: 0x0d
[  212.525113][ T9359] netlink: 'syz.3.1430': attribute type 2 has an invalid length.
[  213.095817][ T9375] netlink: 'syz.5.1439': attribute type 19 has an invalid length.
[  213.161426][ T9377] netlink: set zone limit has 4 unknown bytes
[  213.445809][ T9391] syzkaller0: entered promiscuous mode
[  213.447854][ T9391] syzkaller0: entered allmulticast mode
[  213.620149][ T9398] netlink: 'syz.5.1450': attribute type 10 has an invalid length.
[  213.622956][ T9398] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1450'.
[  213.632659][ T9398] batman_adv: batadv0: Adding interface: hsr_slave_1
[  213.636892][ T9398] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.649473][ T9398] batman_adv: batadv0: Interface activated: hsr_slave_1
[  213.709940][ T9402] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1452'.
[  214.112860][ T9414] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  214.131484][ T9414] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  214.436682][ T9419] openvswitch: netlink: Message has 4 unknown bytes.
[  215.000287][ T9446] netlink: 'syz.3.1469': attribute type 10 has an invalid length.
[  215.008719][ T9446] bond0: (slave bond_slave_0): Releasing backup interface
[  215.231407][ T9458] netlink: del zone limit has 4 unknown bytes
[  215.380469][ T9464] netlink: 'syz.5.1478': attribute type 10 has an invalid length.
[  215.481069][ T9464] team0: Device ipvlan1 failed to register rx_handler
[  215.506995][ T9467] netlink: 'syz.5.1478': attribute type 29 has an invalid length.
[  215.514506][ T9467] netlink: 'syz.5.1478': attribute type 3 has an invalid length.
[  215.523948][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1478'.
[  215.537625][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.540340][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.544133][ T9466] bridge0: entered allmulticast mode
[  215.561624][ T9466] bridge_slave_1: left allmulticast mode
[  215.563463][ T9466] bridge_slave_1: left promiscuous mode
[  215.566702][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.575727][ T9466] bridge_slave_0: left allmulticast mode
[  215.577486][ T9466] bridge_slave_0: left promiscuous mode
[  215.579970][ T9464] syz.5.1478 (9464) used greatest stack depth: 19192 bytes left
[  215.597543][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.669333][ T9471] netlink: 'syz.5.1480': attribute type 10 has an invalid length.
[  215.675529][ T9471] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1480'.
[  217.165693][ T9485] netlink: 'syz.3.1486': attribute type 6 has an invalid length.
[  217.397778][ T9495] netlink: 'syz.3.1491': attribute type 13 has an invalid length.
[  217.511274][ T9506] netlink: 'syz.3.1496': attribute type 1 has an invalid length.
[  217.520741][ T9506] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1496'.
[  217.553820][ T9500] netlink: 4800 bytes leftover after parsing attributes in process `syz.5.1494'.
[  217.558278][ T9500] netlink: 4800 bytes leftover after parsing attributes in process `syz.5.1494'.
[  218.800916][   T54] Bluetooth: hci1: adv larger than maximum supported
[  218.800933][   T54] Bluetooth: hci1: Unknown advertising packet type: 0x73
[  219.025795][ T9544] validate_nla: 1 callbacks suppressed
[  219.025848][ T9544] netlink: 'syz.3.1514': attribute type 10 has an invalid length.
[  219.032822][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1514'.
[  219.036249][ T9544] veth0_vlan: entered allmulticast mode
[  219.039901][ T9544] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  219.276465][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'.
[  219.915091][ T9563] netlink: 'syz.3.1522': attribute type 40 has an invalid length.
[  220.694164][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.698972][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.713155][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.717967][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.721354][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.819587][ T9585] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1532'.
[  220.977437][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.998295][ T9578] chnl_net:caif_netlink_parms(): no params data found
[  221.079722][ T9599] netlink: 'syz.3.1537': attribute type 39 has an invalid length.
[  221.103931][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.231728][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.234048][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.236648][ T9578] bridge_slave_0: entered allmulticast mode
[  221.240686][ T9578] bridge_slave_0: entered promiscuous mode
[  221.275029][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.281600][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.288698][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.291792][ T9578] bridge_slave_1: entered allmulticast mode
[  221.296376][ T9578] bridge_slave_1: entered promiscuous mode
[  221.332635][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.388975][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.393517][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.433330][ T9578] team0: Port device team_slave_0 added
[  221.442373][ T9578] team0: Port device team_slave_1 added
[  221.549754][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.552563][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.563460][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.569489][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.572766][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.586387][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.707786][ T9578] hsr_slave_0: entered promiscuous mode
[  221.712520][ T9578] hsr_slave_1: entered promiscuous mode
[  221.718536][ T9578] debugfs: 'hsr0' already exists in 'hsr'
[  221.722775][ T9578] Cannot create hsr debugfs directory
[  221.732800][ T9631] netlink: 'syz.5.1550': attribute type 2 has an invalid length.
[  222.067549][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.074270][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.083941][   T13] bond0 (unregistering): Released all slaves
[  222.191061][   T13] : left promiscuous mode
[  222.507205][ T9643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.603208][ T9578] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  222.610238][ T9578] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  222.615145][ T9578] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  222.620398][ T9578] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  222.633725][ T9653] netlink: 'syz.5.1560': attribute type 21 has an invalid length.
[  222.659148][   T13] hsr_slave_0: left promiscuous mode
[  222.662738][   T13] hsr_slave_1: left promiscuous mode
[  222.670977][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.680284][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.683056][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.686949][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.699858][ T9660] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1561'.
[  222.710020][   T13] veth1_macvtap: left promiscuous mode
[  222.713089][   T13] veth0_macvtap: left promiscuous mode
[  222.715500][   T13] veth1_vlan: left promiscuous mode
[  222.717312][   T13] veth0_vlan: left promiscuous mode
[  222.794931][ T5865] Bluetooth: hci3: command tx timeout
[  222.987303][ T9667] netlink: 'syz.3.1564': attribute type 28 has an invalid length.
[  223.221185][   T13] team0 (unregistering): Port device team_slave_1 removed
[  223.262283][   T13] team0 (unregistering): Port device C removed
[  223.745627][ T9698] netlink: 'syz.5.1579': attribute type 21 has an invalid length.
[  223.782926][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.817078][ T9578] 8021q: adding VLAN 0 to HW filter on device team0
[  223.850973][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.853355][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.888067][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.890435][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.991786][ T9704] netlink: 'syz.3.1581': attribute type 4 has an invalid length.
[  223.994243][ T9704] netlink: 'syz.3.1581': attribute type 11 has an invalid length.
[  224.008826][ T9704] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  224.011310][ T9704] netlink: 197860 bytes leftover after parsing attributes in process `syz.3.1581'.
[  224.127800][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.414921][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'.
[  224.423953][ T9578] veth0_vlan: entered promiscuous mode
[  224.426220][ T9727] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  224.428495][ T9727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.447439][ T9578] veth1_vlan: entered promiscuous mode
[  224.485572][ T9578] veth0_macvtap: entered promiscuous mode
[  224.490420][ T9578] veth1_macvtap: entered promiscuous mode
[  224.512702][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.523857][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.532842][ T5890] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.538888][ T5890] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.542914][ T5890] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.555449][ T5890] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.632494][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.637933][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.656841][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.659394][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.661872][ T9737] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.666404][ T9737] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.686335][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'.
[  224.874896][ T5865] Bluetooth: hci3: command tx timeout
[  225.349709][ T9785] openvswitch: netlink: Message has 8 unknown bytes.
