last executing test programs:

4m54.053797247s ago: executing program 1 (id=1975):
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x40000002)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

4m53.434041564s ago: executing program 1 (id=1977):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x2d)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94)
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x33fe0}, {0x0}], 0x2}, 0x400c010)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000380)=0xfffffffffffffffd)
socketpair(0x23, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x60, 0x0, "1cdc0dca1d9f68846960e56d"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x90}, 0x1, 0x7}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000010)

4m53.061893787s ago: executing program 1 (id=1982):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000a80)="cc53d044d299266a8d2001d7c7a2", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m53.013910933s ago: executing program 1 (id=1984):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e44b904021d08000b000000e8fe55a1180015000600142603600e1209000d", 0x27}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)

4m52.951759673s ago: executing program 1 (id=1988):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

4m51.971531141s ago: executing program 1 (id=2004):
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x7, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000030000000000000000000000185e000006000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000370000007b8af0ff00000000bfa000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000be822f0292ecd7aac9756fc63fa566c93f6d0a4763c3e5764c2cb953ad6f6da45829742c1873afaae53990cf7e2eec9832bbae79b32e68c96d5f6c3f77d67969f1a03ac2c56d9e6d95ac287a7a5307c5d3e7c81197cf4b130b06ec489b7e7f6cac6f66abd4d8", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000fbffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000186500000e00000000000000010000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000800005d0c4dac0000000000000000006f1579a996798eb9b160e1cf12d92d8a742bd0c3aa617941eb8a752f0305d8e5aa204457ea", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x4, 0x1, 0x3, 0x3, 0x0, 0x5, 0xbb48, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfc9, 0x3}, 0x102, 0x7, 0x4, 0x9, 0x40, 0x9, 0xb2, 0x0, 0xdfe1, 0x0, 0x8}, 0x0, 0xb, r2, 0x9)
r10 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001)
setsockopt$sock_attach_bpf(r10, 0x1, 0x12, &(0x7f00000002c0), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10)
r11 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)

4m36.964717667s ago: executing program 32 (id=2004):
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x7, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000030000000000000000000000185e000006000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000370000007b8af0ff00000000bfa000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000be822f0292ecd7aac9756fc63fa566c93f6d0a4763c3e5764c2cb953ad6f6da45829742c1873afaae53990cf7e2eec9832bbae79b32e68c96d5f6c3f77d67969f1a03ac2c56d9e6d95ac287a7a5307c5d3e7c81197cf4b130b06ec489b7e7f6cac6f66abd4d8", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000fbffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000186500000e00000000000000010000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000800005d0c4dac0000000000000000006f1579a996798eb9b160e1cf12d92d8a742bd0c3aa617941eb8a752f0305d8e5aa204457ea", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x4, 0x1, 0x3, 0x3, 0x0, 0x5, 0xbb48, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfc9, 0x3}, 0x102, 0x7, 0x4, 0x9, 0x40, 0x9, 0xb2, 0x0, 0xdfe1, 0x0, 0x8}, 0x0, 0xb, r2, 0x9)
r10 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x190}, 0x24000001)
setsockopt$sock_attach_bpf(r10, 0x1, 0x12, &(0x7f00000002c0), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10)
r11 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)

1.099667455s ago: executing program 2 (id=6866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.037696561s ago: executing program 2 (id=6868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.037616568s ago: executing program 0 (id=6869):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[{0x18, 0x110, 0x1, '\b'}, {0x10, 0x110, 0x7fffffff}], 0x28}, 0x0)

959.020549ms ago: executing program 2 (id=6870):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x36, 0x0, &(0x7f00000003c0)="5e2742e8680d85cc970c2d2f86ddfd896fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1828c9c777b801f21fc42abd02c158f01a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

958.594793ms ago: executing program 0 (id=6871):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='initcall_level\x00', r0, 0x0, 0x4}, 0x18)

958.269329ms ago: executing program 0 (id=6872):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

869.804483ms ago: executing program 0 (id=6873):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90235fc60", 0x14}], 0x1}, 0x0)

869.696821ms ago: executing program 0 (id=6874):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)

779.684063ms ago: executing program 0 (id=6876):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$unix(r2, &(0x7f0000000540)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="1995bef8f05818f79a1a6904474f14305819d37b79e8f0d36bb591b926a48d664b7f86e4418e016806c0bd8bf2a9faa071ed7ec02b82a9d211d5cb10312a4707a4b5430ec8efbef2e60ce9a60045879196e8f854923353d120ae75b2105f3a18985bb46835d7152c8b864d8554bd6623acd026cffb792d3fd3ed6db9c6865b7fef4283f54f528b5fad2e696b", 0x8c}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1], 0x58, 0x801}, 0x40820)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
sendmsg$inet(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001780)="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", 0xce9}], 0x1}, 0xc0895)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f00000002c0)=r6}, 0x20)
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

779.415625ms ago: executing program 3 (id=6877):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4)

730.00233ms ago: executing program 3 (id=6878):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x17, 0x8}, 0x20)

729.890272ms ago: executing program 3 (id=6879):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

570.035779ms ago: executing program 3 (id=6880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r1 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

102.322555ms ago: executing program 2 (id=6881):
r0 = socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xb, 0x800800, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000040)=r1, 0x4)

101.256842ms ago: executing program 3 (id=6882):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

99.876049ms ago: executing program 3 (id=6883):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

321.739µs ago: executing program 2 (id=6884):
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0xa4)

0s ago: executing program 2 (id=6885):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

