last executing test programs:

1m55.50667447s ago: executing program 0 (id=2087):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@allocspi={0x144, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x7, 0x4e22, 0x6, 0xa, 0x20, 0x80, 0x21}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@private1, {0xffffffffffff8000, 0x2, 0xffffffffffffffff, 0x2, 0x2, 0xcea, 0x1, 0x1}, {0x3, 0x9, 0x0, 0xde}, {0x17, 0x9, 0x4}, 0x70bd2c, 0x3503, 0x2, 0x2, 0xe, 0x3}, 0x7f, 0x51e}, [@algo_auth_trunc={0x4c, 0x14, {{'blake2b-384\x00'}, 0x0, 0x80}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x4)

1m55.506362385s ago: executing program 0 (id=2088):
socket$kcm(0x29, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r4, &(0x7f0000000400), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"], 0x50)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)

1m55.484967897s ago: executing program 0 (id=2089):
r0 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0)

1m54.585427604s ago: executing program 0 (id=2097):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3}, 0x94)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x818, 0x2, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)

1m54.038088281s ago: executing program 1 (id=2100):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000bfd50000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe)

1m53.960633147s ago: executing program 1 (id=2102):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="040100001600010025bd7000ffdbdf2500000000000000000000000000000000fc0100000000000000000000000000014e2200004e200003020020a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000b000004d533000000ac1414aa00000000000000000000000001000000000000000f00000000000000040000000000000001800000000000000800000000000000f907000000000000f0aa000000000000020000000000000000005000000000000400000000000000040000000000000002000000000000000ac900008a262721080000002bbd7000073500000a0000041000000000000000ff"], 0x104}, 0x1, 0x0, 0x0, 0x2}, 0x48000)

1m53.960320775s ago: executing program 1 (id=2103):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000040ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d3e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c47365e78c80854b2baf8eb320d8c34cfc81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6afd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d0504f1ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f415f6ac8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2f600000000000000e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83f869fbb866c57567826efc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d58710d1febe7394cf8b02f59dab24d07db3d3c1ebff5244f438b3d6d15a30ec32aadb3cfa1c2f7dac7c5937c14702a3a0702b53115c163eb91275aedd6ad46b49b100208e73bb2c57068664f8ffd34bc8708faadd12d80875d7f1c0d9cd1ddd292e1efe9780c02487a38a688dfc173fac71249cdee0fc53336ede131253606067e3dd22f2e5db2b9d570b1fb3f3add20b3a02caf5721868b642a2e5cf40a03c49b8fe89fa6b7b4a823104f2314d37e7de67b719bf3aba1273a974f38f7c82d4fa14aa12599ad6ae5197c3c0040e5beb587d917992168e412403cf568acf630927e005b9a75"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

1m53.900098315s ago: executing program 1 (id=2106):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x838, 0x0, 0x0, 0x0, 0x0, 0x7ffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="940100000b060500000000000005340007800500070001"], 0x194}, 0x1, 0x0, 0x0, 0x1}, 0x10008000)

1m53.831412778s ago: executing program 1 (id=2107):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, 0x0, &(0x7f0000000080)=r0}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10)
perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x7, 0xff, 0xe9, 0x7f, 0x0, 0x4, 0x50000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000003c0), 0x5}, 0xc402, 0xc, 0x2, 0x8, 0x81, 0x3, 0x46, 0x0, 0x200007, 0x0, 0xffd}, 0xffffffffffffffff, 0x2, r4, 0x1)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@fallback, 0x6, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000fc0)={@ifindex, r6, 0x16, 0x34, r6, @void, @void, @void, @value, r7}, 0x20)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1m53.709577504s ago: executing program 0 (id=2108):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0)

1m53.641384427s ago: executing program 1 (id=2109):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e", 0x181}], 0x3}, 0x0)

1m53.507860763s ago: executing program 32 (id=2109):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0)

1m53.461173153s ago: executing program 0 (id=2111):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a00142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

1m53.400673714s ago: executing program 33 (id=2111):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a00142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)

674.411288ms ago: executing program 3 (id=4124):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

538.921154ms ago: executing program 4 (id=4129):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20702, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400089d)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4048001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

440.240052ms ago: executing program 4 (id=4130):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x12, 0x1, 0x0, 0x25dfdbff, {0xa, 0xa5, 0x0, 0xfd, {0x4001, 0x0, [], [], 0x0, [0x1, 0x300]}, 0x0, 0x1}}, 0x4c}}, 0x0)

440.001092ms ago: executing program 4 (id=4131):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x77}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

389.270299ms ago: executing program 4 (id=4132):
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)

389.062832ms ago: executing program 4 (id=4133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c0002400000000000000001090001"], 0xe8}}, 0x0)

327.267294ms ago: executing program 4 (id=4134):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e217ffbfffffee700000000000000000000000000aa040000000000000002000100000004d4008100000100008005000500000000000a"], 0x70}, 0x1, 0x400000000000000}, 0x20000000)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x8000, r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="190000000400000008e4ffff0700004000000022af96766479360cd3b875d100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000400000000000000000100000045133e595b8dc640918a9ae7d2e84008da9049090000009500000015d7fc6f4be80000000012fbf31153b7a5fd408cddb66c9c28d2705a3dfec34bef9a98a497a5971ec28f95f63b765dc99a4cb0a34950e93439f56904000000000000001343d667d9aa5f65d22217cbccc67747f6dbb4018251ed53ee4a4783fff14729c7741b4ce1c9e83e88"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x34, &(0x7f0000000200)=""/52, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x4, 0x2, 0x1, 0x1}, {0x0, 0x3, 0xf, 0xb}, {0x4, 0x4, 0x8, 0x8}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='cachefiles_vol_coherency\x00', r2, 0x0, 0x7}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18)
r3 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r3, &(0x7f0000000880)={&(0x7f0000000740)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/123, 0x7b}], 0x1, &(0x7f0000000840)=""/56, 0x38}, 0x2)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf82000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x300, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

326.624705ms ago: executing program 3 (id=4136):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000)

326.094916ms ago: executing program 3 (id=4138):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=@delsa={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in6=@remote, 0x4d4, 0x8, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x5}}]}, 0x34}}, 0x40)

269.546797ms ago: executing program 3 (id=4140):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

220.759473ms ago: executing program 2 (id=4142):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x54, 0x0, 0x0)

220.397581ms ago: executing program 2 (id=4143):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x0, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000e35e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

130.595664ms ago: executing program 2 (id=4144):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114a00000000020000000000000000850000000500004095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)

59.769951ms ago: executing program 3 (id=4145):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
gettid()

59.509642ms ago: executing program 2 (id=4146):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x10, 0x140b, 0x201, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

59.052993ms ago: executing program 2 (id=4147):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x40, 0xf4, 0x1, 0x48010, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, 0x0, &(0x7f00000002c0)=""/168, 0x4}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000044000900fffffffffddbdf250400000004001f00100001"], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x840)

248.881µs ago: executing program 3 (id=4148):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x3000c085)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000fe0c00000a0000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000001000000", @ANYRES32, @ANYBLOB="0200000000000000fcffffff00"/28], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000090000000000000000008081108008"], 0x0, 0x5}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x90)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1a28, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0)

0s ago: executing program 2 (id=4149):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3000000, 0x3}}}}]}]}, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