[  225.353733][ T9785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.596689][ T9801] _Z`Ԁ@S!: entered promiscuous mode
[  225.966000][ T9817] validate_nla: 1 callbacks suppressed
[  225.966078][ T9817] netlink: 'syz.5.1620': attribute type 10 has an invalid length.
[  225.977972][ T9817] veth1_macvtap: entered promiscuous mode
[  225.990293][ T9817] bridge0: port 4(macsec0) entered blocking state
[  225.994699][ T9817] bridge0: port 4(macsec0) entered disabled state
[  225.999044][ T9817] macsec0: entered allmulticast mode
[  226.001520][ T9817] veth1_macvtap: entered allmulticast mode
[  226.032419][ T9817] macsec0: entered promiscuous mode
[  226.052300][   T52] bridge0: port 4(macsec0) entered blocking state
[  226.054837][   T52] bridge0: port 4(macsec0) entered forwarding state
[  226.604394][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1626'.
[  226.615230][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1626'.
[  226.954773][ T5865] Bluetooth: hci3: command tx timeout
[  227.361008][ T9857] netlink: 'syz.5.1641': attribute type 1 has an invalid length.
[  229.044642][ T5865] Bluetooth: hci3: command tx timeout
[  229.840170][ T9914] netlink: 'syz.6.1665': attribute type 12 has an invalid length.
[  229.843087][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1665'.
[  230.523017][ T9929] netlink: 'syz.6.1671': attribute type 27 has an invalid length.
[  230.538549][ T9929] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.1671'.
[  230.606634][ T9931] mac80211_hwsim hwsim24 .3c: renamed from wlan1 (while UP)
[  230.749829][ T9925] netlink: 'syz.5.1669': attribute type 1 has an invalid length.
[  232.038557][ T9948] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1678'.
[  232.147641][ T9955] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.1681'.
[  232.781464][ T9973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1688'.
[  232.786314][ T9973] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  232.867497][ T9978] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1689'.
[  232.999608][ T9987] netlink: 'syz.6.1694': attribute type 3 has an invalid length.
[  233.588034][T10008] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1703'.
[  233.787542][T10020] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1709'.
[  233.967506][T10030] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1711'.
[  234.400985][T10037] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.1716'.
[  235.031987][T10039] netlink: 'syz.3.1717': attribute type 12 has an invalid length.
[  235.036270][T10039] __nla_validate_parse: 2 callbacks suppressed
[  235.036324][T10039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1717'.
[  235.347842][T10068] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1730'.
[  236.889909][T10130] netlink: 'syz.3.1756': attribute type 10 has an invalid length.
[  237.132648][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1765'.
[  237.223990][T10156] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1769'.
[  237.654591][T10166] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1774'.
[  238.745489][T10194] sit0: entered allmulticast mode
[  239.543748][T10208] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1791'.
[  239.561096][T10208] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1791'.
[  239.903532][T10232] netlink: 'syz.6.1802': attribute type 21 has an invalid length.
[  239.910485][T10232] IPv6: NLM_F_CREATE should be specified when creating new route
[  240.329280][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1807'.
[  240.333681][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1807'.
[  240.338085][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1805'.
[  240.352078][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'.
[  240.363888][T10242] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1805'.
[  240.386650][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1805'.
[  240.390299][T10242] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1805'.
[  240.556082][ T5865] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  240.556190][ T5865] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  240.584114][T10254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1811'.
[  240.659405][T10258] netlink: 'syz.5.1813': attribute type 3 has an invalid length.
[  240.666957][T10258] netlink: 'syz.5.1813': attribute type 6 has an invalid length.
[  240.672327][T10258] netlink: 'syz.5.1813': attribute type 8 has an invalid length.
[  240.677616][T10258] netlink: 'syz.5.1813': attribute type 10 has an invalid length.
[  240.680696][T10258] netlink: 'syz.5.1813': attribute type 11 has an invalid length.
[  240.683690][T10258] netlink: 198236 bytes leftover after parsing attributes in process `syz.5.1813'.
[  241.158615][T10284] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1825'.
[  241.777058][T10330] netlink: 'syz.6.1846': attribute type 10 has an invalid length.
[  243.131751][T10355] delete_channel: no stack
[  244.607273][T10417] netlink: 'syz.6.1879': attribute type 39 has an invalid length.
[  244.614124][T10417] veth0_macvtap: left promiscuous mode
[  245.000718][T10426] syz.5.1883 (10426) used greatest stack depth: 18040 bytes left
[  246.191213][T10483] __nla_validate_parse: 5 callbacks suppressed
[  246.191227][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'.
[  246.343512][T10484] tmpfs: Bad value for 'gid'
[  246.347153][T10484] tmpfs: Bad value for 'gid'
[  246.431970][T10495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.473231][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'.
[  246.859020][T10522] netlink: 'syz.3.1920': attribute type 4 has an invalid length.
[  246.862102][T10522] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1920'.
[  246.881900][T10522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  246.920401][T10519] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1917'.
[  246.926461][T10519] bond_slave_0: entered promiscuous mode
[  246.929372][T10519] bond_slave_1: entered promiscuous mode
[  246.931997][T10519] batadv_slave_0: entered promiscuous mode
[  246.941197][T10524] netlink: 'syz.6.1921': attribute type 3 has an invalid length.
[  246.961963][T10524] netlink: 'syz.6.1921': attribute type 1 has an invalid length.
[  246.972172][T10524] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1921'.
[  247.011211][T10519] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1917'.
[  247.228202][T10541] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.238381][T10541] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.257323][T10541] bridge0: entered allmulticast mode
[  247.335183][T10542] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.338224][T10542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.341408][T10542] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.344426][T10542] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.348815][T10542] bridge0: entered promiscuous mode
[  247.731449][T10546] wg2: entered allmulticast mode
[  247.740219][T10546] wg2: entered promiscuous mode
[  247.803045][T10548] netlink: 'syz.5.1931': attribute type 6 has an invalid length.
[  248.322090][T10563] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1937'.
[  248.842502][T10566] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.1938'.
[  248.851456][T10566] netlink: 6320 bytes leftover after parsing attributes in process `syz.5.1938'.
[  248.909297][T10568] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.1939'.
[  249.462965][T10596] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  249.562987][ T5865] Bluetooth: hci1: Dropping invalid advertising data
[  249.567445][ T5865] Bluetooth: hci1: Malformed LE Event: 0x02
[  249.918675][T10623] netlink: 'syz.3.1965': attribute type 29 has an invalid length.
[  249.923702][T10623] netlink: 'syz.3.1965': attribute type 29 has an invalid length.
[  252.147478][T10687] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  252.150156][T10687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.476212][T10710] __nla_validate_parse: 3 callbacks suppressed
[  252.476229][T10710] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2001'.
[  252.573154][T10715] netlink: 'syz.6.1999': attribute type 11 has an invalid length.
[  252.584823][T10715] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1999'.
[  252.601598][T10706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.156685][T10759] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2025'.
[  253.381249][T10777] netlink: 'syz.6.2033': attribute type 1 has an invalid length.
[  253.420856][T10781] netlink: 'syz.6.2035': attribute type 1 has an invalid length.
[  253.423539][T10781] netlink: 'syz.6.2035': attribute type 4 has an invalid length.
[  253.428122][T10781] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2035'.
[  253.459931][T10783] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2036'.