 netlink: 'syz.0.1990': attribute type 1 has an invalid length.
[  201.409161][T10612] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  202.938820][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'.
[  202.950671][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'.
[  203.068493][T10637] netlink: 'syz.2.2012': attribute type 4 has an invalid length.
[  203.074025][T10637] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.2012'.
[  203.432283][T10660] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2019'.
[  203.515906][T10666] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2021'.
[  204.513666][T10712] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2040'.
[  204.738586][T10722] netlink: 'syz.0.2045': attribute type 29 has an invalid length.
[  204.750797][T10722] netlink: 'syz.0.2045': attribute type 29 has an invalid length.
[  205.002034][T10739] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.2053'.
[  205.192907][T10745] netlink: 'syz.0.2056': attribute type 23 has an invalid length.
[  205.722773][T10764] netlink: 'syz.0.2065': attribute type 1 has an invalid length.
[  207.696481][T10803] netlink: 'syz.0.2083': attribute type 11 has an invalid length.
[  207.699871][T10803] netlink: 'syz.0.2083': attribute type 11 has an invalid length.
[  208.126302][T10811] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2087'.
[  208.256178][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  210.867410][T10888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2119'.
[  211.598383][T10898] netlink: 'syz.2.2123': attribute type 1 has an invalid length.
[  212.101956][T10911] netlink: 'syz.2.2129': attribute type 12 has an invalid length.
[  212.105007][T10911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2129'.
[  212.558268][T10923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2135'.
[  212.568824][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2135'.
[  212.578231][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'.
[  213.929980][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'.
[  214.004413][T10947] netlink: 'syz.0.2146': attribute type 8 has an invalid length.
[  214.292712][T10954] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  214.312902][T10954] syzkaller0: entered promiscuous mode
[  214.315458][T10954] syzkaller0: entered allmulticast mode
[  215.042250][T10958] netlink: 'syz.0.2151': attribute type 1 has an invalid length.
[  215.120969][ T5858] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  215.731143][T10976] netlink: 'syz.0.2159': attribute type 21 has an invalid length.
[  215.734680][T10976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2159'.
[  215.852720][T10982] sctp: [Deprecated]: syz.2.2160 (pid 10982) Use of struct sctp_assoc_value in delayed_ack socket option.
[  215.852720][T10982] Use struct sctp_sack_info instead
[  216.976432][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  216.987752][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  216.993242][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  216.996941][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.000777][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.179254][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  217.601790][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.835645][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.903383][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.991047][   T13] batman_adv: batadv0: Removing interface: netdevsim0
[  217.996626][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.036374][T10999] chnl_net:caif_netlink_parms(): no params data found
[  218.061138][T11018] macvtap0: refused to change device tx_queue_len
[  218.192621][ T5236] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  218.196493][ T5236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  218.200402][ T5236] CPU: 0 UID: 0 PID: 5236 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[  218.200415][ T5236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.200421][ T5236] Workqueue: hci2 hci_rx_work
[  218.200437][ T5236] Call Trace:
[  218.200440][ T5236]  <TASK>
[  218.200445][ T5236]  dump_stack_lvl+0x189/0x250
[  218.200459][ T5236]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.200468][ T5236]  ? __pfx__printk+0x10/0x10
[  218.200480][ T5236]  ? kernfs_path_from_node+0x250/0x290
[  218.200489][ T5236]  ? kernfs_path_from_node+0x2f/0x290
[  218.200498][ T5236]  sysfs_create_dir_ns+0x259/0x280
[  218.200509][ T5236]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  218.200546][ T5236]  ? do_raw_spin_unlock+0x4d/0x240
[  218.200560][ T5236]  kobject_add_internal+0x59f/0xb40
[  218.200578][ T5236]  kobject_add+0x155/0x220
[  218.200592][ T5236]  ? __pfx_kobject_add+0x10/0x10
[  218.200603][ T5236]  ? _raw_spin_unlock+0x28/0x50
[  218.200614][ T5236]  ? get_device_parent+0x366/0x3a0
[  218.200624][ T5236]  device_add+0x408/0xb50
[  218.200633][ T5236]  hci_conn_add_sysfs+0xd5/0x1e0
[  218.200641][ T5236]  le_conn_complete_evt+0xc3a/0x1220
[  218.200655][ T5236]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  218.200664][ T5236]  ? __pfx_bt_warn+0x10/0x10
[  218.200670][ T5236]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  218.200682][ T5236]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  218.200692][ T5236]  ? skb_pull_data+0xfb/0x200
[  218.200702][ T5236]  hci_le_conn_complete_evt+0x187/0x450
[  218.200714][ T5236]  hci_event_packet+0x78f/0x1200
[  218.200723][ T5236]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  218.200733][ T5236]  ? __pfx_hci_event_packet+0x10/0x10
[  218.200741][ T5236]  ? kcov_remote_start+0x4d3/0x7f0
[  218.200751][ T5236]  ? lockdep_hardirqs_on+0x90/0x150
[  218.200760][ T5236]  ? hci_send_to_monitor+0xe2/0x570
[  218.200774][ T5236]  hci_rx_work+0x46a/0xe80
[  218.200785][ T5236]  ? process_scheduled_works+0x9ef/0x17b0
[  218.200793][ T5236]  process_scheduled_works+0xae1/0x17b0
[  218.200811][ T5236]  ? __pfx_process_scheduled_works+0x10/0x10
[  218.200824][ T5236]  worker_thread+0x8a0/0xda0
[  218.200841][ T5236]  kthread+0x711/0x8a0
[  218.200850][ T5236]  ? __pfx_worker_thread+0x10/0x10
[  218.200856][ T5236]  ? __pfx_kthread+0x10/0x10
[  218.200865][ T5236]  ? _raw_spin_unlock_irq+0x23/0x50
[  218.200872][ T5236]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.200880][ T5236]  ? __pfx_kthread+0x10/0x10
[  218.200888][ T5236]  ret_from_fork+0x3fc/0x770
[  218.200897][ T5236]  ? __pfx_ret_from_fork+0x10/0x10
[  218.200906][ T5236]  ? __switch_to_asm+0x39/0x70
[  218.200914][ T5236]  ? __switch_to_asm+0x33/0x70
[  218.200921][ T5236]  ? __pfx_kthread+0x10/0x10
[  218.200929][ T5236]  ret_from_fork_asm+0x1a/0x30
[  218.200944][ T5236]  </TASK>
[  218.200958][ T5236] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  218.220871][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2175'.
[  218.241798][T10999] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.243753][ T5236] Bluetooth: hci2: failed to register connection device
[  218.252790][T10999] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.324963][T10999] bridge_slave_0: entered allmulticast mode
[  218.328184][T10999] bridge_slave_0: entered promiscuous mode
[  218.343046][T10999] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.345455][T10999] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.347849][T10999] bridge_slave_1: entered allmulticast mode
[  218.354561][T10999] bridge_slave_1: entered promiscuous mode
[  218.417937][   T13] bridge0: port 3(batadv0) entered disabled state
[  218.427593][   T13] bridge_slave_1: left allmulticast mode
[  218.437454][   T13] bridge_slave_1: left promiscuous mode
[  218.447000][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.452636][   T13] bridge_slave_0: left promiscuous mode
[  218.454576][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.533320][T11042] netlink: 'syz.0.2178': attribute type 2 has an invalid length.
[  218.536693][T11042] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2178'.
[  218.543832][T11042] nbd: must specify a device to reconfigure
[  218.817118][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.823982][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.831754][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  218.835455][   T13] veth1_vlan: left allmulticast mode
[  218.838474][   T13] bond0 (unregistering): Released all slaves
[  218.850048][T11057] sctp: [Deprecated]: syz.0.2184 (pid 11057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  218.850048][T11057] Use struct sctp_sack_info instead
[  218.851720][T10999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.868142][T10999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.933106][T10999] team0: Port device team_slave_0 added
[  218.948923][T10999] team0: Port device team_slave_1 added
[  218.987405][T10999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.993236][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.006648][T10999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.019347][ T5236] Bluetooth: hci3: command tx timeout
[  219.023156][T10999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.026707][T10999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.055379][T10999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.159651][T10999] hsr_slave_0: entered promiscuous mode
[  219.165241][T10999] hsr_slave_1: entered promiscuous mode
[  219.393032][   T13] hsr_slave_0: left promiscuous mode
[  219.402099][   T13] hsr_slave_1: left promiscuous mode
[  219.410041][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.428013][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.445649][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.448255][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.472704][   T13] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  219.475077][   T13] batman_adv: batadv0: Removing interface: hsr_slave_1
[  219.489864][   T13] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  219.492154][   T13] batman_adv: batadv0: Removing interface: virt_wifi0
[  219.533488][   T13] veth1_vlan: left promiscuous mode
[  219.541222][   T13] veth0_vlan: left promiscuous mode
[  220.685550][T11102] netlink: 'syz.2.2198': attribute type 2 has an invalid length.
[  220.697773][T11102] netlink: 'syz.2.2198': attribute type 1 has an invalid length.