forwarding state
[   60.529107][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.541254][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   60.556439][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.559037][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.575865][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.578311][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.612892][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.632144][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   60.643412][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.645794][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.673201][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.675571][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.710742][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.760446][ T5874] veth0_vlan: entered promiscuous mode
[   60.774897][ T5874] veth1_vlan: entered promiscuous mode
[   60.781262][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.815890][ T5874] veth0_macvtap: entered promiscuous mode
[   60.831024][ T5874] veth1_macvtap: entered promiscuous mode
[   60.846697][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.860514][ T5877] veth0_vlan: entered promiscuous mode
[   60.870848][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.875507][ T5877] veth1_vlan: entered promiscuous mode
[   60.884286][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.900028][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.917654][ T5889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.921895][ T5889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.930533][ T5889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.958787][ T5873] veth0_vlan: entered promiscuous mode
[   60.974581][ T5877] veth0_macvtap: entered promiscuous mode
[   60.988641][ T5877] veth1_macvtap: entered promiscuous mode
[   60.997332][ T5236] Bluetooth: hci1: command tx timeout
[   60.997684][ T5879] Bluetooth: hci2: command tx timeout
[   61.001436][ T5873] veth1_vlan: entered promiscuous mode
[   61.007780][ T5879] Bluetooth: hci0: command tx timeout
[   61.035533][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.042956][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.045486][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.050558][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.060817][ T5889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.080476][ T5889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.091202][ T5889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.119501][ T5889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.138246][ T5873] veth0_macvtap: entered promiscuous mode
[   61.148652][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.151760][ T5873] veth1_macvtap: entered promiscuous mode
[   61.151866][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.198220][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.204869][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.219488][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.226230][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.260045][ T5905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.274332][ T5905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.276909][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.280691][ T5905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.284242][ T5905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.288698][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.363578][ T5944] netlink: 'syz.2.16': attribute type 27 has an invalid length.
[   61.366265][ T5944] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.16'.
[   61.397482][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.400626][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.449096][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.452252][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.905411][ T5969] netlink: 'syz.2.26': attribute type 6 has an invalid length.
[   61.909626][ T5969] netlink: 'syz.2.26': attribute type 7 has an invalid length.
[   61.909835][ T5965] netlink: 'syz.1.24': attribute type 21 has an invalid length.
[   61.912650][ T5969] netlink: 9 bytes leftover after parsing attributes in process `syz.2.26'.
[   61.912670][ T5969] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.26'.
[   61.922920][ T5969] netlink: 'syz.2.26': attribute type 6 has an invalid length.
[   61.925380][ T5969] netlink: 'syz.2.26': attribute type 7 has an invalid length.
[   61.931205][ T5969] netlink: 9 bytes leftover after parsing attributes in process `syz.2.26'.
[   62.033013][ T5965] Zero length message leads to an empty skb
[   62.089304][ T5975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.30'.
[   62.275778][ T5986] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.351976][ T5879] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   62.625941][ T6012] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   62.629234][ T6012] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   62.643271][ T6013] netlink: 356 bytes leftover after parsing attributes in process `syz.0.48'.
[   62.648629][ T6013] netlink: 356 bytes leftover after parsing attributes in process `syz.0.48'.
[   63.078165][ T5879] Bluetooth: hci1: command tx timeout
[   63.080134][ T5879] Bluetooth: hci2: command tx timeout
[   63.082115][ T5236] Bluetooth: hci0: command tx timeout
[   63.140190][ T6035] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET)
[   63.755404][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'.
[   64.263372][ T6096] Illegal XDP return value 4294967294 on prog  (id 32) dev N/A, expect packet loss!
[   64.772089][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'.
[   64.776195][ T6127] netlink: 'syz.2.102': attribute type 21 has an invalid length.
[   64.779509][ T6127] netlink: 'syz.2.102': attribute type 1 has an invalid length.
[   65.021468][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'.
[   65.159374][ T5236] Bluetooth: hci0: command tx timeout
[   65.161736][ T5879] Bluetooth: hci2: command tx timeout
[   65.163985][ T5879] Bluetooth: hci1: command tx timeout
[   65.514362][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.525891][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.541374][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.544619][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.591632][ T5879] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[   66.444080][    C0] hrtimer: interrupt took 46091 ns
[   67.237344][ T5879] Bluetooth: hci1: command tx timeout
[   67.238041][ T5880] Bluetooth: hci2: command tx timeout
[   67.239842][ T5236] Bluetooth: hci0: command tx timeout
[   67.339488][ T6233] __nla_validate_parse: 4 callbacks suppressed
[   67.339503][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'.
[   67.345940][ T6233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.150'.
[   67.373346][ T6235] netlink: 'syz.1.151': attribute type 21 has an invalid length.
[   67.381642][ T6235] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.151'.
[   67.412998][ T6230] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.149'.
[   67.459075][ T6230] openvswitch: netlink: Message has 6 unknown bytes.
[   67.619871][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.154'.
[   67.627940][ T6240] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.149'.
[   67.792681][ T6253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'.
[   67.823718][ T6255] netlink: 'syz.1.159': attribute type 46 has an invalid length.
[   67.828260][ T6255] netlink: 212868 bytes leftover after parsing attributes in process `syz.1.159'.
[   68.008610][ T6271] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   68.011858][ T6271] netlink: 'syz.2.167': attribute type 3 has an invalid length.
[   68.027575][ T6271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.167'.
[   68.211317][   T10] cfg80211: failed to load regulatory.db
[   68.825771][ T6304] delete_channel: no stack
[   68.843933][ T6304] delete_channel: no stack
[   68.966285][ T6309] netlink: 14 bytes leftover after parsing attributes in process `syz.1.184'.
[   69.916310][ T6309] hsr_slave_0: left promiscuous mode
[   69.920029][ T6309] hsr_slave_1: left promiscuous mode
[   70.176533][ T6333] netlink: 'syz.1.189': attribute type 10 has an invalid length.
[   70.274525][ T6333] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.161234][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.164168][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.348398][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.351243][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.354750][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.357944][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.471050][ T5880] Bluetooth: hci0: unexpected event 0x17 length: 151 > 6
[   73.782495][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'.
[   73.849067][ T6469] netlink: 4200 bytes leftover after parsing attributes in process `syz.1.248'.
[   73.975001][ T6480] netlink: 140 bytes leftover after parsing attributes in process `syz.2.254'.
[   73.982518][ T6480] netlink: 6 bytes leftover after parsing attributes in process `syz.2.254'.
[   75.011364][ T6530] netlink: 136 bytes leftover after parsing attributes in process `syz.2.274'.
[   75.149712][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[   75.438357][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'.
[   75.451422][ T6550] lo speed is unknown, defaulting to 1000
[   75.455412][ T6550] lo speed is unknown, defaulting to 1000
[   75.462048][ T6550] lo speed is unknown, defaulting to 1000
[   75.585692][   T10] lo speed is unknown, defaulting to 1000
[   75.588617][ T6550] infiniband syz1: set active
[   75.590817][ T6550] infiniband syz1: added lo
[   75.656134][ T6550] RDS/IB: syz1: added
[   75.659142][ T6550] smc: adding ib device syz1 with port count 1
[   75.667987][ T6550] smc:    ib device syz1 port 1 has pnetid 
[   75.670664][ T5940] lo speed is unknown, defaulting to 1000
[   75.674368][ T6550] lo speed is unknown, defaulting to 1000
[   75.883160][ T6550] lo speed is unknown, defaulting to 1000
[   76.003084][ T6550] lo speed is unknown, defaulting to 1000
[   76.149824][ T6550] syz.1.283 (6550) used greatest stack depth: 19464 bytes left
[   76.337479][ T6584] syz.1.296: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   76.344233][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(full) 
[   76.344252][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.344260][ T6584] Call Trace:
[   76.344266][ T6584]  <TASK>
[   76.344272][ T6584]  dump_stack_lvl+0x189/0x250
[   76.344297][ T6584]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.344312][ T6584]  ? __pfx__printk+0x10/0x10
[   76.344329][ T6584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.344345][ T6584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   76.344360][ T6584]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   76.344377][ T6584]  warn_alloc+0x214/0x310
[   76.344396][ T6584]  ? stack_depot_save_flags+0x41b/0x860
[   76.344415][ T6584]  ? __pfx_warn_alloc+0x10/0x10
[   76.344435][ T6584]  ? kasan_save_track+0x4f/0x80
[   76.344450][ T6584]  ? xskq_create+0x56/0x170
[   76.344463][ T6584]  ? xsk_init_queue+0xb0/0x110
[   76.344476][ T6584]  ? xsk_setsockopt+0x57b/0x8d0
[   76.344487][ T6584]  ? do_sock_setsockopt+0x17c/0x1b0
[   76.344505][ T6584]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   76.344515][ T6584]  ? do_syscall_64+0xfa/0x3b0
[   76.344529][ T6584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.344546][ T6584]  __vmalloc_node_range_noprof+0x125/0x12f0
[   76.344581][ T6584]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   76.344597][ T6584]  ? xskq_create+0x56/0x170
[   76.344647][ T6584]  ? __kasan_kmalloc+0x93/0xb0
[   76.344666][ T6584]  vmalloc_user_noprof+0xad/0xf0
[   76.344682][ T6584]  ? xskq_create+0xbf/0x170
[   76.344695][ T6584]  xskq_create+0xbf/0x170
[   76.344726][ T6584]  xsk_init_queue+0xb0/0x110
[   76.344736][ T6584]  xsk_setsockopt+0x57b/0x8d0
[   76.344745][ T6584]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.344752][ T6584]  ? __pfx_aa_sk_perm+0x10/0x10
[   76.344764][ T6584]  ? __fget_files+0x2a/0x420
[   76.344769][ T6584]  ? aa_sock_opt_perm+0xff/0x1b0
[   76.344780][ T6584]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   76.344791][ T6584]  ? __pfx_xsk_setsockopt+0x10/0x10
[   76.344803][ T6584]  do_sock_setsockopt+0x17c/0x1b0
[   76.344822][ T6584]  __x64_sys_setsockopt+0x13f/0x1b0
[   76.344838][ T6584]  do_syscall_64+0xfa/0x3b0
[   76.344852][ T6584]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.344865][ T6584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.344902][ T6584]  ? exc_page_fault+0x9f/0xf0
[   76.344921][ T6584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.344933][ T6584] RIP: 0033:0x7fe503b8ebe9
[   76.344945][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.344954][ T6584] RSP: 002b:00007fe504ab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   76.344967][ T6584] RAX: ffffffffffffffda RBX: 00007fe503db5fa0 RCX: 00007fe503b8ebe9
[   76.344974][ T6584] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[   76.344978][ T6584] RBP: 00007fe503c11e19 R08: 0000000000000004 R09: 0000000000000000
[   76.344982][ T6584] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   76.344987][ T6584] R13: 00007fe503db6038 R14: 00007fe503db5fa0 R15: 00007fffba9eee38
[   76.344999][ T6584]  </TASK>
[   76.345253][ T6584] Mem-Info:
[   76.491579][ T6584] active_anon:4927 inactive_anon:0 isolated_anon:0
[   76.491579][ T6584]  active_file:10050 inactive_file:38219 isolated_file:0
[   76.491579][ T6584]  unevictable:1768 dirty:1427 writeback:0
[   76.491579][ T6584]  slab_reclaimable:9493 slab_unreclaimable:52116
[   76.491579][ T6584]  mapped:18019 shmem:2431 pagetables:953
[   76.491579][ T6584]  sec_pagetables:0 bounce:0
[   76.491579][ T6584]  kernel_misc_reclaimable:0
[   76.491579][ T6584]  free:292909 free_pcp:20305 free_cma:0
[   76.513414][ T6584] Node 0 active_anon:7492kB inactive_anon:0kB active_file:7552kB inactive_file:5168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23500kB dirty:2780kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7564kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.528154][ T6584] Node 1 active_anon:12148kB inactive_anon:0kB active_file:32648kB inactive_file:147708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48576kB dirty:2928kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4088kB pagetables:1828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   76.543367][ T6584] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.560493][ T6584] lowmem_reserve[]: 0 811 811 811 811
[   76.563148][ T6584] Node 0 DMA32 free:449048kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7560kB inactive_anon:0kB active_file:7552kB inactive_file:5168kB unevictable:3536kB writepending:2780kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:31752kB local_pcp:14384kB free_cma:0kB
[   76.576945][ T6584] lowmem_reserve[]: 0 0 0 0 0
[   76.579246][ T6584] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   76.593950][ T6584] lowmem_reserve[]: 0 0 854 854 854
[   76.597372][ T6584] Node 1 Normal free:255428kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12204kB inactive_anon:0kB active_file:32648kB inactive_file:147708kB unevictable:3536kB writepending:2932kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42612kB local_pcp:20136kB free_cma:0kB
[   76.613580][ T6584] lowmem_reserve[]: 0 0 0 0 0
[   76.616000][ T6584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   76.623793][ T6584] Node 0 DMA32: 1*4kB (M) 120*8kB (UM) 151*16kB (UM) 204*32kB (UME) 44*64kB (UM) 21*128kB (UME) 2*256kB (UE) 2*512kB (UE) 0*1024kB 1*2048kB (E) 105*4096kB (UM) = 449076kB
[   76.649113][ T6594] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[   76.653022][ T6584] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   76.660655][ T6584] Node 1 Normal: 333*4kB (ME) 230*8kB (UME) 110*16kB (UME) 417*32kB (UME) 176*64kB (UM) 83*128kB (UME) 10*256kB (UM) 3*512kB (ME) 2*1024kB (M) 2*2048kB (UE) 50*4096kB (M) = 255204kB
[   76.670466][ T6584] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.677599][ T6584] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   76.681606][ T6584] 50702 total pagecache pages
[   76.683652][ T6584] 0 pages in swap cache
[   76.697122][ T6584] Free swap  = 124996kB
[   76.698996][ T6584] Total swap = 124996kB
[   76.700746][ T6584] 786301 pages RAM
[   76.702393][ T6584] 0 pages HighMem/MovableOnly
[   76.704454][ T6584] 241329 pages reserved
[   76.706286][ T6584] 0 pages cma reserved
[   79.717394][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.723007][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.730936][ T6609] bridge0: entered allmulticast mode
[   79.759642][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.762644][ T6609] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.768747][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.772682][ T6609] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.780650][ T6609] bridge0: entered promiscuous mode
[   82.928176][ T6643] netlink: 72 bytes leftover after parsing attributes in process `syz.0.318'.
[   82.933200][ T6644] x_tables: ip_tables: icmp match: only valid for protocol 1
[   83.153588][ T6656] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.324'.
[   83.203715][ T6658] netlink: 'syz.0.325': attribute type 10 has an invalid length.
[   83.230204][ T6658] veth0_vlan: left promiscuous mode
[   83.233227][ T6658] veth0_vlan: entered promiscuous mode
[   83.240718][ T6658] team0: Device veth0_vlan failed to register rx_handler
[   83.592603][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'.
[   83.824386][ T6660] syzkaller0: entered promiscuous mode
[   83.832854][ T6660] syzkaller0: entered allmulticast mode
[   83.914287][ T6671] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.960984][ T6681] netlink: 182 bytes leftover after parsing attributes in process `syz.0.333'.
[   84.372545][ T6671] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   84.968332][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   85.038945][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'.
[   85.042357][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'.
[   85.054149][ T6714] netlink: 'syz.0.347': attribute type 5 has an invalid length.
[   86.572651][ T6752] netlink: 'syz.2.365': attribute type 39 has an invalid length.
[   87.077596][ T6774] netlink: 'syz.2.374': attribute type 21 has an invalid length.
[   87.445774][ T6787] sctp: [Deprecated]: syz.2.380 (pid 6787) Use of int in max_burst socket option deprecated.
[   87.445774][ T6787] Use struct sctp_assoc_value instead
[   87.577893][ T6796] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.384'.
[   88.476408][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.2.411'.
[   89.270135][ T6875] netlink: 'syz.0.421': attribute type 12 has an invalid length.
[   89.273617][ T6875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.421'.
[   89.349990][ T6887] netlink: 'syz.1.425': attribute type 29 has an invalid length.
[   89.353054][ T6887] netlink: 'syz.1.425': attribute type 3 has an invalid length.
[   89.356645][ T6887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.425'.
[   89.443371][ T5880] Bluetooth: hci2: Malformed LE Event: 0x0d
[   89.446020][ T6894] netlink: 176 bytes leftover after parsing attributes in process `syz.2.428'.
[   91.319699][ T6953] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.453'.
[   91.542226][ T6962] lo speed is unknown, defaulting to 1000
[   92.091973][ T6968] netlink: 'syz.2.459': attribute type 4 has an invalid length.