[  253.670968][T10787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.673542][T10787] IPv6: NLM_F_CREATE should be set when creating new route
[  253.676151][T10787] IPv6: NLM_F_CREATE should be set when creating new route
[  253.678637][T10787] IPv6: NLM_F_CREATE should be set when creating new route
[  253.819024][T10808] netlink: 'syz.3.2048': attribute type 2 has an invalid length.
[  254.101275][T10810] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2049'.
[  254.173554][ T5865] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6
[  254.402487][T10823] wg0 speed is unknown, defaulting to 1000
[  254.414619][T10823] wg0 speed is unknown, defaulting to 1000
[  254.420148][T10823] wg0 speed is unknown, defaulting to 1000
[  254.437384][T10823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  254.463470][T10823] wg0 speed is unknown, defaulting to 1000
[  254.470463][T10823] wg0 speed is unknown, defaulting to 1000
[  254.474635][T10823] wg0 speed is unknown, defaulting to 1000
[  254.979871][T10851] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2067'.
[  255.600489][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.603276][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.653434][T10871] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2075'.
[  255.722853][T10877] netlink: 'syz.3.2078': attribute type 21 has an invalid length.
[  255.727251][T10877] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2078'.
[  255.730879][T10877] netlink: 'syz.3.2078': attribute type 4 has an invalid length.
[  255.814090][T10882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.107546][T10902] netlink: 'syz.6.2090': attribute type 1 has an invalid length.
[  256.185291][T10911] netlink: 'syz.5.2095': attribute type 9 has an invalid length.
[  256.188256][T10911] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.2095'.
[  257.197671][T10932] netlink: 'syz.3.2104': attribute type 3 has an invalid length.
[  257.573481][T10942] __nla_validate_parse: 2 callbacks suppressed
[  257.573494][T10942] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2107'.
[  258.412562][T10956] sit0: entered allmulticast mode
[  258.426726][T10956] sit0: entered promiscuous mode
[  258.689054][T10962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2115'.
[  258.719744][T10962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.353358][T10981] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.2123'.
[  259.357252][T10981] netlink: 'syz.5.2123': attribute type 3 has an invalid length.
[  259.998044][T11005] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2135'.
[  260.290518][T11026] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2144'.
[  260.302761][T11026] netlink: zone id is out of range
[  260.355485][T11026] netlink: zone id is out of range
[  260.358322][T11026] netlink: zone id is out of range
[  260.361197][T11026] netlink: zone id is out of range
[  260.363802][T11026] netlink: zone id is out of range
[  260.369582][T11026] netlink: zone id is out of range
[  260.372138][T11026] netlink: zone id is out of range
[  260.376100][T11026] netlink: zone id is out of range
[  260.378728][T11026] netlink: zone id is out of range
[  260.810125][T11048] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2152'.
[  261.211834][T11074] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2166'.
[  261.480812][T11085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2171'.
[  261.598237][T11098] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2178'.
[  261.600412][T11099] netlink: 'syz.6.2177': attribute type 3 has an invalid length.
[  261.601078][T11098] tc_dump_action: action bad kind
[  261.604145][T11099] netlink: 'syz.6.2177': attribute type 1 has an invalid length.
[  261.881978][T11120] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2188'.
[  262.272624][T11144] raw_sendmsg: syz.3.2195 forgot to set AF_INET. Fix it!
[  262.450744][T11149] syzkaller0: entered promiscuous mode
[  262.453265][T11149] syzkaller0: entered allmulticast mode
[  262.545208][T11156] netlink: 'syz.3.2201': attribute type 1 has an invalid length.
[  262.548072][T11156] netlink: 'syz.3.2201': attribute type 1 has an invalid length.
[  263.268703][T11187] __nla_validate_parse: 2 callbacks suppressed
[  263.268716][T11187] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.2216'.
[  263.529900][T11198] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2221'.
[  265.489773][ T5865] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  265.591600][T11242] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2240'.
[  265.909467][T11265] net_ratelimit: 14 callbacks suppressed
[  265.909483][T11265] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  266.545708][   T33] audit: type=1107 audit(1757086513.153:3): pid=11287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  266.981459][T11308] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2269'.
[  267.013177][T11310] netlink: 'syz.3.2270': attribute type 10 has an invalid length.
[  267.025299][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2270'.
[  267.029148][T11310] batadv0: entered promiscuous mode
[  267.031597][T11310] batadv0: entered allmulticast mode
[  267.122007][T11310] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  267.134554][T11314] netlink: 'syz.6.2272': attribute type 10 has an invalid length.
[  267.155599][T11314] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2272'.
[  267.210345][T11323] netlink: 'syz.6.2276': attribute type 11 has an invalid length.
[  267.374764][T11331] netlink: 'syz.3.2280': attribute type 40 has an invalid length.
[  268.177058][T11349] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  268.180692][T11349] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  269.724094][T11400] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2303'.
[  270.259102][T11420] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2312'.
[  270.545338][T11436] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2321'.
[  270.991340][T11455] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2329'.
[  271.511766][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2339'.
[  271.519986][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2339'.
[  271.606369][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'.
[  271.869051][T11486] netlink: 'syz.3.2342': attribute type 280 has an invalid length.
[  271.964062][T11491] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2344'.
[  272.187369][T11501] netlink: 'syz.6.2349': attribute type 2 has an invalid length.
[  272.282645][T11509] netlink: 'syz.3.2352': attribute type 4 has an invalid length.
[  273.181631][T11524] netlink: 'syz.6.2356': attribute type 25 has an invalid length.
[  273.193123][T11524] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.2356'.
[  273.342722][T11533] sctp: [Deprecated]: syz.5.2360 (pid 11533) Use of int in max_burst socket option deprecated.
[  273.342722][T11533] Use struct sctp_assoc_value instead
[  273.349871][T11526] netlink: 'syz.3.2357': attribute type 7 has an invalid length.
[  273.484246][T11543] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2365'.
[  274.200361][T11567] netlink: 'syz.3.2375': attribute type 10 has an invalid length.
[  274.228060][T11567] team0: Device ip6_vti0 is of different type
[  274.321948][T11572] sctp: [Deprecated]: syz.3.2377 (pid 11572) Use of int in maxseg socket option.
[  274.321948][T11572] Use struct sctp_assoc_value instead
[  275.568020][T11587] __nla_validate_parse: 1 callbacks suppressed
[  275.568038][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'.
[  275.721081][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'.
[  275.728977][T11587] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2384'.
[  275.732873][T11587] bridge_slave_0: entered allmulticast mode
[  275.739886][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'.
[  275.753050][T11587] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2384'.
[  276.048342][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2394'.
[  276.057413][T11607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2394'.
[  276.066406][T11607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2394'.
[  276.889842][T11644] netlink: 'syz.3.2409': attribute type 10 has an invalid length.
[  277.027361][T11645] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2409'.
[  277.793905][T11648] netlink: 'syz.6.2410': attribute type 10 has an invalid length.
[  277.838986][T11644] team0 (unregistering): Port device team_slave_0 removed
[  277.843942][T11644] team0 (unregistering): Port device team_slave_1 removed
[  278.330826][T11664] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.2415'.
[  278.737181][T11685] netlink: 'syz.6.2425': attribute type 21 has an invalid length.
[  279.029529][T11705] netlink: 'syz.6.2435': attribute type 6 has an invalid length.
[  279.066732][T11707] netlink: 'syz.3.2436': attribute type 2 has an invalid length.
[  279.369817][T11714] netlink: 'syz.3.2438': attribute type 10 has an invalid length.