[  220.744367][T11102] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2198'.
[  221.105447][ T5858] Bluetooth: hci3: command tx timeout
[  221.126904][T11111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2201'.
[  221.681219][   T13] team0 (unregistering): Port device team_slave_1 removed
[  221.708764][   T13] team0 (unregistering): Port device team_slave_0 removed
[  221.821880][ T5858] Bluetooth: hci2: command 0x0406 tx timeout
[  221.984727][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'.
[  222.027531][T11114] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  222.141089][T10999] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  222.154776][T10999] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  222.167594][T10999] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  222.187444][T10999] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  222.242906][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'.
[  222.465795][T10999] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.527498][T10999] 8021q: adding VLAN 0 to HW filter on device team0
[  222.566835][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.569680][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.601732][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.604741][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.192364][ T5236] Bluetooth: hci3: command tx timeout
[  223.196076][T10999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.247182][T10999] veth0_vlan: entered promiscuous mode
[  223.272001][T10999] veth1_vlan: entered promiscuous mode
[  223.318713][T10999] veth0_macvtap: entered promiscuous mode
[  223.334553][T10999] veth1_macvtap: entered promiscuous mode
[  223.353396][T11145] netlink: 'syz.0.2208': attribute type 21 has an invalid length.
[  223.356883][T11145] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2208'.
[  223.371573][T10999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.376523][T11145] netlink: 'syz.0.2208': attribute type 4 has an invalid length.
[  223.381712][T11145] netlink: 'syz.0.2208': attribute type 5 has an invalid length.
[  223.385052][T11145] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2208'.
[  223.397678][T10999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.408651][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.412924][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.429712][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.433695][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.501387][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.504077][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.528881][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.532707][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.618660][T11158] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  223.654048][T11161] netlink: 56429 bytes leftover after parsing attributes in process `syz.2.2215'.
[  223.752255][T11169] netlink: 'syz.0.2219': attribute type 3 has an invalid length.
[  223.754958][T11169] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2219'.
[  223.776098][T11171] x_tables: ip_tables: udp match: only valid for protocol 17
[  223.871465][T11179] netlink: 'syz.2.2224': attribute type 29 has an invalid length.
[  223.876090][T11179] netlink: 'syz.2.2224': attribute type 29 has an invalid length.
[  223.881997][T11179] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2224'.
[  224.042958][T11192] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2231'.
[  225.259653][ T5236] Bluetooth: hci3: command tx timeout
[  225.709220][T11227] syzkaller0: entered promiscuous mode
[  225.711282][T11227] syzkaller0: entered allmulticast mode
[  226.831537][T11238] netlink: 'syz.0.2250': attribute type 29 has an invalid length.
[  226.836591][T11238] netlink: 'syz.0.2250': attribute type 29 has an invalid length.
[  227.840224][T11251] netlink: 'syz.0.2256': attribute type 4 has an invalid length.
[  227.842939][T11251] netlink: 'syz.0.2256': attribute type 16 has an invalid length.
[  227.845986][T11251] __nla_validate_parse: 2 callbacks suppressed
[  227.845994][T11251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2256'.
[  229.439837][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1697922263 wd_nsec: 1697922342
[  231.370957][T11269] netlink: 'syz.3.2263': attribute type 21 has an invalid length.
[  232.101625][T11287] netlink: 'syz.0.2271': attribute type 27 has an invalid length.
[  232.105100][T11287] netlink: 'syz.0.2271': attribute type 3 has an invalid length.
[  232.108481][T11287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2271'.
[  232.895697][T11309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2278'.
[  232.907798][T11308] delete_channel: no stack
[  232.947240][T11305] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  232.973115][T11308] delete_channel: no stack
[  233.127417][T11308] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2279'.
[  233.813748][T11338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2290'.
[  234.484511][T11364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.802816][T11386] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2312'.
[  235.983845][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2326'.
[  236.988167][T11428] xt_HMARK: spi-set and port-set can't be combined
[  237.154294][T11437] syzkaller0: entered promiscuous mode
[  237.156294][T11437] syzkaller0: entered allmulticast mode
[  238.400750][T11443] ip6gretap0: left allmulticast mode
[  238.402776][T11443] ip6gretap0: left promiscuous mode
[  238.405229][T11443] bridge0: port 3(ip6gretap0) entered disabled state
[  238.410319][T11443] bridge_slave_1: left allmulticast mode
[  238.412407][T11443] bridge_slave_1: left promiscuous mode
[  238.414427][T11443] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.976519][T11475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.269749][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2352'.
[  239.298347][ T5236] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  239.366019][T11496] netlink: 'syz.2.2360': attribute type 10 has an invalid length.
[  239.379251][T11496] .`: (slave c@): Releasing backup interface
[  239.383153][T11496] @: left promiscuous mode
[  239.945852][T11514] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2369'.
[  240.105797][T11533] netlink: 'syz.2.2375': attribute type 5 has an invalid length.
[  240.110062][T11533] netlink: 713 bytes leftover after parsing attributes in process `syz.2.2375'.
[  240.113833][T11533] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.2375'.
[  240.117865][T11533] netlink: 'syz.2.2375': attribute type 5 has an invalid length.
[  240.123568][T11533] netlink: 713 bytes leftover after parsing attributes in process `syz.2.2375'.
[  240.164942][T11528] netlink: 'syz.3.2374': attribute type 1 has an invalid length.
[  240.167711][T11528] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2374'.
[  240.792188][T11570] netlink: 'syz.0.2391': attribute type 13 has an invalid length.
[  240.795485][T11570] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2391'.
[  240.808750][T11570] erspan0: refused to change device tx_queue_len
[  240.811432][T11570] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  240.914536][T11573] netlink: 495 bytes leftover after parsing attributes in process `syz.2.2392'.
[  240.944238][T11579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2395'.
[  241.077248][T11589] netlink: 'syz.0.2400': attribute type 1 has an invalid length.
[  241.350500][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  242.053280][T11606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.067915][T11608] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2408'.
[  242.203158][T11625] delete_channel: no stack
[  242.205255][T11625] delete_channel: no stack
[  242.233160][T11625] netlink: 'syz.3.2415': attribute type 6 has an invalid length.
[  242.251917][T11630] netlink: 'syz.2.2418': attribute type 7 has an invalid length.
[  242.921119][T11664] netlink: 'syz.3.2434': attribute type 10 has an invalid length.
[  242.953510][T11670] netlink: 'syz.0.2437': attribute type 1 has an invalid length.
[  244.273053][T11722] syzkaller0: entered promiscuous mode
[  244.275523][T11722] syzkaller0: entered allmulticast mode
[  244.477324][T11735] validate_nla: 2 callbacks suppressed
[  244.477338][T11735] netlink: 'syz.0.2468': attribute type 10 has an invalid length.
[  244.491638][T11737] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  244.519881][T11724] .`: left promiscuous mode
[  244.523863][T11724] bond_slave_1: left promiscuous mode
[  244.618904][T11724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.052249][T11762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  245.068650][T11762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.392311][T11829] __nla_validate_parse: 6 callbacks suppressed
[  246.392322][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'.
[  246.876932][T11865] xt_time: unknown flags 0xf4
[  247.178152][T11879] netlink: 'syz.0.2532': attribute type 3 has an invalid length.
[  247.185463][T11879] netlink: 'syz.0.2532': attribute type 16 has an invalid length.
[  247.196846][T11879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2532'.
[  247.291948][T11882] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2534'.
[  247.436624][T11897] netlink: 'syz.2.2541': attribute type 9 has an invalid length.
[  247.439406][T11897] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2541'.
[  247.637034][T11912] netlink: 'syz.2.2548': attribute type 39 has an invalid length.
[  247.647406][T11912] veth0_macvtap: left promiscuous mode
[  247.648136][T11916] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2550'.
[  247.692782][T11919] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2552'.
[  247.835667][T11935] netlink: 'syz.0.2558': attribute type 21 has an invalid length.
[  247.843375][T11936] netlink: 'syz.2.2557': attribute type 11 has an invalid length.
[  247.846680][T11936] netlink: 'syz.2.2557': attribute type 11 has an invalid length.
[  247.854816][T11931] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2559'.
[  247.860310][T11936] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2557'.