[   92.094810][ T6968] netlink: 152 bytes leftover after parsing attributes in process `syz.2.459'.
[   92.128988][ T6968] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   92.195708][ T6970] syzkaller0: entered promiscuous mode
[   92.199248][ T6970] syzkaller0: entered allmulticast mode
[   92.374144][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'.
[   93.398264][ T5880] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[   93.496083][ T6998] lo speed is unknown, defaulting to 1000
[   93.500079][ T6998] lo speed is unknown, defaulting to 1000
[   93.513915][ T6998] lo speed is unknown, defaulting to 1000
[   93.546757][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[   93.625881][ T6998] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   93.743562][ T6998] lo speed is unknown, defaulting to 1000
[   93.759161][ T6998] lo speed is unknown, defaulting to 1000
[   93.769510][ T6998] lo speed is unknown, defaulting to 1000
[   94.622349][ T7030] netlink: 'syz.0.484': attribute type 17 has an invalid length.
[   94.625063][ T7030] netlink: 'syz.0.484': attribute type 16 has an invalid length.
[   94.631358][ T7030] netlink: 152 bytes leftover after parsing attributes in process `syz.0.484'.
[   94.754041][ T7043] netlink: 'syz.1.490': attribute type 21 has an invalid length.
[   95.602057][ T7060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'.
[   95.682162][ T5880] Bluetooth: hci1: Malformed HCI Event: 0x22
[   95.765167][ T7070] netlink: 48 bytes leftover after parsing attributes in process `syz.2.501'.
[   95.955067][ T7088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.405633][ T7117] netlink: 'syz.0.524': attribute type 10 has an invalid length.
[   96.421265][ T7117] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   96.584634][ T7123] netlink: 188 bytes leftover after parsing attributes in process `syz.2.528'.
[   96.938648][ T7135] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[   96.944495][ T7135] netlink: 124 bytes leftover after parsing attributes in process `syz.0.534'.
[   96.956912][ T7135] netlink: 125920 bytes leftover after parsing attributes in process `syz.0.534'.
[   96.964935][ T7135] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[   96.984900][ T7135] netlink: 124 bytes leftover after parsing attributes in process `syz.0.534'.
[   97.300815][ T7171] netlink: 752 bytes leftover after parsing attributes in process `syz.2.550'.
[   97.339743][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'.
[   97.455848][ T7188] netlink: 'syz.2.559': attribute type 9 has an invalid length.
[   97.795639][ T7197] mac80211_hwsim hwsim5 O3c: renamed from wlan1 (while UP)
[   99.425597][ T7260] __nla_validate_parse: 2 callbacks suppressed
[   99.425609][ T7260] netlink: 64 bytes leftover after parsing attributes in process `syz.0.588'.
[   99.437099][ T7262] netlink: 60 bytes leftover after parsing attributes in process `syz.2.589'.
[   99.640600][ T7278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.710869][ T7281] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.597'.
[   99.714723][ T7281] openvswitch: netlink: Message has 6 unknown bytes.
[   99.807966][ T7291] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.811191][ T7291] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.071806][ T7300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.603'.
[  100.076608][ T7299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.603'.
[  100.084433][ T7300] netlink: 60 bytes leftover after parsing attributes in process `syz.2.603'.
[  100.290757][ T7309] netlink: 'syz.2.607': attribute type 29 has an invalid length.
[  100.308703][ T7309] netlink: 'syz.2.607': attribute type 29 has an invalid length.
[  100.313399][ T7309] netlink: 'syz.2.607': attribute type 29 has an invalid length.
[  100.318988][ T7309] netlink: 'syz.2.607': attribute type 29 has an invalid length.
[  100.370791][ T7311] netlink: 'syz.2.608': attribute type 22 has an invalid length.
[  100.373841][ T7311] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  100.382231][ T7311] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.608'.
[  100.412239][ T7313] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.609'.
[  100.713949][ T7327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.617'.
[  100.751045][ T7333] netlink: 'syz.1.619': attribute type 15 has an invalid length.
[  100.754392][ T7333] netlink: 'syz.1.619': attribute type 7 has an invalid length.
[  100.760910][ T7333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.619'.
[  100.777424][ T7331] netlink: 'syz.0.618': attribute type 39 has an invalid length.
[  101.204815][ T7351] netlink: zone id is out of range
[  101.206959][ T7351] netlink: zone id is out of range
[  101.208969][ T7351] netlink: zone id is out of range
[  101.210737][ T7351] netlink: zone id is out of range
[  101.212429][ T7351] netlink: zone id is out of range
[  101.216222][ T7351] netlink: zone id is out of range
[  101.235922][ T7351] netlink: zone id is out of range
[  101.253364][ T7351] netlink: zone id is out of range
[  101.334612][ T7366] netlink: 'syz.1.634': attribute type 5 has an invalid length.
[  104.591701][ T7399] syzkaller0: entered promiscuous mode
[  104.594142][ T7399] syzkaller0: entered allmulticast mode
[  104.782957][ T7408] __nla_validate_parse: 3 callbacks suppressed
[  104.782966][ T7408] netlink: 400 bytes leftover after parsing attributes in process `syz.0.649'.
[  105.538644][ T7415] netlink: 'syz.0.652': attribute type 2 has an invalid length.
[  105.542155][ T7415] netlink: 'syz.0.652': attribute type 1 has an invalid length.
[  105.550605][ T7415] netlink: 'syz.0.652': attribute type 1 has an invalid length.
[  105.781059][ T7433] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[  106.701505][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  106.705400][ T7456] net_ratelimit: 74 callbacks suppressed
[  106.705412][ T7456] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  106.712048][ T7456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.826232][ T7460] netlink: 'syz.0.671': attribute type 16 has an invalid length.
[  106.831306][ T7460] netlink: 156 bytes leftover after parsing attributes in process `syz.0.671'.
[  106.922216][ T7467] netlink: 809 bytes leftover after parsing attributes in process `syz.0.671'.
[  106.926141][ T7467] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.671'.
[  106.950590][ T7467] netlink: 809 bytes leftover after parsing attributes in process `syz.0.671'.
[  107.981846][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[  108.176240][ T7499] netlink: 88 bytes leftover after parsing attributes in process `syz.2.686'.
[  110.859182][ T7548] netlink: 'syz.2.705': attribute type 11 has an invalid length.
[  110.865817][ T7548] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.705'.
[  110.939881][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.329411][   T12] syzkaller0: tun_net_xmit 76
[  111.333545][   T12] syzkaller0: tun_net_xmit 48
[  111.339039][ T7572] syzkaller0: create flow: hash 2761434221 index 1
[  111.357467][ T2208] syzkaller0: tun_net_xmit 76
[  111.388751][ T7571] syzkaller0: delete flow: hash 2761434221 index 1
[  112.404490][ T7591] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.722'.
[  112.451103][ T7595] netlink: 10 bytes leftover after parsing attributes in process `syz.1.724'.
[  112.611412][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[  112.981682][ T7620] netlink: 'syz.0.736': attribute type 1 has an invalid length.
[  113.809788][ T7678] delete_channel: no stack
[  114.084596][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  114.089458][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  114.260520][ T7702] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.766'.
[  114.331195][ T7706] netlink: 'syz.1.768': attribute type 33 has an invalid length.
[  114.334393][ T7706] netlink: 152 bytes leftover after parsing attributes in process `syz.1.768'.
[  114.427945][ T7708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.638442][ T7723] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  114.683489][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.687536][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.818004][ T7737] netlink: 92 bytes leftover after parsing attributes in process `syz.0.778'.
[  114.821732][ T7737] netlink: 92 bytes leftover after parsing attributes in process `syz.0.778'.
[  115.377916][ T7768] delete_channel: no stack
[  115.379885][ T7768] delete_channel: no stack
[  115.608280][ T7784] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.209668][ T7818] netlink: 'syz.0.808': attribute type 29 has an invalid length.
[  116.700326][ T7856] __nla_validate_parse: 2 callbacks suppressed
[  116.700386][ T7856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.825'.
[  117.732165][ T7876] netlink: 'syz.2.834': attribute type 2 has an invalid length.
[  117.735139][ T7876] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.834'.
[  118.440601][ T5880] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8
[  119.398448][ T5880] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  119.816556][ T7958] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.871'.
[  119.876721][ T7964] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  120.362730][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'.
[  120.813376][ T7994] netlink: 'syz.0.884': attribute type 2 has an invalid length.
[  120.818003][ T7994] netlink: 'syz.0.884': attribute type 8 has an invalid length.
[  120.821115][ T7994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.884'.
[  121.444026][ T8033] netlink: 'syz.2.901': attribute type 1 has an invalid length.
[  121.485419][ T5879] Bluetooth: hci1: command tx timeout
[  122.160468][ T8052] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[  122.481623][ T8063] netlink: 'syz.0.913': attribute type 21 has an invalid length.
[  122.485163][ T8063] netlink: 128 bytes leftover after parsing attributes in process `syz.0.913'.
[  122.489512][ T8063] netlink: 'syz.0.913': attribute type 6 has an invalid length.
[  122.492935][ T8063] netlink: 3 bytes leftover after parsing attributes in process `syz.0.913'.
[  122.585813][ T8071] netlink: 'syz.0.916': attribute type 33 has an invalid length.
[  122.590644][ T8071] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.916'.
[  122.752281][ T8075] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.756489][ T8075] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.836056][ T8080] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  123.740689][ T8090] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.923'.
[  123.741458][ T8094] netlink: 'syz.0.925': attribute type 29 has an invalid length.
[  123.755133][ T8094] netlink: 'syz.0.925': attribute type 29 has an invalid length.
[  123.965935][ T8111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.932'.
[  124.007025][ T8111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.932'.
[  124.025991][ T5879] Bluetooth: hci0: unexpected event 0x3d length: 151 > 14
[  130.296992][ T8287] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1007'.
[  130.300948][ T8287] netlink: zone id is out of range
[  130.303151][ T8287] netlink: zone id is out of range
[  130.305383][ T8287] netlink: zone id is out of range
[  130.356921][ T8287] netlink: zone id is out of range
[  130.360929][ T8287] netlink: zone id is out of range
[  130.363272][ T8287] netlink: zone id is out of range
[  130.365600][ T8287] netlink: zone id is out of range
[  130.368695][ T8287] netlink: zone id is out of range
[  130.371046][ T8287] netlink: zone id is out of range
[  130.373405][ T8287] netlink: zone id is out of range
[  131.183465][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1018'.
[  131.428404][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1026'.
[  131.433366][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'.
[  131.639079][ T5879] Bluetooth: hci2: ACL packet too small
[  131.698458][ T8347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1033'.
[  131.712329][ T8349] validate_nla: 3 callbacks suppressed
[  131.712342][ T8349] netlink: 'syz.2.1034': attribute type 12 has an invalid length.
[  131.721304][ T8349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1034'.
[  132.602915][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.606286][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.772542][ T8436] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  134.335788][ T8446] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  134.341279][ T8446] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  134.344329][ T8446] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  135.669431][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[  136.137279][ T8538] netlink: 'syz.0.1120': attribute type 29 has an invalid length.
[  136.140678][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  136.211442][ T8542] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1122'.
[  136.317999][ T5879] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  136.629747][ T8563] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1126'.
[  136.722778][ T8567] netlink: 'syz.0.1131': attribute type 21 has an invalid length.
[  136.852942][ T8575] netlink: 'syz.0.1135': attribute type 4 has an invalid length.
[  136.857180][ T8575] netlink: 'syz.0.1135': attribute type 10 has an invalid length.
[  136.872087][ T8575] team0: Port device dummy0 added
[  137.300674][ T8584] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  137.345825][ T8587] netlink: 'syz.2.1140': attribute type 10 has an invalid length.
[  137.360522][ T8587] geneve0: entered promiscuous mode
[  137.375564][ T8587] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  137.384460][ T8588] netlink: 'syz.1.1141': attribute type 21 has an invalid length.
[  137.388883][ T8588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1141'.
[  137.392856][ T8588] netlink: 'syz.1.1141': attribute type 1 has an invalid length.
[  137.552201][ T8593] netlink: 'syz.1.1142': attribute type 3 has an invalid length.
[  137.555787][ T8593] netlink: 'syz.1.1142': attribute type 1 has an invalid length.
[  137.560278][ T8593] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1142'.
[  137.637985][ T8597] net_ratelimit: 77 callbacks suppressed
[  137.637998][ T8597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.791807][ T8603] IPv6: NLM_F_REPLACE set, but no existing node found!
[  137.900684][ T8613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1151'.
[  138.279316][ T8632] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1161'.
[  138.357035][ T5880] Bluetooth: hci1: command 0x0406 tx timeout
[  138.571216][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'.
[  138.673263][ T8659] openvswitch: netlink: IP tunnel dst address not specified
[  138.851913][ T8663] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.855452][ T8663] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.955917][ T8666] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  138.959653][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  142.893134][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1191'.
[  143.732195][ T8743] validate_nla: 4 callbacks suppressed
[  143.732206][ T8743] netlink: 'syz.1.1209': attribute type 3 has an invalid length.
[  143.738578][ T8743] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1209'.
[  143.854715][ T8706] delete_channel: no stack
[  143.933824][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  144.225111][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'.
[  144.228562][ T8777] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  144.375803][ T8787] netlink: 'syz.1.1229': attribute type 21 has an invalid length.
[  144.385882][ T8787] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1229'.
[  144.894967][ T8822] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1241'.
[  145.273755][ T5879] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  145.690818][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1265'.
[  145.696648][ T8867] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1265'.
[  145.713308][ T8867] netlink: 'syz.0.1265': attribute type 5 has an invalid length.
[  145.715981][ T8867] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1265'.
[  146.237978][ T8891] netlink: 'syz.1.1275': attribute type 5 has an invalid length.
[  146.241370][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'.
[  146.397935][ T8903] netlink: 'syz.2.1282': attribute type 10 has an invalid length.
[  146.409737][ T8903] team0: Port device syz_tun added
[  146.456390][ T8907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.262242][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'.
[  147.317573][ T5879] Bluetooth: hci1: command 0x0406 tx timeout
[  147.982217][ T8977] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.1316'.
[  148.062942][ T8988] netlink: 'syz.0.1321': attribute type 2 has an invalid length.
[  148.191135][ T8992] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1324'.
[  148.372260][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'.
[  148.520117][ T9015] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1335'.
[  148.644615][ T9006] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1331'.
[  148.897737][ T9029] bridge0: entered allmulticast mode
[  149.905588][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'.
[  149.980716][ T9052] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1351'.
[  150.130425][ T9058] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1354'.
[  150.319923][ T9066] netlink: 'syz.2.1358': attribute type 10 has an invalid length.
[  150.322497][ T9066] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1358'.
[  150.352760][ T9068] netlink: 'syz.2.1360': attribute type 12 has an invalid length.
[  150.355731][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1360'.
[  150.635676][ T9084] netlink: 'syz.2.1366': attribute type 29 has an invalid length.
[  150.843271][ T9084] netlink: 'syz.2.1366': attribute type 29 has an invalid length.
[  150.885636][ T9084] netlink: 'syz.2.1366': attribute type 29 has an invalid length.
[  150.943377][ T9084] netlink: 'syz.2.1366': attribute type 29 has an invalid length.
[  151.461145][ T9112] syzkaller0: entered promiscuous mode
[  151.467381][ T9112] syzkaller0: entered allmulticast mode
[  151.691321][ T9128] netlink: 'syz.1.1387': attribute type 21 has an invalid length.
[  152.426434][ T9147] : entered promiscuous mode
[  153.002252][ T9174] __nla_validate_parse: 5 callbacks suppressed
[  153.002270][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1408'.
[  153.009564][ T9174] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1408'.
[  153.013495][ T9174] netlink: 'syz.1.1408': attribute type 5 has an invalid length.
[  153.016136][ T9174] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1408'.
[  153.039296][ T9170] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1407'.
[  153.076543][   T33] audit: type=1107 audit(1755611785.214:2): pid=9177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  153.178365][ T9179] netlink: 'syz.0.1406': attribute type 10 has an invalid length.
[  153.182804][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1406'.
[  153.197830][ T9179] dummy0: entered promiscuous mode
[  153.222374][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'.
[  153.252583][ T9179] team0: Port device dummy0 removed
[  153.258789][ T9179] bridge0: port 3(dummy0) entered blocking state
[  153.261849][ T9179] bridge0: port 3(dummy0) entered disabled state
[  153.264558][ T9179] dummy0: entered allmulticast mode
[  153.419918][ T9190] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1413'.