[  280.267337][T11756] : entered promiscuous mode
[  280.269561][T11756] : entered allmulticast mode
[  280.933878][T11763] __nla_validate_parse: 5 callbacks suppressed
[  280.933903][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2461'.
[  281.017542][T11767] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2463'.
[  281.053423][T11769] netlink: 495 bytes leftover after parsing attributes in process `syz.6.2464'.
[  281.775695][T11801] syzkaller0: entered promiscuous mode
[  281.777584][T11801] syzkaller0: entered allmulticast mode
[  282.269400][T11807] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2480'.
[  282.273120][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'.
[  282.277350][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'.
[  282.342006][T11811] sit0: entered allmulticast mode
[  282.360008][T11811] sit0: entered promiscuous mode
[  283.859555][T11859] netlink: 'syz.5.2501': attribute type 1 has an invalid length.
[  283.859731][T11851] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  283.931556][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2503'.
[  284.061233][T11875] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2509'.
[  284.169994][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2514'.
[  284.318289][T11895] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2519'.
[  284.710358][T11922] netlink: 'syz.3.2531': attribute type 2 has an invalid length.
[  284.714232][T11922] nbd: must specify a device to reconfigure
[  285.882567][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1158012377 wd_nsec: 1158012135
[  289.078114][T11954] netlink: 'syz.5.2543': attribute type 10 has an invalid length.
[  289.081393][T11954] __nla_validate_parse: 3 callbacks suppressed
[  289.081416][T11954] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2543'.
[  289.405249][T11959] netlink: 'syz.6.2546': attribute type 10 has an invalid length.
[  290.332141][T11959] batman_adv: batadv0: Adding interface: netdevsim0
[  290.334834][T11959] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.345464][T11959] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  290.497702][T11968] netlink: 'syz.5.2550': attribute type 3 has an invalid length.
[  290.752371][T11984] netlink: 'syz.5.2558': attribute type 10 has an invalid length.
[  290.838270][T11984] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.859660][T11984] batadv0: entered promiscuous mode
[  290.868967][T11984] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  291.094081][ T5865] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4
[  291.297851][T12027] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2576'.
[  291.641951][T12053] netlink: 'syz.3.2588': attribute type 22 has an invalid length.
[  291.645680][T12053] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.2588'.
[  295.212500][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'.
[  295.416653][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2608'.
[  296.039354][T12119] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2617'.
[  296.097509][T12123] netlink: 'syz.6.2619': attribute type 30 has an invalid length.
[  296.101246][T12119] netlink: 'syz.5.2617': attribute type 10 has an invalid length.
[  296.121404][T12125] netlink: 'syz.3.2620': attribute type 1 has an invalid length.
[  296.123815][T12125] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2620'.
[  296.165797][T12128] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2619'.
[  296.206261][T12119] batman_adv: batadv0: Adding interface: netdevsim0
[  296.209242][T12119] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.221509][T12119] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  296.236120][T12132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2622'.
[  296.977007][T12143] GPL: port 1(gretap0) entered blocking state
[  296.979818][T12143] GPL: port 1(gretap0) entered disabled state
[  296.982469][T12143] gretap0: entered allmulticast mode
[  296.990350][T12143] gretap0: entered promiscuous mode
[  297.201413][T12149] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2629'.
[  297.205506][T12149] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  297.208828][T12149] openvswitch: netlink: Message has 2 unknown bytes.
[  297.365218][T12157] netlink: 'syz.5.2633': attribute type 29 has an invalid length.
[  297.439362][T12157] netlink: 'syz.5.2633': attribute type 29 has an invalid length.
[  297.482329][T12157] netlink: 'syz.5.2633': attribute type 29 has an invalid length.
[  297.499586][T12157] netlink: 'syz.5.2633': attribute type 29 has an invalid length.
[  298.104656][T12189] netlink: 'syz.5.2647': attribute type 4 has an invalid length.
[  298.111176][T12189] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2647'.
[  298.554111][T12217] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2659'.
[  298.636295][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  299.961129][T12224] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2662'.
[  300.198448][T12242] syzkaller0: tun_chr_ioctl cmd 1074025677
[  300.200922][T12242] syzkaller0: linktype set to 801
[  300.239373][T12245] netlink: 'syz.5.2671': attribute type 3 has an invalid length.
[  300.242723][T12245] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2671'.
[  300.436924][T12255] net veth1_virt_wifi : renamed from virt_wifi0
[  300.497377][T12255] netdevsim netdevsim6 : renamed from netdevsim0
[  300.681476][T12273] netlink: 'syz.6.2683': attribute type 29 has an invalid length.
[  300.808347][T12282] 8021q: adding VLAN 0 to HW filter on device team0
[  300.813576][T12282] C: entered promiscuous mode
[  300.815429][T12282] team_slave_1: entered promiscuous mode
[  300.819700][T12282] bond0: (slave team0): Enslaving as an active interface with an up link
[  301.146318][T12294] validate_nla: 2 callbacks suppressed
[  301.146370][T12294] netlink: 'syz.6.2693': attribute type 23 has an invalid length.
[  301.250578][T12298] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2695'.
[  301.285178][T12298] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  301.581157][T12313] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  301.612319][T12315] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2702'.
[  302.427181][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2716'.
[  302.728239][T12373] netlink: 208344 bytes leftover after parsing attributes in process `syz.5.2728'.
[  302.862195][T12379] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.2730'.
[  302.893838][T12381] netlink: 'syz.3.2732': attribute type 10 has an invalid length.
[  303.145866][T12385] netlink: 'syz.5.2734': attribute type 6 has an invalid length.
[  303.149128][T12385] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2734'.
[  303.770617][T12407] netlink: 'syz.5.2741': attribute type 9 has an invalid length.
[  304.128455][T12425] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2750'.
[  304.210758][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2751'.
[  304.214137][T12428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.469061][T12433] netlink: 'syz.6.2753': attribute type 10 has an invalid length.
[  304.472736][T12433] mac80211_hwsim hwsim26 wlan1: left allmulticast mode
[  306.451414][T12460] netlink: 'syz.5.2761': attribute type 21 has an invalid length.
[  306.459008][T12460] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2761'.
[  306.463159][T12460] netlink: 'syz.5.2761': attribute type 4 has an invalid length.
[  306.587974][T12466] syzkaller0: left promiscuous mode
[  306.590127][T12466] syzkaller0: left allmulticast mode
[  306.708732][T12474] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2770'.
[  306.832152][T12478] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.2772'.
[  307.337241][T12487] netlink: 'syz.5.2776': attribute type 10 has an invalid length.
[  307.342760][T12487] mac80211_hwsim hwsim21 wlan1: left promiscuous mode
[  307.345696][T12487] mac80211_hwsim hwsim21 wlan1: left allmulticast mode
[  307.355100][T12487] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  307.358998][T12487] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  308.007685][T12503] IPv6: Can't replace route, no match found
[  308.998961][T12533] netlink: 'syz.5.2795': attribute type 3 has an invalid length.
[  309.002094][T12533] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2795'.
[  309.864512][ T5865] Bluetooth: hci3: Unable to find connection for big 0x00
[  310.146954][T12551] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2803'.
[  310.302001][T12559] wg0 speed is unknown, defaulting to 1000
[  310.565662][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'.
[  310.570583][T12571] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2811'.
[  311.139205][T12587] netlink: 809 bytes leftover after parsing attributes in process `syz.6.2818'.
[  311.142791][T12587] netlink: 130160 bytes leftover after parsing attributes in process `syz.6.2818'.