[  247.990371][ T5236] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  247.993614][ T5236] Bluetooth: hci3: Injecting HCI hardware error event
[  247.997429][ T5236] Bluetooth: hci3: hardware error 0x00
[  248.064358][T11954] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2568'.
[  248.067886][T11954] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2568'.
[  249.207524][T11981] syzkaller0: entered promiscuous mode
[  249.212399][T11981] syzkaller0: entered allmulticast mode
[  249.904783][T11991] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  249.973992][T11993] netlink: 'syz.3.2584': attribute type 21 has an invalid length.
[  249.977737][T11993] netlink: 'syz.3.2584': attribute type 15 has an invalid length.
[  249.984042][T11993] IPv6: NLM_F_CREATE should be specified when creating new route
[  249.988472][T11993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.995379][T11993] IPv6: NLM_F_CREATE should be set when creating new route
[  249.998659][T11993] IPv6: NLM_F_CREATE should be set when creating new route
[  250.001966][T11993] IPv6: NLM_F_CREATE should be set when creating new route
[  250.066010][ T5236] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  250.109720][T11995] netlink: 'syz.3.2585': attribute type 2 has an invalid length.
[  250.337007][T11997] netlink: 'syz.3.2586': attribute type 23 has an invalid length.
[  250.857988][T12005] netlink: 'syz.3.2590': attribute type 2 has an invalid length.
[  252.481583][T12048] __nla_validate_parse: 5 callbacks suppressed
[  252.481604][T12048] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2612'.
[  253.242351][T12077] netlink: 'syz.3.2625': attribute type 21 has an invalid length.
[  253.302304][T12079] netlink: 'syz.3.2626': attribute type 21 has an invalid length.
[  253.305490][T12079] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2626'.
[  253.312288][T12079] netlink: 'syz.3.2626': attribute type 5 has an invalid length.
[  253.315812][T12079] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2626'.
[  254.165610][T12089] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2631'.
[  255.584102][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.586935][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  256.269260][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'.
[  256.274863][T12147] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  256.277806][T12147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.457084][T12155] veth0_vlan: entered allmulticast mode
[  256.588561][T12165] netlink: 'syz.0.2665': attribute type 13 has an invalid length.
[  256.691158][T12169] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  256.696838][T12169] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2667'.
[  256.715237][T12169] netlink: 'syz.0.2667': attribute type 13 has an invalid length.
[  256.719370][T12169] netlink: 'syz.0.2667': attribute type 17 has an invalid length.
[  256.816207][T12169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.055294][T12201] netlink: 'syz.2.2682': attribute type 12 has an invalid length.
[  257.058090][T12201] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2682'.
[  257.451142][T12219] netlink: 'syz.3.2690': attribute type 11 has an invalid length.
[  257.511582][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'.
[  257.814548][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2700'.
[  258.081870][T12260] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2708'.
[  258.378755][T12266] netlink: 'syz.2.2710': attribute type 39 has an invalid length.
[  258.464007][T12271] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2712'.
[  258.552295][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2716'.
[  258.576720][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2716'.
[  258.716173][T12299] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2726'.
[  258.793923][T12308] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2730'.
[  258.797634][T12308] batadv_slave_1: entered promiscuous mode
[  259.914850][T12340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2742'.
[  260.119509][T12359] xt_policy: too many policy elements
[  260.208555][T12371] lo speed is unknown, defaulting to 1000
[  260.214323][T12371] lo speed is unknown, defaulting to 1000
[  260.217455][T12369] netlink: 'syz.2.2756': attribute type 39 has an invalid length.
[  260.229954][T12371] lo speed is unknown, defaulting to 1000
[  260.270606][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'.
[  260.295234][T12371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  260.306074][T12377] netlink: 'syz.2.2759': attribute type 10 has an invalid length.
[  260.421315][T12371] lo speed is unknown, defaulting to 1000
[  260.433844][T12371] lo speed is unknown, defaulting to 1000
[  260.443234][T12371] lo speed is unknown, defaulting to 1000
[  262.355826][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.907581][T12506] netlink: 'syz.3.2814': attribute type 1 has an invalid length.
[  262.913437][T12506] __nla_validate_parse: 5 callbacks suppressed
[  262.913445][T12506] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2814'.
[  263.048975][T12517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.357051][T12532] netlink: 'syz.0.2826': attribute type 62 has an invalid length.
[  263.663421][T12558] netlink: 'syz.0.2839': attribute type 10 has an invalid length.
[  263.831342][T12569] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2844'.
[  263.965919][T12578] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2847'.
[  264.045772][T12586] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2852'.
[  264.450757][T12606] netlink: 'syz.3.2860': attribute type 10 has an invalid length.
[  264.533950][T12608] netlink: 'syz.2.2861': attribute type 16 has an invalid length.
[  264.559979][T12608] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2861'.
[  265.187112][T12641] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2874'.
[  265.191675][T12641] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2874'.
[  265.195845][T12637] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2874'.
[  265.437374][T12645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.857065][T12653] syzkaller0: entered promiscuous mode
[  265.863597][T12653] syzkaller0: entered allmulticast mode
[  266.122620][T12662] netlink: 825 bytes leftover after parsing attributes in process `syz.2.2884'.
[  266.126479][T12662] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.2884'.
[  266.366492][T12676] netlink: 'syz.2.2890': attribute type 10 has an invalid length.
[  266.944109][T12680] netlink: 'syz.2.2891': attribute type 25 has an invalid length.
[  267.403261][T12701] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  268.068694][T12753] netlink: 'syz.3.2926': attribute type 16 has an invalid length.
[  268.073193][T12753] __nla_validate_parse: 4 callbacks suppressed
[  268.073234][T12753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2926'.
[  268.086951][T12753] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.108872][T12759] net veth1_virt_wifi : renamed from virt_wifi0 (while UP)
[  268.206750][T12767] netlink: 'syz.3.2934': attribute type 1 has an invalid length.
[  268.210366][T12767] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2934'.
[  268.247453][T12771] netlink: 'syz.3.2935': attribute type 21 has an invalid length.
[  269.208227][T12805] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2950'.
[  269.444564][T12815] IPv6: NLM_F_CREATE should be specified when creating new route
[  269.507682][T12820] tmpfs: Bad value for 'mode'
[  270.358807][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2982'.
[  270.362450][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2982'.
[  270.641410][T12891] syzkaller1: entered promiscuous mode
[  270.644113][T12891] syzkaller1: entered allmulticast mode
[  270.727114][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  270.901382][T12911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3000'.
[  270.905590][T12911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3000'.
[  270.912124][T12911] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3000'.
[  270.991319][T12919] netlink: 'syz.3.3004': attribute type 3 has an invalid length.
[  270.999431][T12919] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.3004'.
[  271.881743][T12941] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  271.885402][T12941] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  273.154486][T12989] syzkaller0: entered promiscuous mode
[  273.156796][T12989] syzkaller0: entered allmulticast mode
[  273.296555][T12998] __nla_validate_parse: 2 callbacks suppressed
[  273.296574][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'.
[  273.973108][T13011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  274.513299][T13041] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3060'.
[  274.530680][T13043] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3061'.
[  274.926586][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'.
[  275.103933][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'.
[  275.107937][T13080] openvswitch: netlink: Missing key (keys=40, expected=80)
[  275.326457][T13092] xt_limit: Overflow, try lower: 324382443/4200216956
[  275.476521][T13102] : entered promiscuous mode
[  275.916085][T13126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3095'.
[  276.222371][T13146] netlink: 'syz.0.3107': attribute type 13 has an invalid length.
[  276.225461][T13146] netlink: 'syz.0.3107': attribute type 58 has an invalid length.
[  276.228382][T13146] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3107'.
[  276.288268][T13153] netlink: 'syz.3.3110': attribute type 2 has an invalid length.
[  276.299298][T13153] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3110'.
[  276.308396][T13153] netlink: 'syz.3.3110': attribute type 2 has an invalid length.
[  276.316409][T13153] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3110'.
[  276.323106][T13155] netlink: 'syz.0.3111': attribute type 3 has an invalid length.
[  276.326439][T13155] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3111'.
[  276.443587][T13160] netlink: 'syz.2.3108': attribute type 10 has an invalid length.
[  276.468791][T13167] netlink: 'syz.3.3116': attribute type 10 has an invalid length.