[  153.423648][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  153.969811][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'.
[  154.019616][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'.
[  154.994533][ T9229] netlink: 'syz.0.1429': attribute type 3 has an invalid length.
[  155.455119][ T9239] tap0: tun_chr_ioctl cmd 1074025678
[  155.465198][ T9239] tap0: group set to 0
[  155.813057][ T9254] validate_nla: 1 callbacks suppressed
[  155.813070][ T9254] netlink: 'syz.2.1441': attribute type 29 has an invalid length.
[  155.822619][ T9254] netlink: 'syz.2.1441': attribute type 29 has an invalid length.
[  155.826611][ T9254] netlink: 'syz.2.1441': attribute type 29 has an invalid length.
[  156.966252][ T9309] netlink: 'syz.0.1467': attribute type 16 has an invalid length.
[  156.969644][ T9309] netlink: 'syz.0.1467': attribute type 3 has an invalid length.
[  157.654133][ T9332] netlink: 'syz.2.1477': attribute type 31 has an invalid length.
[  158.029133][ T9347] __nla_validate_parse: 8 callbacks suppressed
[  158.029142][ T9347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'.
[  158.035209][ T9347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1483'.
[  158.081754][ T9349] cgroup: fork rejected by pids controller in /syz0
[  158.087469][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'.
[  158.234622][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'.
[  158.273864][ T9367] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1492'.
[  158.431002][ T9375] netlink: 'syz.1.1496': attribute type 13 has an invalid length.
[  158.434365][ T9375] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1496'.
[  158.471842][ T9373] netlink: 'syz.2.1495': attribute type 10 has an invalid length.
[  158.476122][ T9373] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1495'.
[  158.566726][ T9378] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1498'.
[  158.697590][ T9380] netlink: 'syz.1.1499': attribute type 9 has an invalid length.
[  158.771562][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.776381][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.786476][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.792316][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.795981][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  159.459961][ T9398] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.1506'.
[  159.485769][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.516280][ T9381] lo speed is unknown, defaulting to 1000
[  159.568965][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.630419][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.641018][ T9381] lo speed is unknown, defaulting to 1000
[  159.694778][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.873324][   T12] dummy0: left allmulticast mode
[  159.876389][   T12] bridge0: port 3(dummy0) entered disabled state
[  159.899574][   T12] bridge_slave_1: left allmulticast mode
[  159.902086][   T12] bridge_slave_1: left promiscuous mode
[  159.906691][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.915000][   T12] bridge_slave_0: left allmulticast mode
[  159.919845][   T12] bridge_slave_0: left promiscuous mode
[  159.922284][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.210504][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.218064][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.223593][   T12] bond0 (unregistering): Released all slaves
[  160.271738][ T9381] chnl_net:caif_netlink_parms(): no params data found
[  160.423370][ T9425] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1514'.
[  160.622077][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.625461][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.636611][ T9381] bridge_slave_0: entered allmulticast mode
[  160.643666][ T9381] bridge_slave_0: entered promiscuous mode
[  160.667544][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.670342][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.673388][ T9381] bridge_slave_1: entered allmulticast mode
[  160.690282][ T9381] bridge_slave_1: entered promiscuous mode
[  160.753534][ T5880] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10
[  160.774739][ T9381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.790887][ T9381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.839909][ T5880] Bluetooth: hci1: command tx timeout
[  160.940753][ T9381] team0: Port device team_slave_0 added
[  160.972287][ T9381] team0: Port device team_slave_1 added
[  161.091261][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.099934][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.125447][ T9381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.141886][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.144301][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.154691][ T9381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.172876][   T12] hsr_slave_0: left promiscuous mode
[  161.175724][   T12] hsr_slave_1: left promiscuous mode
[  161.186158][   T12] veth1_macvtap: left promiscuous mode
[  161.189967][   T12] veth0_macvtap: left promiscuous mode
[  161.193065][   T12] veth1_vlan: left promiscuous mode
[  161.529312][   T12] team0 (unregistering): Port device team_slave_1 removed
[  161.554532][   T12] team0 (unregistering): Port device team_slave_0 removed
[  161.905717][ T9381] hsr_slave_0: entered promiscuous mode
[  161.912523][ T9381] hsr_slave_1: entered promiscuous mode
[  161.915701][ T9381] debugfs: 'hsr0' already exists in 'hsr'
[  161.919851][ T9381] Cannot create hsr debugfs directory
[  162.920171][ T5880] Bluetooth: hci1: command tx timeout
[  163.064204][ T9489] netlink: 'syz.1.1533': attribute type 28 has an invalid length.
[  163.076418][ T9489] netlink: 'syz.1.1533': attribute type 29 has an invalid length.
[  163.089082][ T9489] __nla_validate_parse: 2 callbacks suppressed
[  163.089160][ T9489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1533'.
[  163.133301][ T9489] netlink: 'syz.1.1533': attribute type 9 has an invalid length.
[  163.136028][ T9489] netlink: 'syz.1.1533': attribute type 8 has an invalid length.
[  163.154412][ T9489] netlink: 143452 bytes leftover after parsing attributes in process `syz.1.1533'.
[  163.196495][ T9496] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1535'.
[  163.282872][ T9502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.524734][ T9381] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  163.530229][ T9381] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  163.541387][ T9381] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  163.561326][ T9381] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  163.633220][ T9381] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.644809][ T9381] 8021q: adding VLAN 0 to HW filter on device team0
[  163.659968][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.662522][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.669041][ T9536] netlink: 'syz.2.1546': attribute type 21 has an invalid length.
[  163.675417][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.677878][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.688811][ T9536] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1546'.
[  164.004143][ T9381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.083480][ T9381] veth0_vlan: entered promiscuous mode
[  164.092378][ T9381] veth1_vlan: entered promiscuous mode
[  164.113895][ T9381] veth0_macvtap: entered promiscuous mode
[  164.119473][ T9381] veth1_macvtap: entered promiscuous mode
[  164.146194][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.178357][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.194725][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.205806][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.220762][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.236214][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.246512][ T9580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1559'.
[  164.288359][ T9580] caif0: entered promiscuous mode
[  164.290433][ T9580] caif0: entered allmulticast mode
[  164.301152][ T9580] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1559'.
[  164.340115][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.344480][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.371068][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.374467][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.591370][ T9595] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  164.967897][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'.
[  164.971917][ T9611] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  164.975378][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.006893][ T5880] Bluetooth: hci1: command tx timeout
[  165.039445][ T9615] netlink: 'syz.2.1567': attribute type 2 has an invalid length.
[  165.042504][ T9615] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.1567'.
[  165.104502][ T9620] netlink: 'syz.2.1569': attribute type 8 has an invalid length.
[  165.109701][ T9620] netlink: 'syz.2.1569': attribute type 6 has an invalid length.
[  165.113307][ T9620] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1569'.
[  165.968895][ T9631] -1: renamed from syzkaller0
[  166.381211][ T9652] netlink: 'syz.1.1580': attribute type 2 has an invalid length.
[  166.384576][ T9652] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'.
[  166.838458][ T9681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.978701][ T9680] netlink: 'syz.1.1593': attribute type 10 has an invalid length.
[  167.026338][ T9680] geneve0: entered promiscuous mode
[  167.086993][ T5880] Bluetooth: hci1: command tx timeout
[  167.160879][ T9680] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  167.317814][ T9680] syz.1.1593 (9680) used greatest stack depth: 19128 bytes left
[  168.566332][ T9725] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1614'.
[  168.626976][ T9731] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1616'.
[  168.723857][ T9740] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1620'.
[  169.570855][ T9774] netlink: zone id is out of range
[  169.573118][ T9774] netlink: zone id is out of range
[  169.575314][ T9774] netlink: zone id is out of range
[  169.600342][ T9774] netlink: zone id is out of range
[  169.602134][ T9774] netlink: zone id is out of range
[  169.603892][ T9774] netlink: zone id is out of range
[  169.605613][ T9774] netlink: zone id is out of range
[  169.617456][ T9774] netlink: zone id is out of range
[  169.619257][ T9774] netlink: zone id is out of range
[  169.628188][ T9774] netlink: zone id is out of range
[  169.823386][ T9764] lo speed is unknown, defaulting to 1000
[  169.928016][ T9786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1640'.
[  170.132946][ T9789] syzkaller0: entered promiscuous mode
[  170.134784][ T9789] syzkaller0: entered allmulticast mode
[  170.203563][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'.
[  170.206650][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1642'.
[  170.218156][ T9792] validate_nla: 2 callbacks suppressed
[  170.218168][ T9792] netlink: 'syz.0.1642': attribute type 4 has an invalid length.
[  170.242055][ T9788] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  170.716731][ T9764] lo speed is unknown, defaulting to 1000
[  170.732436][ T9809] netlink: 'syz.2.1650': attribute type 10 has an invalid length.
[  170.735989][ T9809] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1650'.
[  172.038862][ T9840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.041536][ T9840] IPv6: NLM_F_CREATE should be set when creating new route
[  172.044067][ T9840] IPv6: NLM_F_CREATE should be set when creating new route
[  173.415308][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  173.450800][ T9870] syzkaller0: entered promiscuous mode
[  173.453157][ T9870] syzkaller0: entered allmulticast mode
[  173.818747][ T9887] lo speed is unknown, defaulting to 1000
[  174.002222][ T9887] lo speed is unknown, defaulting to 1000
[  174.085820][ T9907] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  176.146715][ T9952] syzkaller0: tun_chr_ioctl cmd 1074025677
[  176.157215][ T9952] syzkaller0: linktype set to 801
[  176.214649][ T9958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'.
[  176.426124][ T9967] lo speed is unknown, defaulting to 1000
[  176.567880][ T9979] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1721'.
[  176.576455][ T9974] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1721'.
[  176.592793][ T9979] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1721'.
[  176.622119][ T9967] lo speed is unknown, defaulting to 1000
[  176.638874][ T9982] netlink: 809 bytes leftover after parsing attributes in process `syz.1.1724'.
[  176.642830][ T9982] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.1724'.
[  176.648905][ T9982] netlink: 809 bytes leftover after parsing attributes in process `syz.1.1724'.
[  176.714122][ T9988] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  178.082140][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'.
[  178.092815][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'.
[  178.595509][T10050] netlink: 'syz.0.1752': attribute type 16 has an invalid length.
[  178.604849][T10050] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1752'.
[  178.622190][T10050] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.796454][T10057] netlink: 'syz.1.1754': attribute type 13 has an invalid length.
[  179.443298][T10072] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  180.034437][T10097] hsr_slave_0: left promiscuous mode
[  180.145556][T10097] hsr_slave_1: left promiscuous mode
[  180.704726][T10139] netlink: 'syz.0.1791': attribute type 1 has an invalid length.
[  181.057424][T10163] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  181.061131][T10163] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  181.463739][T10186] __nla_validate_parse: 7 callbacks suppressed
[  181.463782][T10186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1812'.
[  181.478993][T10186] caif0: left promiscuous mode
[  181.480948][T10186] caif0: left allmulticast mode
[  181.482865][T10186] net_ratelimit: 79 callbacks suppressed
[  181.482905][T10186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.780378][T10202] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.783429][T10202] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.792030][T10202] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.795144][T10202] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.853576][T10206] netlink: 'syz.2.1821': attribute type 12 has an invalid length.
[  181.860279][T10206] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1821'.
[  182.120192][T10215] netlink: 'syz.2.1825': attribute type 21 has an invalid length.
[  182.747907][T10251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1841'.
[  182.834411][T10256] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1843'.
[  182.838974][T10256] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1843'.
[  183.449271][T10275] syzkaller0: entered promiscuous mode
[  183.451526][T10275] syzkaller0: entered allmulticast mode
[  184.070886][ T5236] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  185.444431][T10339] netlink: 'syz.2.1880': attribute type 29 has an invalid length.
[  185.466538][T10339] netlink: 'syz.2.1880': attribute type 29 has an invalid length.
[  185.780109][T10350] netlink: 'syz.0.1884': attribute type 3 has an invalid length.
[  185.783366][T10350] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.1884'.
[  185.883958][ T5880] Bluetooth: hci0: command 0x0406 tx timeout
[  185.887610][ T5880] Bluetooth: hci2: command tx timeout
[  186.033722][T10357] netlink: 'syz.0.1886': attribute type 2 has an invalid length.
[  186.039008][T10357] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[  186.043092][T10357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1886'.
[  186.228368][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1887'.
[  186.494777][T10377] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1895'.
[  186.598748][T10381] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  187.911339][T10387] netlink: 'syz.2.1898': attribute type 21 has an invalid length.
[  188.254258][T10400] netlink: 'syz.1.1903': attribute type 10 has an invalid length.
[  188.326608][T10405] netlink: 2451 bytes leftover after parsing attributes in process `syz.2.1905'.
[  188.376010][ T5879] Bluetooth: hci0: Malformed LE Event: 0x0d
[  188.505504][T10419] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1912'.
[  188.509893][T10419] netlink: get zone limit has 8 unknown bytes
[  188.609776][T10431] netlink: 824 bytes leftover after parsing attributes in process `syz.1.1919'.
[  188.628435][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'.
[  188.723733][T10429] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  189.177087][T10475] =======================================================
[  189.177087][T10475] WARNING: The mand mount option has been deprecated and
[  189.177087][T10475]          and is ignored by this kernel. Remove the mand
[  189.177087][T10475]          option from the mount to silence this warning.
[  189.177087][T10475] =======================================================
[  189.265018][T10477] netlink: 'syz.0.1936': attribute type 1 has an invalid length.
[  189.268349][T10477] netlink: 'syz.0.1936': attribute type 4 has an invalid length.
[  189.271409][T10477] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1936'.
[  189.675186][T10479] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  190.615028][T10519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.707633][T10527] validate_nla: 1 callbacks suppressed
[  190.707646][T10527] netlink: 'syz.0.1959': attribute type 3 has an invalid length.
[  190.713092][T10527] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1959'.
[  190.735688][T10529] syzkaller0: entered promiscuous mode
[  190.738332][T10529] syzkaller0: entered allmulticast mode
[  193.028835][T10589] netlink: 'syz.1.1986': attribute type 1 has an invalid length.
[  193.358032][T10593] netlink: 'syz.0.1987': attribute type 1 has an invalid length.
[  193.361105][T10593] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1987'.
[  194.038514][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.044310][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.243759][T10672] netlink: 'syz.2.2021': attribute type 21 has an invalid length.
[  195.246584][T10672] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2021'.
[  195.317805][T10681] sit0: entered allmulticast mode
[  195.322624][T10681] sit0: entered promiscuous mode
[  195.349187][T10682] netlink: 'syz.0.2024': attribute type 2 has an invalid length.
[  195.352493][T10682] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2024'.
[  195.670260][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'.
[  195.674556][T10700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2032'.
[  195.681455][T10700] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2032'.
[  195.713707][T10701] netlink: 'syz.2.2033': attribute type 4 has an invalid length.
[  195.950635][T10713] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2039'.
[  195.954907][T10713] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2039'.
[  200.523634][T10760] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2059'.
[  201.154590][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'.
[  201.158247][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'.
[  201.257722][T10798] netlink: 'syz.0.2075': attribute type 2 has an invalid length.
[  202.452849][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2095'.
[  203.214851][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2102'.
[  203.295342][T10867] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  203.300427][T10867] netlink: 376 bytes leftover after parsing attributes in process `syz.1.2106'.