[  311.157574][T12589] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2819'.
[  311.322824][T12597] syzkaller0: entered promiscuous mode
[  311.332639][T12597] syzkaller0: entered allmulticast mode
[  312.807202][T12609] netlink: 'syz.6.2829': attribute type 291 has an invalid length.
[  313.321340][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2837'.
[  314.012656][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2843'.
[  314.037149][T12644] siw: device registration error -23
[  314.142371][T12653] syzkaller0: entered promiscuous mode
[  314.147843][T12653] syzkaller0: entered allmulticast mode
[  314.335588][T12655] syzkaller0: left promiscuous mode
[  314.337694][T12655] syzkaller0: left allmulticast mode
[  314.770215][T12687] netlink: 'syz.6.2864': attribute type 27 has an invalid length.
[  314.772782][T12687] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2864'.
[  314.928629][T12696] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2867'.
[  316.275005][T12750] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2891'.
[  316.285644][T12749] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2889'.
[  317.037860][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.040904][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.277662][T12779] netlink: 'syz.6.2904': attribute type 11 has an invalid length.
[  317.280772][T12779] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.2904'.
[  317.338795][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  317.429907][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2907'.
[  317.612956][T12798] tQ6\bY4: renamed from lo (while UP)
[  318.263422][T12809] syzkaller0: entered promiscuous mode
[  318.267275][T12809] syzkaller0: entered allmulticast mode
[  318.481106][T12815] netlink: 'syz.6.2921': attribute type 2 has an invalid length.
[  318.763704][T12821] wg0 speed is unknown, defaulting to 1000
[  318.775218][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.779314][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.783224][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.788525][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.793618][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.882927][T12825] wg0 speed is unknown, defaulting to 1000
[  318.900127][T12830] netlink: 'syz.5.2926': attribute type 1 has an invalid length.
[  318.903239][T12830] netlink: 'syz.5.2926': attribute type 4 has an invalid length.
[  318.906429][T12830] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2926'.
[  319.123626][T12825] chnl_net:caif_netlink_parms(): no params data found
[  319.317295][T12825] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.320184][T12825] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.323813][T12825] bridge_slave_0: entered allmulticast mode
[  319.335992][T12825] bridge_slave_0: entered promiscuous mode
[  319.343846][T12825] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.350462][T12825] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.353420][T12825] bridge_slave_1: entered allmulticast mode
[  319.372594][T12825] bridge_slave_1: entered promiscuous mode
[  319.435262][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.451511][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.523504][T12825] team0: Port device team_slave_0 added
[  319.531775][T12825] team0: Port device team_slave_1 added
[  319.564858][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.568006][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.579618][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.596057][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.601860][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.625782][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.703715][T12825] hsr_slave_0: entered promiscuous mode
[  319.706963][T12825] hsr_slave_1: entered promiscuous mode
[  319.709797][T12825] debugfs: 'hsr0' already exists in 'hsr'
[  319.712116][T12825] Cannot create hsr debugfs directory
[  320.051198][T12862] syzkaller1: tun_chr_ioctl cmd 1074025677
[  320.053617][T12862] syzkaller1: linktype set to 823
[  320.198088][T12825] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  320.206593][T12825] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  320.213510][T12825] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  320.230612][T12825] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  320.342705][T12825] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.379003][T12825] 8021q: adding VLAN 0 to HW filter on device team0
[  320.396613][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.399441][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.417564][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.419843][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2945'.
[  320.420317][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.560695][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.202228][   T54] Bluetooth: hci0: command tx timeout
[  321.351640][T12825] veth0_vlan: entered promiscuous mode
[  321.366661][T12825] veth1_vlan: entered promiscuous mode
[  321.414333][T12825] veth0_macvtap: entered promiscuous mode
[  321.421351][T12825] veth1_macvtap: entered promiscuous mode
[  321.446300][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.456137][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.468439][ T5890] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.473130][ T5890] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.477800][ T5890] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.481611][ T5890] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.557962][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.560909][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.609989][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.613779][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.639178][T12933] netlink: 'syz.6.2960': attribute type 10 has an invalid length.
[  321.770659][T12941] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2920'.
[  321.780556][T12938] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2920'.
[  321.795157][T12941] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2920'.
[  321.927083][T12947] lo: entered allmulticast mode
[  321.955162][T12947] lo: entered promiscuous mode
[  321.957948][T12947] lo: left allmulticast mode
[  322.375825][T12983] openvswitch: netlink: EtherType 50a is less than min 600
[  322.521916][T12995] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2989'.
[  322.527996][T12995] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2989'.
[  322.604546][T13002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.610681][T13003] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2991'.
[  323.274832][   T54] Bluetooth: hci0: command tx timeout
[  323.588565][T13029] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3003'.
[  323.592172][T13029] openvswitch: netlink: Missing key (keys=40, expected=80)
[  323.681477][T13035] netlink: 'syz.5.3007': attribute type 3 has an invalid length.
[  323.686733][T13035] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3007'.
[  323.932352][T13051] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3015'.
[  324.180214][T13072] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.3025'.
[  324.240831][T13078] netlink: 'syz.6.3028': attribute type 39 has an invalid length.
[  324.445646][T13096] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3036'.
[  324.623747][T13105] netlink: 'syz.5.3040': attribute type 29 has an invalid length.
[  324.632931][T13105] netlink: 'syz.5.3040': attribute type 29 has an invalid length.
[  324.648046][T13105] netlink: 604 bytes leftover after parsing attributes in process `syz.5.3040'.
[  324.755551][T13117] netlink: 'syz.7.3046': attribute type 21 has an invalid length.
[  324.761806][T13117] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3046'.
[  324.768518][T13117] netlink: 'syz.7.3046': attribute type 1 has an invalid length.
[  324.826892][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3052'.
[  324.918447][T13133] netlink: 'syz.7.3054': attribute type 10 has an invalid length.
[  325.110516][T13145] IPv6: NLM_F_CREATE should be specified when creating new route
[  325.126188][T13145] netlink: 'syz.6.3059': attribute type 2 has an invalid length.
[  325.129005][T13145] netlink: 199816 bytes leftover after parsing attributes in process `syz.6.3059'.
[  325.354714][   T54] Bluetooth: hci0: command tx timeout
[  325.460637][T13154] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3063'.
[  325.585239][T13156] syzkaller0: entered promiscuous mode
[  325.587751][T13156] syzkaller0: entered allmulticast mode
[  326.537629][T13172] delete_channel: no stack
[  327.434427][ T5865] Bluetooth: hci0: command tx timeout
[  329.357737][ T5865] Bluetooth: hci2: command 0x0406 tx timeout
[  329.402033][T13201] syzkaller0: entered promiscuous mode
[  329.404278][T13201] syzkaller0: entered allmulticast mode
[  329.616723][T13222] netlink: 'syz.6.3091': attribute type 4 has an invalid length.
[  329.619916][T13222] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3091'.
[  329.639919][T13222] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  329.823746][T13238] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3098'.
[  330.236006][T13266] netlink: 'syz.7.3112': attribute type 2 has an invalid length.
[  331.610539][T13284] syzkaller0: entered promiscuous mode
[  331.612312][T13284] syzkaller0: entered allmulticast mode
[  332.435463][T13293] netlink: 'syz.7.3124': attribute type 10 has an invalid length.
[  333.256278][T13293] team0: Device ipvlan1 failed to register rx_handler
[  333.536227][T13317] : entered promiscuous mode
[  333.601899][T13323] sit0: left promiscuous mode
[  333.652267][T13323] sit0: entered promiscuous mode
[  333.945001][T13336] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3145'.