[  276.472233][T13167] dummy0: entered promiscuous mode
[  276.474214][T13167] dummy0: entered allmulticast mode
[  276.477835][T13167] bridge0: port 3(dummy0) entered blocking state
[  276.481156][T13167] bridge0: port 3(dummy0) entered disabled state
[  276.486857][T13167] bridge0: port 3(dummy0) entered blocking state
[  276.489134][T13167] bridge0: port 3(dummy0) entered forwarding state
[  276.722508][T13180] netlink: 'syz.0.3122': attribute type 9 has an invalid length.
[  277.111213][T13150] delete_channel: no stack
[  277.372528][T13212] netlink: 'syz.3.3135': attribute type 1 has an invalid length.
[  277.901653][T13237] netlink: 'syz.0.3149': attribute type 1 has an invalid length.
[  277.933967][T13239] tap0: tun_chr_ioctl cmd 1074025672
[  277.935868][T13239] tap0: ignored: set checksum enabled
[  278.251032][T13265] lo speed is unknown, defaulting to 1000
[  279.225938][T13294] syzkaller0: entered promiscuous mode
[  279.227866][T13294] syzkaller0: entered allmulticast mode
[  280.589722][T13327] __nla_validate_parse: 9 callbacks suppressed
[  280.589743][T13327] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3187'.
[  280.637935][T13333] netlink: 212868 bytes leftover after parsing attributes in process `syz.0.3190'.
[  280.724677][T13339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'.
[  280.732687][T13339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3192'.
[  281.128869][T13365] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3198'.
[  281.977756][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[  281.982356][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[  282.654014][T13417] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3221'.
[  282.813857][T13429] validate_nla: 2 callbacks suppressed
[  282.813916][T13429] netlink: 'syz.0.3227': attribute type 21 has an invalid length.
[  283.058844][T13429] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3227'.
[  283.071412][T13429] netlink: 'syz.0.3227': attribute type 6 has an invalid length.
[  283.075316][T13429] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3227'.
[  283.768337][T13462] netlink: 'syz.0.3239': attribute type 1 has an invalid length.
[  284.204084][T13475] netlink: 'syz.3.3242': attribute type 11 has an invalid length.
[  284.407853][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.848549][T13489] netlink: 'syz.2.3248': attribute type 4 has an invalid length.
[  284.917382][T13489] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  284.982887][T13491] netlink: 'syz.3.3249': attribute type 3 has an invalid length.
[  286.697985][T13569] __nla_validate_parse: 8 callbacks suppressed
[  286.697998][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3282'.
[  287.126099][T13598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.491452][T13621] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3304'.
[  287.662196][T13575] delete_channel: no stack
[  287.743383][T13631] netlink: 'syz.3.3309': attribute type 21 has an invalid length.
[  287.747025][T13631] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3309'.
[  287.753480][T13631] netlink: 'syz.3.3309': attribute type 5 has an invalid length.
[  287.756948][T13631] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3309'.
[  287.790188][T13635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3311'.
[  287.793908][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3311'.
[  287.797715][T13635] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3311'.
[  287.800672][T13637] netlink: 177 bytes leftover after parsing attributes in process `syz.3.3312'.
[  287.804195][T13635] netlink: 'syz.0.3311': attribute type 2 has an invalid length.
[  287.807505][T13635] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3311'.
[  287.989903][T13643] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3315'.
[  289.871479][T13685] netlink: 'syz.3.3332': attribute type 29 has an invalid length.
[  289.875782][T13685] netlink: 'syz.3.3332': attribute type 29 has an invalid length.
[  289.880437][T13685] netlink: 'syz.3.3332': attribute type 29 has an invalid length.
[  290.093148][   T33] audit: type=1107 audit(1757339623.615:3): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  290.397298][T13709] netlink: 'syz.0.3342': attribute type 21 has an invalid length.
[  290.687971][T13727] netlink: 'syz.0.3350': attribute type 10 has an invalid length.
[  291.160658][T13743] netlink: 'syz.3.3357': attribute type 21 has an invalid length.
[  291.164183][T13743] netlink: 'syz.3.3357': attribute type 4 has an invalid length.
[  292.356090][T13794] netlink: 'syz.3.3377': attribute type 21 has an invalid length.
[  293.393618][T13807] netlink: 'syz.2.3382': attribute type 1 has an invalid length.
[  293.522082][T13822] netlink: 'syz.2.3390': attribute type 16 has an invalid length.
[  293.525334][T13822] __nla_validate_parse: 6 callbacks suppressed
[  293.525342][T13822] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3390'.
[  293.689998][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3395'.
[  293.759790][T13840] xt_l2tp: unknown flags: 51
[  293.876900][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3399'.
[  293.971036][T13853] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3404'.
[  294.129999][T13868] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3411'.
[  294.156632][T13868] C: renamed from team_slave_0 (while UP)
[  294.684995][T13868] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3411'.
[  294.699856][T13873] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3413'.
[  294.904820][T13884] validate_nla: 1 callbacks suppressed
[  294.904837][T13884] netlink: 'syz.2.3417': attribute type 3 has an invalid length.
[  294.913051][T13884] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3417'.
[  295.103155][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'.
[  296.628766][T13929] tun0: tun_chr_ioctl cmd 1074812117
[  296.805499][T13941] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  296.955941][T13953] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3449'.
[  297.467962][T13983] netlink: 'syz.2.3462': attribute type 12 has an invalid length.
[  297.554531][T13973] netlink: 'syz.0.3458': attribute type 10 has an invalid length.
[  297.587825][T13973] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  298.314445][T14013] netlink: 'syz.0.3474': attribute type 1 has an invalid length.
[  298.621641][T14029] netlink: 'syz.2.3481': attribute type 15 has an invalid length.
[  299.492590][T14041] __nla_validate_parse: 8 callbacks suppressed
[  299.492609][T14041] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3486'.
[  299.555086][T14041] netlink: 'syz.2.3486': attribute type 10 has an invalid length.
[  299.614871][T14041] batman_adv: batadv0: Adding interface: netdevsim0
[  299.617232][T14041] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.628766][T14041] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  299.730814][T14049] netlink: 'syz.3.3490': attribute type 39 has an invalid length.
[  302.752182][T14057] netlink: 'syz.2.3493': attribute type 3 has an invalid length.
[  302.755651][T14057] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3493'.
[  302.829828][T14065] netlink: 'syz.0.3497': attribute type 1 has an invalid length.
[  304.837246][T14150] netlink: 'syz.0.3535': attribute type 2 has an invalid length.
[  304.914833][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3530'.
[  305.674089][T14178] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3547'.
[  305.677656][T14178] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3547'.
[  305.741014][T14188] netlink: 'syz.2.3552': attribute type 9 has an invalid length.
[  305.751156][T14188] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.3552'.
[  305.815886][T14194] sit0: entered allmulticast mode
[  305.824147][T14194] sit0: entered promiscuous mode
[  305.994943][T14201] netlink: 'syz.0.3559': attribute type 3 has an invalid length.
[  305.999543][T14201] netlink: 'syz.0.3559': attribute type 2 has an invalid length.
[  306.003150][T14201] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.3559'.
[  306.396871][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'.
[  306.701565][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3571'.
[  306.706411][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3571'.
[  306.711545][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3571'.
[  306.715614][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3571'.
[  306.766221][T14241] sctp: [Deprecated]: syz.0.3577 (pid 14241) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.766221][T14241] Use struct sctp_sack_info instead
[  306.952313][T14253] netlink: 'syz.0.3580': attribute type 29 has an invalid length.
[  306.958238][T14253] netlink: 'syz.0.3580': attribute type 29 has an invalid length.
[  306.970504][T14253] netlink: 'syz.0.3580': attribute type 29 has an invalid length.
[  306.977540][T14253] netlink: 'syz.0.3580': attribute type 29 has an invalid length.
[  307.388405][T14275] batman_adv: batadv0: Removing interface: netdevsim0
[  307.398960][T14275] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  307.506358][T14283] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  307.518062][T14283] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  307.815795][T14294] validate_nla: 5 callbacks suppressed
[  307.815808][T14294] netlink: 'syz.3.3599': attribute type 10 has an invalid length.
[  307.915503][T14296] netlink: 'syz.2.3600': attribute type 21 has an invalid length.
[  307.962198][T14300] netlink: 'syz.0.3602': attribute type 1 has an invalid length.
[  308.073389][T14308] netlink: 'syz.2.3606': attribute type 39 has an invalid length.
[  308.144793][ T5236] Bluetooth: hci1: Malformed LE Event: 0x0d
[  308.171511][T14323] netlink: 'syz.3.3613': attribute type 5 has an invalid length.
[  308.653919][T14358] netlink: 'syz.3.3629': attribute type 5 has an invalid length.
[  309.084543][T14368] openvswitch: netlink: Message has 6 unknown bytes.
[  309.112753][T14368] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.117260][T14368] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.152920][T14377] netlink: 'syz.0.3637': attribute type 21 has an invalid length.
[  309.264324][T14384] netlink: 'syz.0.3640': attribute type 23 has an invalid length.