[  203.692255][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.766439][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.825472][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.875155][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.974379][   T12] bridge_slave_1: left allmulticast mode
[  203.976738][   T12] bridge_slave_1: left promiscuous mode
[  203.981040][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.987692][   T12] bridge_slave_0: left promiscuous mode
[  203.990184][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.380953][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.398189][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.402320][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.414341][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.419400][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.422757][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.436718][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.440885][   T12] bond0 (unregistering): Released all slaves
[  204.465137][T10887] lo speed is unknown, defaulting to 1000
[  204.632458][T10887] lo speed is unknown, defaulting to 1000
[  204.811120][T10901] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2113'.
[  204.868467][T10887] chnl_net:caif_netlink_parms(): no params data found
[  204.985333][T10908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2115'.
[  205.025280][   T12] hsr_slave_0: left promiscuous mode
[  205.039097][   T12] hsr_slave_1: left promiscuous mode
[  205.055889][   T12] veth1_macvtap: left promiscuous mode
[  205.060316][   T12] veth0_macvtap: left promiscuous mode
[  205.062368][   T12] veth1_vlan: left promiscuous mode
[  205.064481][   T12] veth0_vlan: left promiscuous mode
[  205.084816][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.090855][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.095815][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.102331][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.108072][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.326526][   T12] team0 (unregistering): Port device team_slave_1 removed
[  205.352486][   T12] team0 (unregistering): Port device team_slave_0 removed
[  205.627588][T10887] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.630341][T10887] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.633282][T10887] bridge_slave_0: entered allmulticast mode
[  205.638701][T10887] bridge_slave_0: entered promiscuous mode
[  205.643945][T10887] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.646885][T10887] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.649750][T10887] bridge_slave_1: entered allmulticast mode
[  205.652838][T10887] bridge_slave_1: entered promiscuous mode
[  205.687867][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.696163][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.714218][T10913] lo speed is unknown, defaulting to 1000
[  205.742891][T10887] team0: Port device team_slave_0 added
[  205.752189][T10887] team0: Port device team_slave_1 added
[  205.805822][T10887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.818151][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.844080][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.864731][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.867797][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.880547][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.979249][T10913] lo speed is unknown, defaulting to 1000
[  206.005615][T10887] hsr_slave_0: entered promiscuous mode
[  206.021323][T10887] hsr_slave_1: entered promiscuous mode
[  206.423863][T10913] chnl_net:caif_netlink_parms(): no params data found
[  206.461011][ T5880] Bluetooth: hci1: command tx timeout
[  206.493325][T10945] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2124'.
[  206.528693][T10887] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.566928][T10887] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.630133][T10887] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.646711][T10887] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  206.699163][T10913] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.702306][T10913] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.706674][T10913] bridge_slave_0: entered allmulticast mode
[  206.710860][T10913] bridge_slave_0: entered promiscuous mode
[  206.715330][T10913] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.720663][T10913] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.724008][T10913] bridge_slave_1: entered allmulticast mode
[  206.731918][T10913] bridge_slave_1: entered promiscuous mode
[  206.781061][T10913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.790001][T10913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.851021][T10913] team0: Port device team_slave_0 added
[  206.863143][T10913] team0: Port device team_slave_1 added
[  206.921443][T10913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.924343][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.936270][T10913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.945720][T10913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.949008][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.962873][T10913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.025307][T10913] hsr_slave_0: entered promiscuous mode
[  207.029386][T10913] hsr_slave_1: entered promiscuous mode
[  207.035575][T10913] debugfs: 'hsr0' already exists in 'hsr'
[  207.040535][T10913] Cannot create hsr debugfs directory
[  207.122833][T10887] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.157225][ T5880] Bluetooth: hci2: command tx timeout
[  207.202079][T10887] 8021q: adding VLAN 0 to HW filter on device team0
[  207.242023][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.245064][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.273219][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.276537][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.407080][T10913] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  207.422361][T10913] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.432061][T10913] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  207.440480][T10913] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  207.559359][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.614915][T10913] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.646712][T10913] 8021q: adding VLAN 0 to HW filter on device team0
[  207.665669][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.668784][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.684922][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.688054][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.875185][T10887] veth0_vlan: entered promiscuous mode
[  207.907674][T10887] veth1_vlan: entered promiscuous mode
[  207.962022][T10887] veth0_macvtap: entered promiscuous mode
[  207.978071][T10887] veth1_macvtap: entered promiscuous mode
[  207.985313][T10913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.002394][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.030853][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.060996][ T5889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.065142][ T5889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.086432][ T5889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.093783][ T5889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.129744][T10913] veth0_vlan: entered promiscuous mode
[  208.183523][T11026] netlink: 'syz.2.2135': attribute type 10 has an invalid length.
[  208.186505][T11026] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2135'.
[  208.219092][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.219407][T10913] veth1_vlan: entered promiscuous mode
[  208.221714][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.259034][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.265999][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.270171][T10913] veth0_macvtap: entered promiscuous mode
[  208.289224][T10913] veth1_macvtap: entered promiscuous mode
[  208.318762][T10913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.335639][T10913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.351992][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.355431][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.369359][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.373416][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.492130][T11040] netlink: 'syz.4.2137': attribute type 13 has an invalid length.
[  208.495516][T11040] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2137'.
[  208.497658][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.502590][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.517518][ T5880] Bluetooth: hci1: command tx timeout
[  208.528461][T11040] syz_tun: refused to change device tx_queue_len
[  208.559089][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.573190][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.732523][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2139'.
[  208.894062][T11049] netlink: 'syz.2.2139': attribute type 10 has an invalid length.
[  208.903981][T11049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2139'.
[  208.939855][T11049] dummy0: entered promiscuous mode
[  208.956293][T11061] netlink: 'syz.3.2144': attribute type 10 has an invalid length.
[  208.967337][T11061] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2144'.
[  209.032595][T11049] bridge0: port 3(dummy0) entered blocking state
[  209.038955][T11049] bridge0: port 3(dummy0) entered disabled state
[  209.054656][T11049] dummy0: entered allmulticast mode
[  209.092986][T11049] bridge0: port 3(dummy0) entered blocking state
[  209.096595][T11049] bridge0: port 3(dummy0) entered forwarding state
[  209.238493][ T5880] Bluetooth: hci2: command tx timeout
[  209.244872][T11073] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2148'.
[  209.532997][T11083] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2152'.
[  209.905676][T11103] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2160'.
[  209.915860][T11103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2160'.
[  210.395201][T11119] C: renamed from team_slave_0 (while UP)
[  210.417684][T11119] netlink: 'syz.4.2166': attribute type 3 has an invalid length.
[  210.425663][T11119] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  210.492625][T11124] netlink: 'syz.2.2169': attribute type 1 has an invalid length.
[  210.607253][ T5880] Bluetooth: hci1: command tx timeout
[  210.647531][   T33] audit: type=1107 audit(1755611842.794:3): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  210.718999][T11130] netlink: 'syz.3.2172': attribute type 2 has an invalid length.
[  211.328484][ T5880] Bluetooth: hci2: command tx timeout
[  212.546380][T11183] __nla_validate_parse: 5 callbacks suppressed
[  212.546390][T11183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2195'.
[  212.556347][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2195'.
[  212.669172][T11192] netlink: 'syz.4.2199': attribute type 11 has an invalid length.
[  212.672564][T11192] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2199'.
[  212.688477][ T5880] Bluetooth: hci1: command tx timeout
[  213.132162][T11204] IPv6: Can't replace route, no match found
[  213.271757][T11214] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  213.310083][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'.
[  213.313174][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'.
[  213.397402][ T5880] Bluetooth: hci2: command tx timeout
[  213.406032][T11222] sctp: [Deprecated]: syz.4.2212 (pid 11222) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.406032][T11222] Use struct sctp_sack_info instead
[  213.550886][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'.
[  213.554464][T11231] openvswitch: netlink: Flow key attr not present in new flow.
[  213.808609][ T5880] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  213.946630][ T5880] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  214.123060][T11262] netlink: 'syz.3.2230': attribute type 3 has an invalid length.
[  214.125688][T11262] netlink: 'syz.3.2230': attribute type 1 has an invalid length.
[  214.129272][T11262] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2230'.
[  214.346613][T11268] netlink: 'syz.3.2233': attribute type 1 has an invalid length.
[  214.350036][T11268] netlink: 'syz.3.2233': attribute type 1 has an invalid length.
[  214.469434][T11277] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2236'.
[  215.363112][T11289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2239'.
[  215.402771][T11289] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.210737][T11289] bridge_slave_0 (unregistering): left allmulticast mode
[  216.213057][T11289] bridge_slave_0 (unregistering): left promiscuous mode
[  216.215681][T11289] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.582307][T11324] netlink: 'syz.4.2253': attribute type 21 has an invalid length.
[  216.585324][T11324] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2253'.
[  216.590840][T11324] netlink: 'syz.4.2253': attribute type 5 has an invalid length.
[  216.593896][T11324] netlink: 'syz.4.2253': attribute type 6 has an invalid length.
[  216.905755][T11355] netlink: 'syz.4.2270': attribute type 10 has an invalid length.
[  216.916444][T11355] bond0: entered promiscuous mode
[  216.919728][T11355] bond_slave_0: entered promiscuous mode
[  216.923241][T11355] bond_slave_1: entered promiscuous mode
[  216.927868][T11355] bridge0: port 3(bond0) entered blocking state
[  216.931310][T11355] bridge0: port 3(bond0) entered disabled state
[  216.934313][T11355] bond0: entered allmulticast mode
[  216.936678][T11355] bond_slave_0: entered allmulticast mode
[  216.939734][T11355] bond_slave_1: entered allmulticast mode
[  216.959534][T11355] bridge0: port 3(bond0) entered blocking state
[  216.962421][T11355] bridge0: port 3(bond0) entered forwarding state
[  217.226580][T11363] : entered promiscuous mode
[  217.921405][T11400] __nla_validate_parse: 2 callbacks suppressed
[  217.921414][T11400] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2291'.
[  217.982440][T11406] syzkaller1: tun_chr_ioctl cmd 1074025677
[  217.984517][T11406] syzkaller1: linktype set to 823
[  218.029030][ T5880] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  218.407181][T11416] macvtap0: refused to change device tx_queue_len
[  218.431002][T11420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2299'.
[  219.856222][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'.
[  219.954298][T11475] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  220.109583][T11495] netlink: 'syz.4.2315': attribute type 32 has an invalid length.
[  220.188827][T11503] netlink: 'syz.4.2319': attribute type 10 has an invalid length.
[  220.191254][T11503] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2319'.
[  220.575272][T11528] netlink: 146936 bytes leftover after parsing attributes in process `syz.2.2328'.
[  220.580841][T11528] openvswitch: netlink: Message has 6 unknown bytes.
[  221.513977][T11547] netlink: 'syz.3.2331': attribute type 4 has an invalid length.
[  221.526977][T11547] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2331'.
[  221.704862][T11556] sctp: [Deprecated]: syz.4.2335 (pid 11556) Use of int in max_burst socket option deprecated.
[  221.704862][T11556] Use struct sctp_assoc_value instead
[  221.852518][T11566] netlink: 'syz.2.2339': attribute type 2 has an invalid length.
[  221.855952][T11566] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2339'.
[  222.905749][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2356'.
[  222.910012][T11602] openvswitch: netlink: Missing key (keys=40, expected=100)
[  223.428782][T11630] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.2370'.
[  223.432638][T11630] netlink: 62239 bytes leftover after parsing attributes in process `syz.2.2370'.
[  223.756736][T11649] netlink: 'syz.4.2377': attribute type 39 has an invalid length.
[  224.449768][T11683] syzkaller1: tun_chr_ioctl cmd 1074025677
[  224.452451][T11683] syzkaller1: linktype set to 780
[  224.478149][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2393'.
[  224.485419][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2393'.
[  224.495289][T11683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2393'.
[  224.730888][T11705] netlink: 'syz.4.2404': attribute type 25 has an invalid length.
[  224.734221][T11705] netlink: 'syz.4.2404': attribute type 7 has an invalid length.
[  224.790711][T11710] netlink: 'syz.4.2405': attribute type 2 has an invalid length.
[  224.793649][T11710] netlink: 'syz.4.2405': attribute type 4 has an invalid length.
[  224.798869][T11710] netlink: 'syz.4.2405': attribute type 8 has an invalid length.
[  224.801909][T11710] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2405'.
[  224.871398][T11717] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2409'.
[  225.033439][T11732] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2416'.
[  225.694022][T11747] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2424'.
[  225.723940][T11749] validate_nla: 1 callbacks suppressed
[  225.723948][T11749] netlink: 'syz.4.2425': attribute type 10 has an invalid length.
[  225.730289][T11749] lo: entered promiscuous mode
[  225.732611][T11749] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  226.702518][T11780] syzkaller0: entered promiscuous mode
[  226.710353][T11780] syzkaller0: entered allmulticast mode
[  227.956095][T11823] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2452'.
[  229.363707][T11856] netlink: 'syz.2.2466': attribute type 210 has an invalid length.
[  229.511148][T11866] netlink: 'syz.2.2471': attribute type 1 has an invalid length.
[  229.861876][T11882] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2478'.
[  231.196073][T11931] C: renamed from team_slave_0 (while UP)
[  231.219026][T11931] netlink: 'syz.3.2499': attribute type 3 has an invalid length.
[  231.222429][T11931] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2499'.
[  231.249442][T11909] lo speed is unknown, defaulting to 1000
[  231.353084][T11943] netlink: 'syz.3.2504': attribute type 39 has an invalid length.
[  231.364541][T11943] veth0_macvtap: left promiscuous mode
[  231.642882][T11965] sit0: entered allmulticast mode
[  231.779367][T11956] sit0: entered promiscuous mode
[  232.417324][T11909] lo speed is unknown, defaulting to 1000
[  232.554131][T11974] netlink: 'syz.3.2517': attribute type 13 has an invalid length.
[  232.561382][T11974] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2517'.
[  232.576133][T11974] erspan0: refused to change device tx_queue_len
[  232.579471][T11974] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  232.724953][T11978] netlink: 'syz.2.2519': attribute type 39 has an invalid length.
[  232.833107][T11985] netlink: 16370 bytes leftover after parsing attributes in process `syz.4.2522'.
[  233.216200][T12012] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2534'.
[  233.406311][T12023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2540'.
[  234.302899][T12042] sit0: left promiscuous mode
[  234.346850][T12042] sit0: entered promiscuous mode
[  234.484996][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.719137][T12049] netlink: 'syz.4.2551': attribute type 10 has an invalid length.
[  234.732092][T12049] veth0_vlan: left promiscuous mode
[  234.735849][T12049] veth0_vlan: entered promiscuous mode
[  234.739812][T12049] team0: Device veth0_vlan failed to register rx_handler
[  236.173034][T12086] netlink: 'syz.2.2565': attribute type 40 has an invalid length.