[  334.476316][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3147'.
[  334.480961][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3147'.
[  334.486753][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3147'.
[  334.549503][T13342] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3148'.
[  337.921597][T13372] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3162'.
[  337.966905][T13378] netlink: 'syz.7.3165': attribute type 12 has an invalid length.
[  337.972157][T13378] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3165'.
[  338.089579][T13389] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3170'.
[  338.417561][T13414] netlink: 'syz.6.3181': attribute type 3 has an invalid length.
[  338.420816][T13414] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3181'.
[  338.580092][T13427] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3187'.
[  338.627655][T13429] sit0: entered allmulticast mode
[  338.640272][T13429] sit0: entered promiscuous mode
[  338.719032][T13423] netlink: 'syz.6.3183': attribute type 1 has an invalid length.
[  338.897244][T13443] netlink: 'syz.7.3194': attribute type 2 has an invalid length.
[  338.902095][T13443] netlink: 'syz.7.3194': attribute type 8 has an invalid length.
[  338.907230][T13443] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3194'.
[  339.165848][   T54] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  339.167274][T13457] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3201'.
[  339.378705][T13465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  339.381443][T13465] IPv6: NLM_F_CREATE should be set when creating new route
[  339.383872][T13465] IPv6: NLM_F_CREATE should be set when creating new route
[  339.617776][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3211'.
[  340.055738][T13498] netlink: 'syz.6.3219': attribute type 29 has an invalid length.
[  340.060666][T13498] netlink: 'syz.6.3219': attribute type 29 has an invalid length.
[  340.065171][T13498] netlink: 'syz.6.3219': attribute type 29 has an invalid length.
[  340.115412][T13500] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3220'.
[  341.368378][T13552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.449583][T13556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.480041][T13558] netlink: 'syz.7.3245': attribute type 4 has an invalid length.
[  341.482800][T13558] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3245'.
[  341.493958][T13558] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  341.663115][T13574] netlink: 'syz.5.3253': attribute type 29 has an invalid length.
[  344.720899][ T5865] Bluetooth: hci3: command 0x0406 tx timeout
[  344.816467][T13644] __nla_validate_parse: 3 callbacks suppressed
[  344.816484][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3283'.
[  346.343269][T13670] validate_nla: 2 callbacks suppressed
[  346.354969][T13670] netlink: 'syz.6.3294': attribute type 10 has an invalid length.
[  346.374128][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3294'.
[  346.403504][T13670] batadv0: entered promiscuous mode
[  346.403505][T13672] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3295'.
[  346.411589][T13670] batadv0: entered allmulticast mode
[  346.426770][T13670] bridge0: port 3(batadv0) entered blocking state
[  346.430914][T13670] bridge0: port 3(batadv0) entered disabled state
[  346.467981][T13670] bridge0: port 3(batadv0) entered blocking state
[  346.471278][T13670] bridge0: port 3(batadv0) entered forwarding state
[  346.487489][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  346.490589][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  346.561042][T13672] team_slave_0: entered allmulticast mode
[  346.569795][T13672] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  348.112132][   T54] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[  348.876227][T13740] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3325'.
[  348.917955][T13746] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.3329'.
[  348.921554][T13746] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ecN^{is|ؖS
[  349.313187][   T54] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  349.601037][T13799] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3352'.
[  349.658839][T13801] cgroup: Unknown subsys name '0x0000000000000000'
[  353.054889][T13828] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3364'.
[  353.103396][T13828] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3364'.
[  353.410830][T13836] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.3367'.
[  353.596301][T13839] netlink: 'syz.7.3368': attribute type 3 has an invalid length.
[  353.609923][T13839] netlink: 'syz.7.3368': attribute type 2 has an invalid length.
[  353.613219][T13839] netlink: 198112 bytes leftover after parsing attributes in process `syz.7.3368'.
[  353.777132][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3373'.
[  353.893562][T13857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.580162][T13888] netlink: 163260 bytes leftover after parsing attributes in process `syz.7.3388'.
[  357.695570][T13898] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3394'.
[  357.942823][T13915] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3401'.
[  358.518153][T13923] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3404'.
[  359.800921][T13950] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3413'.
[  359.804072][T13950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3413'.
[  359.837261][T13952] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3414'.
[  359.975957][T13962] netlink: 'syz.7.3419': attribute type 3 has an invalid length.
[  359.979101][T13962] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.3419'.
[  360.333733][T13984] netlink: 'syz.5.3428': attribute type 17 has an invalid length.
[  360.617893][T13992] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3431'.
[  360.772195][T14001] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode
[  360.782319][T14001] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  360.799451][T14003] openvswitch: netlink: IPv4 tun info is not correct
[  361.026011][T14022] wg0 speed is unknown, defaulting to 1000
[  361.143362][T14034] ==================================================================
[  361.146410][T14034] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  361.149255][T14034] Read of size 4 at addr ffff8880281780c4 by task syz.6.3448/14034
[  361.152782][T14034] 
[  361.154003][T14034] CPU: 0 UID: 0 PID: 14034 Comm: syz.6.3448 Not tainted syzkaller #0 PREEMPT(full) 
[  361.154021][T14034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.154030][T14034] Call Trace:
[  361.154036][T14034]  <TASK>
[  361.154043][T14034]  dump_stack_lvl+0x189/0x250
[  361.154062][T14034]  ? __kasan_check_byte+0x12/0x40
[  361.154082][T14034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.154097][T14034]  ? lock_release+0x4b/0x3e0
[  361.154116][T14034]  ? __virt_addr_valid+0x4a5/0x5c0
[  361.154134][T14034]  print_report+0xca/0x240
[  361.154146][T14034]  ? xfrm_alloc_spi+0x570/0xf30
[  361.154160][T14034]  kasan_report+0x118/0x150
[  361.154177][T14034]  ? xfrm_alloc_spi+0x570/0xf30
[  361.154193][T14034]  xfrm_alloc_spi+0x570/0xf30
[  361.154207][T14034]  ? xfrm_alloc_spi+0x2a0/0xf30
[  361.154225][T14034]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  361.154238][T14034]  ? xfrm_find_acq+0x87/0xa0
[  361.154259][T14034]  xfrm_alloc_userspi+0x70b/0xc90