[  309.322226][T14387] netlink: 'syz.2.3641': attribute type 29 has an invalid length.
[  309.333699][T14387] netlink: 'syz.2.3641': attribute type 29 has an invalid length.
[  310.177611][T14434] __nla_validate_parse: 15 callbacks suppressed
[  310.177630][T14434] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3663'.
[  310.263594][T14440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3666'.
[  310.995359][T14477] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3684'.
[  311.029516][T14474] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3683'.
[  312.166823][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3697'.
[  312.170031][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3697'.
[  312.241288][T14499] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3693'.
[  312.252437][T14513] netlink: ct family unspecified
[  312.254028][T14513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.467931][T14532] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3709'.
[  312.475639][T14532] syz_tun: refused to change device tx_queue_len
[  312.947249][ T5236] Bluetooth: hci2: Malformed HCI Event: 0x22
[  313.071241][T14569] validate_nla: 7 callbacks suppressed
[  313.071256][T14569] netlink: 'syz.2.3725': attribute type 2 has an invalid length.
[  313.077041][T14569] netlink: 'syz.2.3725': attribute type 1 has an invalid length.
[  313.081893][T14569] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3725'.
[  313.086008][T14569] nbd: couldn't find device at index 16
[  313.167370][T14573] netlink: 'syz.3.3727': attribute type 7 has an invalid length.
[  313.617881][T14615] netlink: 'syz.0.3748': attribute type 12 has an invalid length.
[  313.621769][T14615] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3748'.
[  313.651872][T14621] netlink: 'syz.3.3750': attribute type 1 has an invalid length.
[  313.655231][T14621] netlink: 'syz.3.3750': attribute type 4 has an invalid length.
[  313.661871][T14621] netlink: 'syz.3.3750': attribute type 1 has an invalid length.
[  313.665955][T14621] netlink: 'syz.3.3750': attribute type 4 has an invalid length.
[  313.788319][T14625] netlink: 'syz.0.3751': attribute type 19 has an invalid length.
[  314.327846][T14662] netlink: 'syz.2.3768': attribute type 2 has an invalid length.
[  314.337454][T14662] nbd: must specify at least one socket
[  314.612086][T14676] .`: renamed from bond0 (while UP)
[  316.136781][T14713] __nla_validate_parse: 7 callbacks suppressed
[  316.136793][T14713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3789'.
[  316.885559][T14750] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3805'.
[  316.892695][T14750] block nbd5: not configured, cannot reconfigure
[  317.022956][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  317.025551][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  317.204501][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3808'.
[  318.031431][T14769] netlink: set zone limit has 8 unknown bytes
[  318.127784][T14773] validate_nla: 7 callbacks suppressed
[  318.127878][T14773] netlink: 'syz.0.3814': attribute type 21 has an invalid length.
[  318.134746][T14773] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3814'.
[  318.642754][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3821'.
[  319.324394][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'.
[  319.337787][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'.
[  319.569736][T14813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3832'.
[  319.759608][T14828] : renamed from pim6reg1
[  319.776512][T14830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3840'.
[  320.714888][T14857] netlink: 'syz.2.3849': attribute type 1 has an invalid length.
[  320.718529][T14857] netlink: 'syz.2.3849': attribute type 4 has an invalid length.
[  320.722743][T14857] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3849'.
[  321.264596][T14869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3856'.
[  321.325128][T14869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3856'.
[  321.576126][T14869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3856'.
[  321.750450][T14879] openvswitch: netlink: Flow actions attr not present in new flow.
[  321.754376][T14879] syzkaller0: entered promiscuous mode
[  321.821470][T14887] netlink: 'syz.3.3863': attribute type 1 has an invalid length.
[  321.870336][T14891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  321.920322][T14893] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3865'.
[  322.908527][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3875'.
[  323.038549][T14916] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3876'.
[  323.175203][T14912] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  323.269988][T14921] netlink: 'syz.2.3878': attribute type 1 has an invalid length.
[  323.276032][T14921] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3878'.
[  323.813184][T14943] netlink: 'syz.0.3887': attribute type 10 has an invalid length.
[  323.823500][T14943] .`: (slave bond_slave_0): Releasing backup interface
[  323.983907][T14951] netlink: 'syz.0.3891': attribute type 3 has an invalid length.
[  323.987505][T14951] netlink: 'syz.0.3891': attribute type 1 has an invalid length.
[  323.993021][T14951] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3891'.
[  324.037404][ T5236] Bluetooth: hci1: ISO packet too small
[  324.586962][T14967] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  324.591753][T14967] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  324.710228][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3898'.
[  324.772487][T14977] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3898'.
[  324.772620][T14977] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  329.448664][T15066] __nla_validate_parse: 4 callbacks suppressed
[  329.448677][T15066] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3939'.
[  330.041464][T15089] netlink: 'syz.3.3948': attribute type 2 has an invalid length.
[  331.510984][T15122] netlink: 'syz.3.3964': attribute type 29 has an invalid length.
[  331.522970][T15122] netlink: 'syz.3.3964': attribute type 10 has an invalid length.
[  331.665891][T15122] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.692359][T15122] team0: Port device bond0 added
[  331.827129][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3968'.
[  331.833812][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3968'.
[  332.163866][T15156] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3977'.
[  332.486275][T15188] netlink: 'syz.0.3992': attribute type 21 has an invalid length.
[  332.489657][T15186] netlink: 'syz.3.3991': attribute type 23 has an invalid length.
[  332.508558][T15188] IPv6: NLM_F_CREATE should be specified when creating new route
[  332.515284][T15188] IPv6: Can't replace route, no match found
[  332.722469][T15202] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3998'.
[  332.778518][T15205] syzkaller0: entered promiscuous mode
[  332.787688][T15205] syzkaller0: entered allmulticast mode
[  333.133800][T15222] netlink: 628 bytes leftover after parsing attributes in process `syz.2.4007'.
[  333.177845][T15226] rdma_rxe: rxe_newlink: failed to add lo
[  333.298808][T15228] netlink: 'syz.3.4010': attribute type 21 has an invalid length.
[  333.610038][T15244] netlink: 'syz.0.4018': attribute type 29 has an invalid length.
[  333.616666][T15244] netlink: 'syz.0.4018': attribute type 29 has an invalid length.
[  333.643621][T15244] netlink: 572 bytes leftover after parsing attributes in process `syz.0.4018'.
[  333.670884][T15247] netlink: 'syz.3.4019': attribute type 210 has an invalid length.
[  334.113779][T15256] netlink: 'syz.0.4023': attribute type 39 has an invalid length.
[  334.165833][T15259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.396512][T15265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4027'.
[  335.216204][T15303] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4045'.
[  335.496103][T15314] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4051'.
[  335.704926][T15321] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4054'.
[  335.754376][T15328] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  335.853724][T15337] validate_nla: 2 callbacks suppressed
[  335.853769][T15337] netlink: 'syz.2.4062': attribute type 10 has an invalid length.
[  335.868812][T15337] team0: Port device wlan1 added
[  335.874577][T15337] netlink: 'syz.2.4062': attribute type 11 has an invalid length.
[  335.877792][T15337] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4062'.
[  335.882059][T15336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.930455][T15342] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  335.981692][T15347] netlink: 'syz.3.4065': attribute type 29 has an invalid length.
[  335.985844][T15347] netlink: 'syz.3.4065': attribute type 29 has an invalid length.
[  336.040415][T15356] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4071'.
[  336.043439][T15356] netlink: zone id is out of range
[  336.045170][T15356] netlink: zone id is out of range
[  336.046997][T15356] netlink: zone id is out of range
[  336.048775][T15356] netlink: zone id is out of range
[  336.051544][T15356] netlink: zone id is out of range
[  336.053340][T15356] netlink: zone id is out of range
[  336.055117][T15356] netlink: zone id is out of range
[  336.056878][T15356] netlink: zone id is out of range
[  336.157240][T15367] netlink: 'syz.3.4075': attribute type 21 has an invalid length.
[  336.161841][T15367] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4075'.
[  336.166028][T15367] netlink: 'syz.3.4075': attribute type 3 has an invalid length.
[  336.168757][T15367] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4075'.
[  336.219269][T15369] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4076'.
[  336.311376][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4078'.
[  336.416694][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4081'.
[  336.503815][T15391] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.516915][T15430] netlink: 'syz.3.4103': attribute type 7 has an invalid length.
[  339.010403][T15484] netlink: 'syz.2.4124': attribute type 10 has an invalid length.
[  339.347602][T15495] tc_dump_action: action bad kind
[  339.745468][T15519] netlink: 'syz.0.4139': attribute type 21 has an invalid length.