[  236.193786][T12086] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.209797][T12089] netlink: 'syz.3.2567': attribute type 10 has an invalid length.
[  236.212449][T12089] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2567'.
[  236.446601][T12099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2571'.
[  236.799210][T12115] netlink: 'syz.4.2579': attribute type 29 has an invalid length.
[  236.803586][T12115] netlink: 'syz.4.2579': attribute type 29 has an invalid length.
[  236.809983][T12115] netlink: 'syz.4.2579': attribute type 29 has an invalid length.
[  236.842745][T12119] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2581'.
[  236.845938][T12119] tc_dump_action: action bad kind
[  236.879272][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'.
[  237.139995][T12150] netlink: 'syz.3.2595': attribute type 13 has an invalid length.
[  237.342061][T12150] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.345335][T12150] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.389964][   T33] audit: type=1107 audit(1755611869.534:4): pid=12157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  237.486614][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.499061][T12150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.542169][T12171] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2606'.
[  237.649737][ T5889] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.660799][ T5889] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.663937][ T5889] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.679230][ T5889] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.957712][T12211] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2626'.
[  237.990995][T12213] netlink: 'syz.2.2629': attribute type 7 has an invalid length.
[  238.056152][T12217] netlink: 'syz.4.2628': attribute type 10 has an invalid length.
[  238.062818][T12217] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2628'.
[  238.285847][T12242] netlink: 'syz.4.2641': attribute type 2 has an invalid length.
[  238.567188][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  238.570971][T12259] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2649'.
[  238.590088][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  238.676405][T12270] netlink: 'syz.4.2653': attribute type 21 has an invalid length.
[  239.821890][T12301] netlink: 'syz.2.2668': attribute type 2 has an invalid length.
[  239.965561][T12314] netlink: 'syz.3.2675': attribute type 10 has an invalid length.
[  239.972113][T12314] veth1_macvtap: left promiscuous mode
[  239.980221][T12314] team0: Device veth1_macvtap failed to register rx_handler
[  240.431627][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.936285][T12366] lo speed is unknown, defaulting to 1000
[  241.070550][T12366] lo speed is unknown, defaulting to 1000
[  242.879866][T12427] validate_nla: 1 callbacks suppressed
[  242.879875][T12427] netlink: 'syz.2.2725': attribute type 1 has an invalid length.
[  243.109048][T12433] netlink: 'syz.4.2728': attribute type 10 has an invalid length.
[  243.112001][T12433] __nla_validate_parse: 5 callbacks suppressed
[  243.112008][T12433] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2728'.
[  243.821468][T12453] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2735'.
[  244.485167][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2744'.
[  244.743370][T12481] netlink: 'syz.2.2747': attribute type 10 has an invalid length.
[  244.839533][T12487] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2750'.
[  245.118112][T12501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2756'.
[  246.303114][T12512] netlink: 'syz.4.2761': attribute type 29 has an invalid length.
[  246.308468][T12513] netlink: 'syz.4.2761': attribute type 29 has an invalid length.
[  246.603063][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'.
[  246.788282][T12561] netlink: 'syz.3.2784': attribute type 11 has an invalid length.
[  246.791426][T12561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2784'.
[  246.806734][T12566] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2785'.
[  246.821778][T12566] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2785'.
[  246.825332][T12566] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2785'.
[  246.975667][T12584] sctp: [Deprecated]: syz.2.2795 (pid 12584) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.975667][T12584] Use struct sctp_sack_info instead
[  247.576487][T12643] netlink: 'syz.4.2820': attribute type 10 has an invalid length.
[  247.579534][T12643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.587597][T12643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.594284][T12643] batadv_slave_0: entered promiscuous mode
[  247.596514][T12643] batadv_slave_0: entered allmulticast mode
[  247.601008][T12643] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  247.604433][T12641] syzkaller0: entered promiscuous mode
[  247.606622][T12641] syzkaller0: entered allmulticast mode
[  248.000021][T12661] openvswitch: netlink: Missing key (keys=40, expected=100)
[  248.151205][T12671] __nla_validate_parse: 6 callbacks suppressed
[  248.151222][T12671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2834'.
[  248.160176][T12671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2834'.
[  248.169769][T12671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2834'.
[  248.324604][T12686] syzkaller0: entered promiscuous mode
[  248.329080][T12686] syzkaller0: entered allmulticast mode
[  248.699568][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'.
[  248.704501][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'.
[  249.291084][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'.
[  249.294226][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2864'.
[  249.320945][T12740] netlink: 'syz.3.2866': attribute type 10 has an invalid length.
[  249.356603][T12746] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2869'.
[  249.460202][T12740] team0 (unregistering): Port device C removed
[  249.463204][T12740] team0 (unregistering): Port device team_slave_1 removed
[  249.619804][T12767] netlink: 'syz.3.2879': attribute type 21 has an invalid length.
[  249.623600][T12767] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2879'.
[  249.719393][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2885'.
[  249.733006][T12781] netlink: 'syz.4.2886': attribute type 1 has an invalid length.
[  249.736570][T12781] netlink: 'syz.4.2886': attribute type 3 has an invalid length.
[  249.775062][   T33] audit: type=1107 audit(1755611881.914:5): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  249.908860][T12792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.865476][ T5879] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6
[  251.409868][T12840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.530106][T12844] dvmrp1: tun_chr_ioctl cmd 35108
[  251.932879][T12861] delete_channel: no stack
[  252.298989][T12897] syz.2.2937 (12897) used obsolete PPPIOCDETACH ioctl
[  252.409446][T12911] netlink: 'syz.2.2944': attribute type 41 has an invalid length.
[  252.814170][T12945] netlink: 'syz.4.2961': attribute type 3 has an invalid length.
[  253.133524][T12957] netlink: 'syz.4.2966': attribute type 5 has an invalid length.
[  254.069119][T12976] __nla_validate_parse: 13 callbacks suppressed
[  254.069129][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'.
[  254.080757][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'.
[  254.083850][T12976] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2975'.
[  254.094742][T12980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2977'.
[  254.098278][T12980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2977'.
[  254.401799][T13003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2987'.
[  254.406222][T13003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2987'.
[  254.503899][T13010] netlink: 'syz.4.2989': attribute type 6 has an invalid length.
[  254.509510][T13010] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2989'.
[  254.884482][ T5879] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23
[  255.236627][T13044] netlink: 'syz.3.3007': attribute type 10 has an invalid length.
[  255.243792][T13044] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3007'.
[  255.739111][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.741354][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.829739][T13057] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  256.003985][T13070] netlink: 'syz.3.3016': attribute type 10 has an invalid length.
[  256.705480][T13078] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3022'.
[  256.855908][T13090] netlink: 'syz.3.3028': attribute type 12 has an invalid length.
[  257.602611][T13117] netlink: 'syz.3.3040': attribute type 12 has an invalid length.
[  258.861659][T13187] netlink: 'syz.2.3070': attribute type 3 has an invalid length.
[  259.442971][T13227] netlink: 'syz.3.3090': attribute type 2 has an invalid length.
[  260.620408][T13294] __nla_validate_parse: 10 callbacks suppressed
[  260.620421][T13294] netlink: 752 bytes leftover after parsing attributes in process `syz.4.3120'.
[  261.339804][ T5879] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  261.512793][T13345] netlink: 'syz.4.3142': attribute type 3 has an invalid length.
[  261.531754][T13345] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3142'.
[  261.766032][T13350] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3144'.
[  262.056580][T13360] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.3147'.
[  262.242106][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3157'.
[  262.428569][ T5879] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  262.675467][T13399] netlink: 'syz.4.3166': attribute type 1 has an invalid length.
[  263.321806][T13406] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3169'.
[  263.510243][T13424] bpf: Bad value for 'gid'
[  263.537503][T13426] netlink: 'syz.2.3178': attribute type 2 has an invalid length.
[  263.575430][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3180'.
[  263.581385][T13431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3180'.
[  263.632364][T13435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3181'.
[  263.658472][T13437] netlink: 'syz.4.3183': attribute type 19 has an invalid length.
[  263.924182][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'.
[  264.090859][T13464] netlink: 'syz.4.3196': attribute type 10 has an invalid length.
[  264.143465][T13464] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  264.156699][T13464] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  264.162310][T13464] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  264.341732][T13477] netlink: 'syz.3.3202': attribute type 13 has an invalid length.
[  266.074714][T13538] __nla_validate_parse: 4 callbacks suppressed
[  266.074729][T13538] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.3229'.
[  266.081459][T13538] netlink: 61827 bytes leftover after parsing attributes in process `syz.4.3229'.
[  266.125006][T13540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3231'.
[  266.130636][T13540] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3231'.
[  266.700545][T13564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3241'.
[  266.977332][T13583] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3250'.
[  267.325397][T13600] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3257'.
[  267.554336][T13613] bridge_slave_1: left allmulticast mode
[  267.558948][T13613] bridge_slave_1: left promiscuous mode
[  267.561475][T13613] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.594224][T13613] bridge_slave_0: left allmulticast mode
[  267.596325][T13613] bridge_slave_0: left promiscuous mode
[  267.598932][T13613] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.396195][T13639] netlink: 'syz.3.3274': attribute type 10 has an invalid length.
[  268.621924][T13649] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3279'.
[  268.710485][T13652] netlink: 'syz.2.3280': attribute type 10 has an invalid length.
[  268.781957][T13652] team0 (unregistering): Port device team_slave_0 removed
[  268.788258][T13652] team0 (unregistering): Port device team_slave_1 removed
[  268.793726][T13652] team0 (unregistering): Port device syz_tun removed
[  269.023821][T13661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3284'.
[  269.267960][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'.
[  269.271379][T13674] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  269.274334][T13674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.379185][T13683] netlink: 'syz.3.3294': attribute type 10 has an invalid length.
[  269.655901][T13696] lo speed is unknown, defaulting to 1000
[  269.795604][T13696] lo speed is unknown, defaulting to 1000
[  270.080321][T13725] netlink: 'syz.2.3312': attribute type 13 has an invalid length.
[  270.083568][T13725] netlink: 'syz.2.3312': attribute type 58 has an invalid length.
[  270.095525][T13727] netlink: 'syz.3.3313': attribute type 12 has an invalid length.
[  270.192294][T13732] netlink: 'syz.3.3315': attribute type 21 has an invalid length.
[  270.322899][T13741] dvmrp1: tun_chr_ioctl cmd 1074025677
[  270.324781][T13741] dvmrp1: linktype set to 773
[  270.369075][ T5879] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4
[  270.422336][T13754] netlink: 'syz.4.3325': attribute type 10 has an invalid length.
[  270.428075][ T5879] Bluetooth: hci0: adv larger than maximum supported
[  270.428092][ T5879] Bluetooth: hci0: Unknown advertising packet type: 0x73
[  270.435912][T13754] team0: Port device geneve1 added
[  270.990146][T13765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.111910][T13776] netlink: 'syz.2.3335': attribute type 11 has an invalid length.
[  271.115241][T13776] __nla_validate_parse: 6 callbacks suppressed
[  271.115249][T13776] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3335'.
[  271.186425][T13786] netlink: 'syz.3.3339': attribute type 2 has an invalid length.
[  271.203873][T13786] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3339'.
[  271.210678][T13786] nbd: couldn't find device at index 65542
[  271.299155][T13796] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3341'.
[  271.301937][T13797] netlink: 'syz.4.3342': attribute type 11 has an invalid length.
[  271.309781][T13797] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3342'.
[  271.314783][T13795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.574288][T13818] syzkaller0: entered promiscuous mode
[  271.576595][T13818] syzkaller0: entered allmulticast mode
[  272.619361][T13830] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3354'.
[  272.712224][T13832] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  273.482624][T13845] validate_nla: 1 callbacks suppressed
[  273.482634][T13845] netlink: 'syz.3.3359': attribute type 1 has an invalid length.
[  273.501729][T13845] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3359'.
[  273.563635][T13854] netlink: 'syz.4.3365': attribute type 1 has an invalid length.
[  273.608530][T13856] netlink: 'syz.4.3366': attribute type 10 has an invalid length.
[  273.683930][T13856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.702248][T13856] batadv0: entered promiscuous mode
[  273.705165][T13856] batadv0: entered allmulticast mode
[  273.713079][T13856] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  273.770438][ T5879] Bluetooth: hci2: Malformed Event: 0x13
[  274.079444][T13881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3376'.
[  274.084028][T13881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3376'.
[  274.168998][ T5905] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  274.172795][ T5905] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  274.255266][T13895] netlink: 182 bytes leftover after parsing attributes in process `syz.2.3381'.
[  274.291192][T13897] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  274.325359][T13903] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  274.491992][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3392'.
[  274.714034][T13927] lo speed is unknown, defaulting to 1000
[  274.938817][T13927] lo speed is unknown, defaulting to 1000
[  275.766313][T13958] blkio.reset_stats is deprecated
[  278.417496][T13970] netlink: 'syz.4.3410': attribute type 1 has an invalid length.
[  278.420528][T13970] __nla_validate_parse: 1 callbacks suppressed
[  278.420535][T13970] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3410'.
[  278.639283][T13988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3418'.
[  278.645803][T13988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3418'.
[  278.653514][T13988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3418'.
[  278.726723][T13993] IPv6: NLM_F_CREATE should be specified when creating new route
[  278.787676][T13991] netlink: 'syz.3.3420': attribute type 21 has an invalid length.
[  278.794378][T13991] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3420'.
[  278.802563][T13991] netlink: 'syz.3.3420': attribute type 4 has an invalid length.
[  278.806201][T13991] netlink: 'syz.3.3420': attribute type 5 has an invalid length.
[  278.810275][T13991] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3420'.
[  279.027394][T14009] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3429'.
[  279.035665][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'.
[  279.101398][T14017] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3433'.
[  279.138315][T14021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3435'.
[  279.282588][T14039] netlink: 'syz.4.3443': attribute type 10 has an invalid length.
[  279.980586][T14058] lo speed is unknown, defaulting to 1000
[  280.304589][T14063] netlink: 'syz.3.3453': attribute type 3 has an invalid length.
[  280.309622][T14063] netlink: 'syz.3.3453': attribute type 8 has an invalid length.
[  280.312507][T14063] netlink: 'syz.3.3453': attribute type 6 has an invalid length.
[  280.425148][T14058] lo speed is unknown, defaulting to 1000
[  280.953975][T14105] netlink: 'syz.3.3472': attribute type 4 has an invalid length.
[  281.088323][T14109] netlink: 'syz.3.3474': attribute type 10 has an invalid length.
[  281.146056][T14109] bond0: (slave bond_slave_0): Releasing backup interface
[  283.275686][T14186] netlink: 'syz.2.3509': attribute type 5 has an invalid length.
[  284.529507][T14225] netlink: 'syz.2.3526': attribute type 10 has an invalid length.
[  284.532230][T14225] __nla_validate_parse: 10 callbacks suppressed
[  284.532237][T14225] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3526'.
[  284.656334][T14233] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3530'.
[  284.662701][T14233] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3530'.
[  285.131122][T14255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3541'.
[  285.358802][T14267] netlink: 'syz.2.3546': attribute type 3 has an invalid length.
[  285.362284][T14267] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.3546'.
[  285.368251][T14267] netlink: 'syz.2.3546': attribute type 3 has an invalid length.
[  285.371541][T14267] netlink: 4264 bytes leftover after parsing attributes in process `syz.2.3546'.
[  285.443114][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'.
[  286.489075][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'.
[  286.719956][T14331] netlink: 'syz.3.3574': attribute type 10 has an invalid length.
[  286.929279][T14339] tap0: tun_chr_ioctl cmd 2148553947
[  287.030182][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'.
[  287.109933][T14359] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3586'.
[  287.154130][T14364] netlink: 'syz.4.3588': attribute type 2 has an invalid length.
[  287.810399][T14383] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  288.434650][T14428] netlink: 'syz.4.3616': attribute type 10 has an invalid length.