[  361.154277][T14034]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.154296][T14034]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  361.154312][T14034]  ? xfrm_user_rcv_msg+0x5c3/0xab0
[  361.154327][T14034]  xfrm_user_rcv_msg+0x7a3/0xab0
[  361.154343][T14034]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  361.154371][T14034]  ? rcu_is_watching+0x15/0xb0
[  361.154384][T14034]  ? trace_contention_end+0x39/0x120
[  361.154397][T14034]  ? __mutex_lock+0x335/0x1360
[  361.154416][T14034]  netlink_rcv_skb+0x208/0x470
[  361.154434][T14034]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  361.154448][T14034]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  361.154470][T14034]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.154487][T14034]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.154504][T14034]  xfrm_netlink_rcv+0x79/0x90
[  361.154518][T14034]  netlink_unicast+0x82f/0x9e0
[  361.154536][T14034]  ? __pfx_netlink_unicast+0x10/0x10
[  361.154552][T14034]  ? netlink_sendmsg+0x642/0xb30
[  361.154568][T14034]  ? skb_put+0x11b/0x210
[  361.154580][T14034]  netlink_sendmsg+0x805/0xb30
[  361.154601][T14034]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.154619][T14034]  ? aa_sock_msg_perm+0xf1/0x1d0
[  361.154658][T14034]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.154673][T14034]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.154692][T14034]  __sock_sendmsg+0x21c/0x270
[  361.154708][T14034]  ____sys_sendmsg+0x505/0x830
[  361.154722][T14034]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.154737][T14034]  ? import_iovec+0x74/0xa0
[  361.154752][T14034]  ___sys_sendmsg+0x21f/0x2a0
[  361.154765][T14034]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.154788][T14034]  ? __fget_files+0x2a/0x420
[  361.154798][T14034]  ? __fget_files+0x3a0/0x420
[  361.154812][T14034]  __x64_sys_sendmsg+0x19b/0x260
[  361.154825][T14034]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  361.154841][T14034]  ? rcu_is_watching+0x15/0xb0
[  361.154854][T14034]  ? do_syscall_64+0xbe/0x3b0
[  361.154873][T14034]  do_syscall_64+0xfa/0x3b0
[  361.154890][T14034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.154902][T14034]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  361.154917][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.154929][T14034] RIP: 0033:0x7f91db18ebe9
[  361.154941][T14034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.154953][T14034] RSP: 002b:00007f91dbfc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.154968][T14034] RAX: ffffffffffffffda RBX: 00007f91db3c5fa0 RCX: 00007f91db18ebe9
[  361.154979][T14034] RDX: 0000000000048000 RSI: 0000200000000140 RDI: 0000000000000005
[  361.154988][T14034] RBP: 00007f91db211e19 R08: 0000000000000000 R09: 0000000000000000
[  361.154996][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.155004][T14034] R13: 00007f91db3c6038 R14: 00007f91db3c5fa0 R15: 00007fff267f5088
[  361.155019][T14034]  </TASK>
[  361.155023][T14034] 
[  361.298338][T14034] Allocated by task 12462:
[  361.300210][T14034]  kasan_save_track+0x3e/0x80
[  361.302151][T14034]  __kasan_slab_alloc+0x6c/0x80
[  361.304211][T14034]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  361.306498][T14034]  xfrm_state_alloc+0x24/0x2f0
[  361.308535][T14034]  __find_acq_core+0x8a7/0x1c00
[  361.310584][T14034]  xfrm_find_acq+0x78/0xa0
[  361.312478][T14034]  xfrm_alloc_userspi+0x6b3/0xc90
[  361.314609][T14034]  xfrm_user_rcv_msg+0x7a3/0xab0
[  361.316712][T14034]  netlink_rcv_skb+0x208/0x470
[  361.318707][T14034]  xfrm_netlink_rcv+0x79/0x90
[  361.320712][T14034]  netlink_unicast+0x82f/0x9e0
[  361.322726][T14034]  netlink_sendmsg+0x805/0xb30
[  361.324746][T14034]  __sock_sendmsg+0x21c/0x270
[  361.326732][T14034]  ____sys_sendmsg+0x505/0x830
[  361.328745][T14034]  ___sys_sendmsg+0x21f/0x2a0
[  361.330713][T14034]  __x64_sys_sendmsg+0x19b/0x260
[  361.332822][T14034]  do_syscall_64+0xfa/0x3b0
[  361.334745][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.337216][T14034] 
[  361.338247][T14034] Freed by task 10:
[  361.339788][T14034]  kasan_save_track+0x3e/0x80
[  361.341670][T14034]  kasan_save_free_info+0x46/0x50
[  361.343674][T14034]  __kasan_slab_free+0x5b/0x80
[  361.345574][T14034]  kmem_cache_free+0x18f/0x400
[  361.347468][T14034]  xfrm_state_gc_task+0x52d/0x6b0
[  361.349514][T14034]  process_scheduled_works+0xae1/0x17b0
[  361.351693][T14034]  worker_thread+0x8a0/0xda0
[  361.353637][T14034]  kthread+0x711/0x8a0
[  361.355370][T14034]  ret_from_fork+0x3fc/0x770
[  361.357314][T14034]  ret_from_fork_asm+0x1a/0x30
[  361.359331][T14034] 
[  361.360360][T14034] The buggy address belongs to the object at ffff888028178000
[  361.360360][T14034]  which belongs to the cache xfrm_state of size 928
[  361.365986][T14034] The buggy address is located 196 bytes inside of
[  361.365986][T14034]  freed 928-byte region [ffff888028178000, ffff8880281783a0)
[  361.371232][T14034] 
[  361.372227][T14034] The buggy address belongs to the physical page:
[  361.374728][T14034] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028179f80 pfn:0x28178
[  361.378710][T14034] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  361.382053][T14034] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  361.385024][T14034] page_type: f5(slab)
[  361.386676][T14034] raw: 00fff00000000040 ffff888105447b40 dead000000000122 0000000000000000
[  361.390056][T14034] raw: ffff888028179f80 00000000800e0009 00000000f5000000 0000000000000000
[  361.393477][T14034] head: 00fff00000000040 ffff888105447b40 dead000000000122 0000000000000000
[  361.397002][T14034] head: ffff888028179f80 00000000800e0009 00000000f5000000 0000000000000000
[  361.400593][T14034] head: 00fff00000000002 ffffea0000a05e01 00000000ffffffff 00000000ffffffff
[  361.404067][T14034] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  361.407467][T14034] page dumped because: kasan: bad access detected
[  361.410005][T14034] page_owner tracks the page as allocated
[  361.412273][T14034] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6484, tgid 6483 (syz.1.213), ts 91693907666, free_ts 91439398842
[  361.420064][T14034]  post_alloc_hook+0x240/0x2a0
[  361.422094][T14034]  get_page_from_freelist+0x21e4/0x22c0
[  361.424411][T14034]  __alloc_frozen_pages_noprof+0x181/0x370
[  361.426860][T14034]  alloc_pages_mpol+0x232/0x4a0
[  361.428936][T14034]  allocate_slab+0x8a/0x370
[  361.430805][T14034]  ___slab_alloc+0xbeb/0x1410
[  361.432819][T14034]  kmem_cache_alloc_noprof+0x283/0x3c0
[  361.435104][T14034]  xfrm_state_alloc+0x24/0x2f0
[  361.437118][T14034]  pfkey_add+0x6e4/0x2e00
[  361.438963][T14034]  pfkey_sendmsg+0xbfe/0x1090
[  361.440969][T14034]  __sock_sendmsg+0x21c/0x270
[  361.442974][T14034]  ____sys_sendmsg+0x505/0x830
[  361.444987][T14034]  ___sys_sendmsg+0x21f/0x2a0
[  361.446972][T14034]  __x64_sys_sendmsg+0x19b/0x260
[  361.449058][T14034]  do_syscall_64+0xfa/0x3b0
[  361.450969][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.453450][T14034] page last free pid 6464 tgid 6463 stack trace:
[  361.456096][T14034]  __free_frozen_pages+0xbc4/0xd30
[  361.458163][T14034]  stack_depot_save_flags+0x436/0x860
[  361.460372][T14034]  kasan_save_track+0x4f/0x80
[  361.462312][T14034]  __kasan_kmalloc+0x93/0xb0
[  361.464186][T14034]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  361.466736][T14034]  kmalloc_reserve+0x136/0x290
[  361.468721][T14034]  __alloc_skb+0x142/0x2d0