[  339.748962][T15519] netlink: 'syz.0.4139': attribute type 1 has an invalid length.
[  340.214661][T15548] netlink: 'syz.2.4152': attribute type 21 has an invalid length.
[  340.222046][T15548] __nla_validate_parse: 4 callbacks suppressed
[  340.222061][T15548] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4152'.
[  340.251861][T15552] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4154'.
[  340.331620][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4159'.
[  340.456907][T15560] team0 (unregistering): Port device team_slave_0 removed
[  340.467366][T15560] team0 (unregistering): Port device team_slave_1 removed
[  340.473403][T15560] team0 (unregistering): Port device bond0 removed
[  343.789624][T15587] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4169'.
[  343.882110][ T5236] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6
[  344.026083][T15602] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4172'.
[  344.072337][T15602] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4172'.
[  345.904634][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  345.921470][T15645] net_ratelimit: 78 callbacks suppressed
[  345.921491][T15645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.067515][T15660] validate_nla: 2 callbacks suppressed
[  346.067533][T15660] netlink: 'syz.3.4199': attribute type 4 has an invalid length.
[  346.074099][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'.
[  346.375627][T15682] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4208'.
[  346.459376][T15692] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4213'.
[  346.463466][T15692] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4213'.
[  346.821089][T15710] netlink: 'syz.0.4220': attribute type 1 has an invalid length.
[  346.824605][T15710] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4220'.
[  347.095131][T15677] delete_channel: no stack
[  347.857941][T15727] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4227'.
[  347.866258][T15727] tc_dump_action: action bad kind
[  347.970867][T15738] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  348.865570][T15754] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4238'.
[  348.884537][T15756] netlink: 'syz.3.4240': attribute type 2 has an invalid length.
[  349.044875][T15773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4249'.
[  349.051344][T15773] openvswitch: netlink: Missing key (keys=40, expected=100)
[  349.274104][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4252'.
[  349.314728][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4253'.
[  350.000198][T15807] netlink: 'syz.2.4262': attribute type 10 has an invalid length.
[  350.552451][T15829] tc_dump_action: action bad kind
[  352.675495][T15856] syzkaller0: entered promiscuous mode
[  352.677821][T15856] syzkaller0: entered allmulticast mode
[  352.950718][T15871] __nla_validate_parse: 3 callbacks suppressed
[  352.950728][T15871] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4292'.
[  353.442527][T15874] netlink: 'syz.0.4293': attribute type 64 has an invalid length.
[  354.066908][   T10] lo speed is unknown, defaulting to 1000
[  354.725303][T15913] lo speed is unknown, defaulting to 1000
[  355.577351][T15944] netlink: 'syz.3.4319': attribute type 21 has an invalid length.
[  355.586088][T15944] netlink: 'syz.3.4319': attribute type 6 has an invalid length.
[  355.594542][T15944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4319'.
[  356.068019][T15973] netlink: 'syz.3.4333': attribute type 10 has an invalid length.
[  356.104375][T15973] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  356.241100][T15982] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4337'.
[  357.641078][T16019] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4356'.
[  357.648177][T16019] netlink: zone id is out of range
[  357.652606][T16019] netlink: get zone limit has 8 unknown bytes
[  357.748684][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'.
[  357.786241][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'.
[  357.790731][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'.
[  357.936991][T16037] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  358.835461][T16053] sctp: [Deprecated]: syz.2.4369 (pid 16053) Use of struct sctp_assoc_value in delayed_ack socket option.
[  358.835461][T16053] Use struct sctp_sack_info instead
[  358.977440][T16057] netlink: 'syz.0.4373': attribute type 7 has an invalid length.
[  358.981932][T16057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4373'.
[  359.092333][T16058] netlink: 'syz.3.4372': attribute type 21 has an invalid length.
[  359.098247][T16058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4372'.
[  359.105808][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4372'.
[  359.302357][T16066] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4376'.
[  359.625199][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4379'.
[  359.637624][T16073] openvswitch: netlink: Unknown nsh attribute 0
[  359.640672][T16073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.685400][T16077] netlink: 'syz.0.4381': attribute type 10 has an invalid length.
[  359.873452][T16081] netlink: 'syz.2.4383': attribute type 10 has an invalid length.
[  359.876436][T16081] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4383'.
[  359.892922][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4387'.
[  359.911652][T16092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4388'.
[  359.914691][T16092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4388'.
[  360.038486][T16108] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4395'.
[  360.607286][T16146] netlink: 'syz.3.4415': attribute type 3 has an invalid length.
[  360.613120][T16146] netlink: 'syz.3.4415': attribute type 1 has an invalid length.
[  360.921838][T16165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  360.925701][T16165] IPv6: NLM_F_CREATE should be set when creating new route
[  360.929443][T16165] IPv6: NLM_F_CREATE should be set when creating new route
[  361.006093][T16169] netlink: 'syz.3.4424': attribute type 29 has an invalid length.
[  361.010497][T16169] netlink: 'syz.3.4424': attribute type 29 has an invalid length.
[  361.013802][T16169] netlink: 'syz.3.4424': attribute type 29 has an invalid length.
[  361.217568][T16179] syzkaller0: tun_chr_ioctl cmd 2147767520
[  362.266114][T16197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  364.253435][T16238] __nla_validate_parse: 5 callbacks suppressed
[  364.253452][T16238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4456'.
[  364.281995][T16235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4456'.
[  364.292303][T16238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4456'.
[  365.398335][T16260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4464'.
[  365.419588][T16260] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4464'.
[  365.423685][T16260] netlink: 'syz.2.4464': attribute type 5 has an invalid length.
[  365.427129][T16260] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4464'.
[  365.558278][T16269] : renamed from wg2 (while UP)
[  365.628349][T16273] sock: sock_set_timeout: `syz.2.4470' (pid 16273) tries to set negative timeout
[  365.688388][T16275] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4471'.
[  365.940505][T16299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4482'.
[  366.032984][T16305] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  366.643519][T16341] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4504'.
[  366.778821][T16348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4507'.
[  366.784539][T16345] netlink: 'syz.0.4506': attribute type 39 has an invalid length.
[  366.885067][T16356] netlink: 'syz.3.4511': attribute type 3 has an invalid length.
[  366.889461][T16356] netlink: 'syz.3.4511': attribute type 3 has an invalid length.
[  368.585265][T16393] netlink: 'syz.3.4529': attribute type 3 has an invalid length.
[  369.097835][T16420] netlink: 'syz.3.4541': attribute type 1 has an invalid length.
[  369.287277][T16440] netlink: 'syz.3.4549': attribute type 11 has an invalid length.
[  369.293478][T16440] __nla_validate_parse: 7 callbacks suppressed
[  369.293490][T16440] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4549'.
[  369.382476][T16438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.231361][T16489] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4569'.
[  370.888160][T16499] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.4573'.
[  371.001314][T16512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4579'.
[  371.004976][T16512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4579'.
[  371.008742][T16512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4579'.
[  371.213916][T16523] syzkaller0: entered promiscuous mode
[  371.216402][T16523] syzkaller0: entered allmulticast mode
[  371.423019][T16527] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4585'.
[  371.494631][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4585'.
[  371.645586][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4586'.
[  371.750533][T16536] netlink: 'syz.0.4589': attribute type 1 has an invalid length.
[  371.873734][T16544] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4593'.
[  373.545628][T16616] netlink: 'syz.2.4625': attribute type 9 has an invalid length.
[  374.762117][T16663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  374.900832][T16666] : left promiscuous mode
[  375.144007][T16675] __nla_validate_parse: 5 callbacks suppressed
[  375.144022][T16675] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4649'.
[  375.151193][T16675] netlink: zone id is out of range
[  375.153220][T16675] netlink: zone id is out of range
[  375.155461][T16675] netlink: zone id is out of range
[  375.157702][T16675] netlink: zone id is out of range
[  375.164927][T16675] netlink: zone id is out of range
[  375.167107][T16675] netlink: zone id is out of range
[  375.172461][T16675] netlink: zone id is out of range
[  375.174646][T16675] netlink: zone id is out of range
[  375.176958][T16675] netlink: zone id is out of range
[  375.190524][T16677] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4650'.
[  375.674988][T16710] tmpfs: Bad value for 'uid'