[  288.469772][T14428] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  288.473187][T14428] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  288.477658][T14428] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  288.584611][T14444] netlink: 'syz.4.3625': attribute type 19 has an invalid length.
[  288.785872][T14464] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  288.808067][T14468] netlink: 'syz.4.3637': attribute type 21 has an invalid length.
[  288.816928][T14468] netlink: 'syz.4.3637': attribute type 4 has an invalid length.
[  289.764776][ T5879] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[  289.834626][T14490] netlink: 'syz.2.3646': attribute type 5 has an invalid length.
[  291.524207][T14526] netlink: 'syz.3.3664': attribute type 29 has an invalid length.
[  291.537769][T14526] netlink: 'syz.3.3664': attribute type 29 has an invalid length.
[  291.590454][T14530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.686426][T14538] nft_compat: unsupported protocol 0
[  291.820266][T14551] __nla_validate_parse: 5 callbacks suppressed
[  291.820277][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'.
[  292.223136][T14573] netlink: 'syz.2.3685': attribute type 10 has an invalid length.
[  292.401885][T14589] syzkaller1: tun_chr_ioctl cmd 1074025677
[  292.405452][T14589] syzkaller1: linktype set to 1
[  292.476933][T14596] netlink: 'syz.2.3693': attribute type 2 has an invalid length.
[  292.480315][T14596] netlink: 'syz.2.3693': attribute type 1 has an invalid length.
[  292.482576][T14593] delete_channel: no stack
[  292.483543][T14596] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3693'.
[  292.534632][T14600] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3695'.
[  292.717920][T14611] netlink: 'syz.4.3700': attribute type 21 has an invalid length.
[  292.721063][T14611] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3700'.
[  292.725328][T14611] netlink: 'syz.4.3700': attribute type 5 has an invalid length.
[  292.728916][T14611] netlink: 'syz.4.3700': attribute type 6 has an invalid length.
[  292.732015][T14611] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3700'.
[  293.027048][T14625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3707'.
[  294.295032][ T5879] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  294.559857][T14669] netlink: 'syz.4.3725': attribute type 29 has an invalid length.
[  294.611684][T14671] delete_channel: no stack
[  295.726761][T14686] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3733'.
[  296.339222][T14710] validate_nla: 1 callbacks suppressed
[  296.339236][T14710] netlink: 'syz.3.3742': attribute type 3 has an invalid length.
[  296.363413][T14710] netlink: 'syz.3.3742': attribute type 1 has an invalid length.
[  296.379410][T14710] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3742'.
[  296.672488][T14716] syzkaller0: entered promiscuous mode
[  296.674418][T14716] syzkaller0: entered allmulticast mode
[  297.295757][T14727] netlink: 'syz.2.3749': attribute type 21 has an invalid length.
[  297.302716][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3749'.
[  298.280547][T14753] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3761'.
[  299.615172][T14828] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3795'.
[  299.624546][ T5879] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17
[  299.626843][T14828] netlink: zone id is out of range
[  299.632540][T14828] netlink: zone id is out of range
[  299.634748][T14828] netlink: zone id is out of range
[  299.645934][T14828] netlink: zone id is out of range
[  299.652625][T14828] netlink: zone id is out of range
[  299.654779][T14828] netlink: zone id is out of range
[  299.659178][T14828] netlink: zone id is out of range
[  299.662744][T14828] netlink: zone id is out of range
[  299.667812][T14828] netlink: zone id is out of range
[  299.669922][T14828] netlink: zone id is out of range
[  300.070905][T14839] netlink: 'syz.2.3799': attribute type 21 has an invalid length.
[  300.074017][T14839] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3799'.
[  300.077837][T14839] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3799'.
[  300.642152][T14853] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3806'.
[  300.704200][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3809'.
[  300.710146][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3809'.
[  300.753122][T14862] netlink: 'syz.2.3810': attribute type 21 has an invalid length.
[  300.756353][T14862] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3810'.
[  300.822807][T14870] netlink: 'syz.3.3812': attribute type 4 has an invalid length.
[  300.825527][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3812'.
[  301.726422][T14914] sctp: [Deprecated]: syz.3.3833 (pid 14914) Use of int in maxseg socket option.
[  301.726422][T14914] Use struct sctp_assoc_value instead
[  301.762878][T14912] : renamed from wg2
[  301.968060][ T5879] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7
[  302.052247][ T5879] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28
[  302.059033][ T5879] Bluetooth: hci1: Invalid connection link type handle 0x0000
[  302.324628][T14962] __nla_validate_parse: 2 callbacks suppressed
[  302.324718][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3856'.
[  302.346453][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3856'.
[  302.487688][T14972] netlink: 'syz.3.3861': attribute type 3 has an invalid length.
[  302.608083][T14981] netlink: 'syz.3.3865': attribute type 2 has an invalid length.
[  302.610807][T14981] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3865'.
[  302.619337][T14981] nbd: must specify an index to disconnect
[  302.627947][T14985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3867'.
[  302.645027][T14985] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3867'.
[  302.900343][T14990] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.3870'.
[  302.903860][T14990] netlink: 'syz.2.3870': attribute type 3 has an invalid length.
[  302.964544][T14999] netlink: 752 bytes leftover after parsing attributes in process `syz.4.3872'.
[  303.112556][T15011] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3878'.
[  303.259165][T15015] netlink: 'syz.4.3881': attribute type 1 has an invalid length.
[  303.263282][T15015] netlink: 'syz.4.3881': attribute type 2 has an invalid length.
[  303.267925][T15015] netlink: 'syz.4.3881': attribute type 7 has an invalid length.
[  303.273650][T15015] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3881'.
[  303.284249][T15015] netlink: 'syz.4.3881': attribute type 1 has an invalid length.
[  303.289835][T15015] netlink: 'syz.4.3881': attribute type 2 has an invalid length.
[  303.302293][T15015] netlink: 130076 bytes leftover after parsing attributes in process `syz.4.3881'.
[  303.388283][T15021] netlink: 'syz.4.3884': attribute type 46 has an invalid length.
[  303.976125][T15036] : entered promiscuous mode
[  304.736606][T15065] syzkaller0: entered promiscuous mode
[  304.738802][T15065] syzkaller0: entered allmulticast mode
[  305.694062][T15071] dummy0: left allmulticast mode
[  305.699201][T15071] bridge0: port 3(dummy0) entered disabled state
[  305.704547][T15071] bridge_slave_1: left allmulticast mode
[  305.708009][T15071] bridge_slave_1: left promiscuous mode
[  305.710239][T15071] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.988392][T15089] netlink: 'syz.3.3911': attribute type 2 has an invalid length.
[  305.994527][T15089] nbd: must specify at least one socket
[  306.708699][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.785979][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.870902][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.947858][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.073825][   T12] bridge_slave_1: left allmulticast mode
[  307.076023][   T12] bridge_slave_1: left promiscuous mode
[  307.078985][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.124133][   T12] bridge_slave_0: left allmulticast mode
[  307.128895][   T12] bridge_slave_0: left promiscuous mode
[  307.137531][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.361622][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  307.518269][T15173] net_ratelimit: 74 callbacks suppressed
[  307.518285][T15173] netlink: zone id is out of range
[  307.523073][T15173] netlink: zone id is out of range
[  307.523364][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.535017][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.540809][   T12] bond0 (unregistering): (slave O3c): Releasing backup interface
[  307.550205][   T12] bond0 (unregistering): Released all slaves
[  307.553404][T15173] netlink: set zone limit has 4 unknown bytes
[  307.561073][T15164] validate_nla: 1 callbacks suppressed
[  307.561083][T15164] netlink: 'syz.4.3944': attribute type 29 has an invalid length.
[  307.575558][T15167] netlink: 'syz.4.3944': attribute type 29 has an invalid length.
[  307.624796][   T12] : left promiscuous mode
[  307.811047][T15193] netlink: 'syz.2.3956': attribute type 19 has an invalid length.
[  307.814129][T15193] __nla_validate_parse: 9 callbacks suppressed
[  307.814142][T15193] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3956'.
[  307.920034][T15201] netlink: 'syz.2.3958': attribute type 28 has an invalid length.
[  308.015924][   T12] veth1_macvtap: left promiscuous mode
[  308.066931][   T12] veth0_macvtap: left promiscuous mode
[  308.069570][   T12] veth1_vlan: left promiscuous mode
[  308.071747][   T12] veth0_vlan: left promiscuous mode
[  308.383412][   T12] team0 (unregistering): Port device team_slave_1 removed
[  308.413736][   T12] team0 (unregistering): Port device team_slave_0 removed
[  309.544575][   T26] smc: removing ib device syz1
[  309.568247][   T47] lo speed is unknown, defaulting to 1000
[  309.585360][   T47] syz2: Port: 1 Link DOWN
[  310.056472][T15248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3974'.
[  310.080734][T15248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3974'.
[  310.192244][T15254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3975'.
[  310.195824][T15255] netlink: 'syz.4.3976': attribute type 13 has an invalid length.
[  310.203547][T15255] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.3976'.
[  310.617923][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'.
[  311.124809][T15312] netlink: 'syz.4.3996': attribute type 10 has an invalid length.
[  311.155930][T15312] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3996'.
[  311.254364][T15321] netlink: 'syz.2.4000': attribute type 29 has an invalid length.
[  311.257240][T15321] netlink: 'syz.2.4000': attribute type 3 has an invalid length.
[  311.260147][T15321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4000'.
[  311.308121][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4001'.
[  311.349502][T15328] netlink: 'syz.3.4003': attribute type 10 has an invalid length.
[  311.591462][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'.
[  311.664106][T15354] netlink: 'syz.4.4013': attribute type 4 has an invalid length.
[  311.921771][T15379] nbd: illegal input index 65540
[  312.989735][T15423] validate_nla: 6 callbacks suppressed
[  312.989747][T15423] netlink: 'syz.4.4034': attribute type 1 has an invalid length.
[  312.996152][T15423] __nla_validate_parse: 5 callbacks suppressed
[  312.996159][T15423] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4034'.
[  313.033533][T15430] netlink: 'syz.3.4037': attribute type 1 has an invalid length.
[  313.094498][T15439] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4041'.
[  313.168611][T15445] netlink: 'syz.3.4044': attribute type 5 has an invalid length.
[  313.681833][T15501] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4071'.
[  314.229400][T15521] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.4079'.
[  314.449923][T15534] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4084'.
[  314.462817][T15534] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4084'.
[  314.536760][T15541] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4084'.
[  314.837189][T15553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.882847][T15555] netlink: 'syz.2.4093': attribute type 29 has an invalid length.
[  314.885846][T15555] netlink: 'syz.2.4093': attribute type 29 has an invalid length.
[  314.889803][T15555] netlink: 'syz.2.4093': attribute type 29 has an invalid length.
[  315.678976][T15584] netlink: 'syz.2.4106': attribute type 4 has an invalid length.
[  315.681503][T15584] netlink: 'syz.2.4106': attribute type 2 has an invalid length.
[  315.685058][T15584] netlink: 199288 bytes leftover after parsing attributes in process `syz.2.4106'.
[  315.719172][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4108'.
[  315.723284][T15589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4108'.
[  315.804213][T15594] netlink: 'syz.2.4108': attribute type 21 has an invalid length.
[  315.817554][T15594] netlink: 'syz.2.4108': attribute type 4 has an invalid length.
[  315.851253][T15598] bridge0: received packet on bond0 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[  315.855239][T15598] bridge0: received packet on bond0 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[  315.940659][T15604] delete_channel: no stack
[  315.942649][T15604] delete_channel: no stack
[  316.091192][T15610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.930216][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.932466][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.265573][T15748] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  317.269473][T15748] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  317.272790][T15748] CPU: 1 UID: 0 PID: 15748 Comm: syz.2.4150 Not tainted syzkaller #0 PREEMPT(full) 
[  317.276221][T15748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.279511][T15748] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  317.281305][T15748] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 a6 a6 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 6f a7 01 f8 4d 89 3e
[  317.287332][T15748] RSP: 0018:ffffc90004abf0e0 EFLAGS: 00010246
[  317.289302][T15748] RAX: 0000000000000000 RBX: 1ffff11021dc3e36 RCX: dffffc0000000000
[  317.291858][T15748] RDX: ffffc9000887a000 RSI: 000000000000021e RDI: 000000000000021f
[  317.294501][T15748] RBP: ffffc90004abf230 R08: ffff888020041cc0 R09: 0000000000000002
[  317.297071][T15748] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11021dc3b66
[  317.299660][T15748] R13: ffff88810ee1f1b0 R14: 0000000000000000 R15: ffff88810ee1f1a8
[  317.302211][T15748] FS:  00007f63880d96c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  317.305012][T15748] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.307182][T15748] CR2: 0000200000000280 CR3: 000000013017e000 CR4: 00000000000006f0
[  317.309743][T15748] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  317.312259][T15748] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  317.314822][T15748] Call Trace:
[  317.315916][T15748]  <TASK>
[  317.316905][T15748]  ? xfrm_alloc_spi+0x2a0/0xf30
[  317.318530][T15748]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  317.320271][T15748]  ? xfrm_find_acq+0x87/0xa0
[  317.321809][T15748]  xfrm_alloc_userspi+0x70b/0xc90
[  317.323452][T15748]  ? apparmor_capable+0x137/0x1b0
[  317.325094][T15748]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  317.326918][T15748]  ? __nla_parse+0x40/0x60
[  317.328401][T15748]  xfrm_user_rcv_msg+0x7a3/0xab0
[  317.330001][T15748]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  317.331765][T15748]  ? __pfx___mutex_trylock_common+0x10/0x10
[  317.333731][T15748]  ? rcu_is_watching+0x15/0xb0
[  317.335305][T15748]  ? trace_contention_end+0x39/0x120
[  317.337020][T15748]  ? __mutex_lock+0x335/0x1360
[  317.338599][T15748]  netlink_rcv_skb+0x208/0x470
[  317.340311][T15748]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  317.342083][T15748]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  317.343799][T15748]  ? netlink_deliver_tap+0x2e/0x1b0
[  317.345502][T15748]  ? netlink_deliver_tap+0x2e/0x1b0
[  317.347160][T15748]  xfrm_netlink_rcv+0x79/0x90
[  317.348677][T15748]  netlink_unicast+0x82f/0x9e0
[  317.350266][T15748]  ? __pfx_netlink_unicast+0x10/0x10
[  317.351990][T15748]  ? netlink_sendmsg+0x642/0xb30
[  317.353603][T15748]  ? skb_put+0x11b/0x210
[  317.355314][T15748]  netlink_sendmsg+0x805/0xb30
[  317.357261][T15748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.359376][T15748]  ? aa_sock_msg_perm+0xf1/0x1d0
[  317.361001][T15748]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  317.362713][T15748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.364440][T15748]  __sock_sendmsg+0x21c/0x270
[  317.365969][T15748]  ____sys_sendmsg+0x505/0x830
[  317.367547][T15748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  317.369247][T15748]  ? import_iovec+0x74/0xa0
[  317.370754][T15748]  ___sys_sendmsg+0x21f/0x2a0
[  317.372266][T15748]  ? __pfx____sys_sendmsg+0x10/0x10
[  317.374253][T15748]  ? __fget_files+0x2a/0x420
[  317.376057][T15748]  ? __fget_files+0x3a0/0x420
[  317.377831][T15748]  __x64_sys_sendmsg+0x19b/0x260
[  317.379606][T15748]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  317.381534][T15748]  ? rcu_is_watching+0x15/0xb0
[  317.383227][T15748]  ? do_syscall_64+0xbe/0x3b0
[  317.384802][T15748]  do_syscall_64+0xfa/0x3b0
[  317.386447][T15748]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.388121][T15748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.390502][T15748]  ? exc_page_fault+0x9f/0xf0
[  317.392132][T15748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.394236][T15748] RIP: 0033:0x7f638718ebe9
[  317.395721][T15748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.401835][T15748] RSP: 002b:00007f63880d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.404812][T15748] RAX: ffffffffffffffda RBX: 00007f63873b5fa0 RCX: 00007f638718ebe9
[  317.407912][T15748] RDX: 0000000000004808 RSI: 0000200000001580 RDI: 0000000000000003
[  317.410979][T15748] RBP: 00007f6387211e19 R08: 0000000000000000 R09: 0000000000000000
[  317.414083][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  317.417061][T15748] R13: 00007f63873b6038 R14: 00007f63873b5fa0 R15: 00007ffc174f4a08
[  317.419629][T15748]  </TASK>
[  317.420742][T15748] Modules linked in:
[  317.422299][T15748] ---[ end trace 0000000000000000 ]---
[  317.424018][T15748] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  317.425888][T15748] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 a6 a6 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 6f a7 01 f8 4d 89 3e
[  317.426002][T15744] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  317.432856][T15748] RSP: 0018:ffffc90004abf0e0 EFLAGS: 00010246
[  317.432875][T15748] RAX: 0000000000000000 RBX: 1ffff11021dc3e36 RCX: dffffc0000000000
[  317.432886][T15748] RDX: ffffc9000887a000 RSI: 000000000000021e RDI: 000000000000021f
[  317.432896][T15748] RBP: ffffc90004abf230 R08: ffff888020041cc0 R09: 0000000000000002
[  317.432906][T15748] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11021dc3b66
[  317.432915][T15748] R13: ffff88810ee1f1b0 R14: 0000000000000000 R15: ffff88810ee1f1a8
[  317.432926][T15748] FS:  00007f63880d96c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  317.432937][T15748] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  317.432945][T15748] CR2: 0000200000000280 CR3: 000000013017e000 CR4: 00000000000006f0
[  317.432979][T15748] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  317.432988][T15748] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  317.432998][T15748] Kernel panic - not syncing: Fatal exception in interrupt
[  317.436339][T15748] Kernel Offset: disabled