[  361.470596][T14034]  netlink_ack+0x146/0xa50
[  361.472508][T14034]  netlink_rcv_skb+0x28c/0x470
[  361.474492][T14034]  genl_rcv+0x28/0x40
[  361.476120][T14034]  netlink_unicast+0x82f/0x9e0
[  361.478079][T14034]  netlink_sendmsg+0x805/0xb30
[  361.480024][T14034]  __sock_sendmsg+0x21c/0x270
[  361.482007][T14034]  ____sys_sendmsg+0x505/0x830
[  361.483943][T14034]  ___sys_sendmsg+0x21f/0x2a0
[  361.485803][T14034]  __x64_sys_sendmsg+0x19b/0x260
[  361.487869][T14034] 
[  361.488901][T14034] Memory state around the buggy address:
[  361.491264][T14034]  ffff888028177f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[  361.494601][T14034]  ffff888028178000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  361.497951][T14034] >ffff888028178080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  361.501272][T14034]                                            ^
[  361.503875][T14034]  ffff888028178100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  361.507200][T14034]  ffff888028178180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  361.510560][T14034] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  361.514197][T14034] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  361.517766][T14034] CPU: 0 UID: 0 PID: 14034 Comm: syz.6.3448 Not tainted syzkaller #0 PREEMPT(full) 
[  361.521684][T14034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  361.525774][T14034] Call Trace:
[  361.527186][T14034]  <TASK>
[  361.528453][T14034]  dump_stack_lvl+0x99/0x250
[  361.530347][T14034]  ? __asan_memcpy+0x40/0x70
[  361.532321][T14034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.534521][T14034]  ? __pfx__printk+0x10/0x10
[  361.536482][T14034]  vpanic+0x281/0x750
[  361.538194][T14034]  ? __pfx_vpanic+0x10/0x10
[  361.540110][T14034]  ? irqentry_exit+0x74/0x90
[  361.542075][T14034]  panic+0xb9/0xc0
[  361.543683][T14034]  ? __pfx_panic+0x10/0x10
[  361.545552][T14034]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  361.547990][T14034]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  361.550474][T14034]  ? xfrm_alloc_spi+0x570/0xf30
[  361.552557][T14034]  check_panic_on_warn+0x89/0xb0
[  361.554655][T14034]  ? xfrm_alloc_spi+0x570/0xf30
[  361.556702][T14034]  end_report+0x78/0x160
[  361.558403][T14034]  kasan_report+0x129/0x150
[  361.560244][T14034]  ? xfrm_alloc_spi+0x570/0xf30
[  361.562232][T14034]  xfrm_alloc_spi+0x570/0xf30
[  361.564096][T14034]  ? xfrm_alloc_spi+0x2a0/0xf30
[  361.566055][T14034]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  361.568166][T14034]  ? xfrm_find_acq+0x87/0xa0
[  361.570047][T14034]  xfrm_alloc_userspi+0x70b/0xc90
[  361.572108][T14034]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.574306][T14034]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  361.576633][T14034]  ? xfrm_user_rcv_msg+0x5c3/0xab0
[  361.578706][T14034]  xfrm_user_rcv_msg+0x7a3/0xab0
[  361.580736][T14034]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  361.582926][T14034]  ? rcu_is_watching+0x15/0xb0
[  361.584835][T14034]  ? trace_contention_end+0x39/0x120
[  361.586953][T14034]  ? __mutex_lock+0x335/0x1360
[  361.588941][T14034]  netlink_rcv_skb+0x208/0x470
[  361.590886][T14034]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  361.593116][T14034]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  361.595341][T14034]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.597525][T14034]  ? netlink_deliver_tap+0x2e/0x1b0
[  361.599743][T14034]  xfrm_netlink_rcv+0x79/0x90
[  361.601730][T14034]  netlink_unicast+0x82f/0x9e0
[  361.603736][T14034]  ? __pfx_netlink_unicast+0x10/0x10
[  361.605906][T14034]  ? netlink_sendmsg+0x642/0xb30
[  361.607982][T14034]  ? skb_put+0x11b/0x210
[  361.609779][T14034]  netlink_sendmsg+0x805/0xb30
[  361.611819][T14034]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.614036][T14034]  ? aa_sock_msg_perm+0xf1/0x1d0
[  361.616132][T14034]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.618341][T14034]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.620555][T14034]  __sock_sendmsg+0x21c/0x270
[  361.622539][T14034]  ____sys_sendmsg+0x505/0x830
[  361.624553][T14034]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.626800][T14034]  ? import_iovec+0x74/0xa0
[  361.628694][T14034]  ___sys_sendmsg+0x21f/0x2a0
[  361.630680][T14034]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.632886][T14034]  ? __fget_files+0x2a/0x420
[  361.634827][T14034]  ? __fget_files+0x3a0/0x420
[  361.636838][T14034]  __x64_sys_sendmsg+0x19b/0x260
[  361.638910][T14034]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  361.641183][T14034]  ? rcu_is_watching+0x15/0xb0
[  361.643213][T14034]  ? do_syscall_64+0xbe/0x3b0
[  361.645195][T14034]  do_syscall_64+0xfa/0x3b0
[  361.647092][T14034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.649650][T14034]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  361.652250][T14034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.654725][T14034] RIP: 0033:0x7f91db18ebe9
[  361.656619][T14034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.664542][T14034] RSP: 002b:00007f91dbfc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.667888][T14034] RAX: ffffffffffffffda RBX: 00007f91db3c5fa0 RCX: 00007f91db18ebe9
[  361.671032][T14034] RDX: 0000000000048000 RSI: 0000200000000140 RDI: 0000000000000005
[  361.674321][T14034] RBP: 00007f91db211e19 R08: 0000000000000000 R09: 0000000000000000
[  361.677654][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  361.680935][T14034] R13: 00007f91db3c6038 R14: 00007f91db3c5fa0 R15: 00007fff267f5088
[  361.684229][T14034]  </TASK>
[  361.686176][T14034] Kernel Offset: disabled
[  361.688007][T14034] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:36:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001179 RDI=000000000000117a RBP=00000000000003f8 RSP=ffffc9000309e9f0
R8 =ffff888021430237 R9 =1ffff11004286046 R10=dffffc0000000000 R11=ffffffff854ef830
R12=dffffc0000000000 R13=ffffffff99af9913 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854ef8ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f91dbfc06c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000147c0 CR3=0000000033d48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f91db397498 00007f91db397470 XMM03=00007f91db3974a8 00007f91db3974a0
XMM04=00007f91dbefd100 00007f91db397460 XMM05=00007f91db397478 00007f91db3974c0
XMM06=00007f91db3974b8 00007f91db3974b0 XMM07=00007f91db3974a8 00007f91db3974a0
XMM08=0000000000000000 00007f91db212ee7 XMM09=0000000000000000 00007f91db212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff8880214d3980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000321f700 RSP=ffffc9000321f580
R8 =ffffffff8fa37f37 R9 =1ffffffff1f46fe6 R10=dffffc0000000000 R11=fffffbfff1f46fe7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44e04 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43330f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f43325976c3 00007f43325976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0100100001800401 0000060806060168
XMM06=d400080001e00300 100001d0030e1000 XMM07=01c00302100001b0 03049010000d9003
XMM08=0578000800170000 000000000000aa14 XMM09=3966666666666666 660a79656b5f7373
XMM10=7664617461622062 2030386163303061 XMM11=5f687361685f6c61 626f6c675f74745f
XMM12=6666666666666666 0a31312e79656b5f XMM13=715f626b73206220 3061656630306139
XMM14=5f2e74696e695f64 6165685f65756575 XMM15=3061396666666666 6666660a79656b5f