VM DIAGNOSIS:
13:59:09  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44e0b RBX=1ffff11026cc7f61 RCX=ffff8880286a8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000179f6c0 RSP=ffffc9000179f540
R8 =ffffffff8fa38037 R9 =1ffffffff1f47006 R10=dffffc0000000000 R11=fffffbfff1f47007
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44df3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f181f6d3c80 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f63873b7dac CR3=0000000110534000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000000000ff 0000010000000000
XMM02=00006d697377685f 313132303863616d XMM03=ffffffffffff0000 ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000271 0000000000003031
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=0000000000000271 0000000000003031
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000139a RDI=000000000000139b RBP=00000000000003f8 RSP=ffffc90004abe870
R8 =ffff8880200e0237 R9 =1ffff1100401c046 R10=dffffc0000000000 R11=ffffffff854efa30
R12=dffffc0000000000 R13=ffffffff99af98ce R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f63880d96c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=000000013017e000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6387387498 00007f6387387470 XMM03=00007f63873874a8 00007f63873874a0
XMM04=00007f6387eed100 00007f6387387460 XMM05=00007f6387387478 00007f63873874c0
XMM06=00007f63873874b8 00007f63873874b0 XMM07=00007f63873874a8 00007f63873874a0
XMM08=0000000000000000 00007f6387212ee7 XMM09=0000000000000000 00007f6387212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