[  375.676596][T16710] tmpfs: Bad value for 'uid'
[  375.690388][T16712] netlink: 'syz.0.4667': attribute type 2 has an invalid length.
[  375.693923][T16712] netlink: 'syz.0.4667': attribute type 3 has an invalid length.
[  375.697471][T16712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4667'.
[  375.746245][T16718] netlink: 'syz.0.4670': attribute type 14 has an invalid length.
[  375.748914][T16718] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4670'.
[  376.325670][T16763] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  376.329789][T16763] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  376.442608][T16771] netlink: 'syz.3.4694': attribute type 1 has an invalid length.
[  376.536697][T16773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4696'.
[  376.540668][T16773] netlink: 'syz.3.4696': attribute type 1 has an invalid length.
[  376.544009][T16773] netlink: 'syz.3.4696': attribute type 2 has an invalid length.
[  376.755071][T16789] netlink: 'syz.3.4704': attribute type 3 has an invalid length.
[  376.758344][T16789] netlink: 'syz.3.4704': attribute type 1 has an invalid length.
[  376.761990][T16789] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4704'.
[  376.911493][T16793] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4706'.
[  377.475144][T16828] netlink: 'syz.0.4722': attribute type 29 has an invalid length.
[  377.619966][T16836] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4725'.
[  378.553425][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  378.556031][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  379.431510][T16906] netlink: 'syz.0.4757': attribute type 6 has an invalid length.
[  379.435506][T16906] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4757'.
[  380.108127][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4775'.
[  380.182696][ T5236] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  380.294727][T16955] netlink: 'syz.3.4780': attribute type 5 has an invalid length.
[  380.319703][T16958] net_ratelimit: 76 callbacks suppressed
[  380.319715][T16958] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  380.344058][T16960] netlink: 'syz.3.4782': attribute type 13 has an invalid length.
[  380.346759][T16960] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4782'.
[  380.482578][T16971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4786'.
[  381.208823][T17017] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.4807'.
[  381.454816][T17029] netlink: 'syz.2.4813': attribute type 2 has an invalid length.
[  381.523651][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4817'.
[  381.611790][T17046] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4822'.
[  381.613789][T17048] netlink: 'syz.0.4821': attribute type 4 has an invalid length.
[  381.618906][T17048] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4821'.
[  381.656945][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4823'.
[  381.777803][T17061] C: renamed from team_slave_0
[  381.858495][T17061] netlink: 'syz.3.4827': attribute type 3 has an invalid length.
[  381.863045][T17061] netlink: 'syz.3.4827': attribute type 1 has an invalid length.
[  381.865667][T17061] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4827'.
[  382.072434][T17079] netlink: 'syz.3.4836': attribute type 1 has an invalid length.
[  382.600151][T17103] netlink: 61859 bytes leftover after parsing attributes in process `syz.3.4847'.
[  382.761486][T17111] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4849'.
[  382.800067][T17116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.872488][T17123] netlink: 'syz.3.4856': attribute type 49 has an invalid length.
[  382.891520][T17126] netlink: 'syz.2.4857': attribute type 10 has an invalid length.
[  383.191231][T17154] veth0_to_bond: default FDB implementation only supports local addresses
[  384.064268][T17184] D`: renamed from hsr_slave_1
[  385.391778][T17228] __nla_validate_parse: 4 callbacks suppressed
[  385.391838][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4901'.
[  385.595789][T17248] netlink: 'syz.2.4909': attribute type 2 has an invalid length.
[  385.609703][T17248] netlink: 'syz.2.4909': attribute type 9 has an invalid length.
[  385.612970][T17248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4909'.
[  385.673634][T17259] ]X: renamed from veth0_vlan (while UP)
[  385.724466][T17263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4916'.
[  386.986041][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4931'.
[  386.992541][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4931'.
[  387.664003][T17347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4951'.
[  388.643573][T17361] netlink: 'syz.2.4958': attribute type 29 has an invalid length.
[  388.648031][T17361] netlink: 'syz.2.4958': attribute type 29 has an invalid length.
[  388.660054][T17361] netlink: 'syz.2.4958': attribute type 29 has an invalid length.
[  388.998803][T17383] netlink: 'syz.3.4966': attribute type 12 has an invalid length.
[  389.003001][T17383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4966'.
[  389.044087][T17383] syz.3.4966 (17383) used obsolete PPPIOCDETACH ioctl
[  389.084976][T17385] syzkaller0: entered promiscuous mode
[  389.087572][T17385] syzkaller0: entered allmulticast mode
[  390.253526][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'.
[  390.376657][T17399] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4973'.
[  390.465233][T17401] netlink: 'syz.0.4974': attribute type 21 has an invalid length.
[  390.468390][T17401] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4974'.
[  391.420762][T17421] netlink: 'syz.0.4983': attribute type 10 has an invalid length.
[  391.437644][T17421] .`: (slave netdevsim0): Releasing backup interface
[  391.452319][T17421] batman_adv: batadv0: Adding interface: netdevsim0
[  391.454865][T17421] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.467989][T17421] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  391.546614][T17426] syzkaller0: entered promiscuous mode
[  391.548694][T17426] syzkaller0: entered allmulticast mode
[  391.911589][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4992'.
[  395.178482][T17484] delete_channel: no stack
[  395.594752][T17520] sctp: [Deprecated]: syz.3.5028 (pid 17520) Use of int in max_burst socket option deprecated.
[  395.594752][T17520] Use struct sctp_assoc_value instead
[  395.634803][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5029'.
[  395.638325][T17522] netlink: 356 bytes leftover after parsing attributes in process `syz.0.5029'.
[  395.871094][T17536] syzkaller0: entered promiscuous mode
[  395.873290][T17536] syzkaller0: entered allmulticast mode
[  396.616170][T17557] netlink: 'syz.2.5044': attribute type 1 has an invalid length.
[  396.621477][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5044'.
[  398.447664][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.555564][T17589] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5058'.
[  398.588842][T17593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5060'.
[  399.340904][T17632] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5078'.
[  399.346819][T17632] netlink: zone id is out of range
[  399.350478][T17632] netlink: zone id is out of range
[  399.353557][T17632] netlink: zone id is out of range
[  399.356235][T17632] netlink: zone id is out of range
[  399.365872][T17632] netlink: zone id is out of range
[  399.368492][T17632] netlink: zone id is out of range
[  399.374704][T17632] netlink: zone id is out of range
[  399.376852][T17632] netlink: zone id is out of range
[  399.381499][T17632] netlink: zone id is out of range
[  399.383758][T17632] netlink: zone id is out of range
[  400.652779][T17669] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5095'.
[  401.866576][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5111'.
[  401.920108][T17706] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5112'.
[  401.924268][T17706] netlink: 6200 bytes leftover after parsing attributes in process `syz.0.5112'.
[  401.928370][T17706] netlink: 126 bytes leftover after parsing attributes in process `syz.0.5112'.
[  401.934760][T17706] tc_dump_action: action bad kind
[  402.098747][T17721] netlink: 'syz.3.5119': attribute type 1 has an invalid length.
[  402.121062][T17721] netlink: 'syz.3.5119': attribute type 3 has an invalid length.
[  402.168465][T17728] syz.3.5119: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  402.168674][T17728] CPU: 0 UID: 0 PID: 17728 Comm: syz.3.5119 Not tainted syzkaller #0 PREEMPT(full) 
[  402.168686][T17728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  402.168692][T17728] Call Trace:
[  402.168697][T17728]  <TASK>
[  402.168702][T17728]  dump_stack_lvl+0x189/0x250
[  402.168723][T17728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.168735][T17728]  ? __pfx__printk+0x10/0x10
[  402.168751][T17728]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.168764][T17728]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.168778][T17728]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  402.168793][T17728]  warn_alloc+0x214/0x310
[  402.168811][T17728]  ? stack_depot_save_flags+0x40/0x860
[  402.168827][T17728]  ? __pfx_warn_alloc+0x10/0x10
[  402.168845][T17728]  ? kasan_save_track+0x4f/0x80
[  402.168859][T17728]  ? xskq_create+0x56/0x170
[  402.168872][T17728]  ? xsk_init_queue+0xb0/0x110
[  402.168882][T17728]  ? xsk_setsockopt+0x57b/0x8d0
[  402.168892][T17728]  ? do_sock_setsockopt+0x17c/0x1b0
[  402.168901][T17728]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  402.168909][T17728]  ? do_syscall_64+0xfa/0x3b0
[  402.168953][T17728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.168972][T17728]  __vmalloc_node_range_noprof+0x125/0x12f0
[  402.169030][T17728]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  402.169052][T17728]  ? __kasan_kmalloc+0x93/0xb0
[  402.169068][T17728]  vmalloc_user_noprof+0xad/0xf0
[  402.169082][T17728]  ? xskq_create+0xbf/0x170
[  402.169097][T17728]  xskq_create+0xbf/0x170
[  402.169115][T17728]  xsk_init_queue+0xb0/0x110
[  402.169132][T17728]  xsk_setsockopt+0x57b/0x8d0
[  402.169147][T17728]  ? __pfx_xsk_setsockopt+0x10/0x10
[  402.169160][T17728]  ? __pfx_aa_sk_perm+0x10/0x10
[  402.169179][T17728]  ? __fget_files+0x2a/0x420
[  402.169187][T17728]  ? aa_sock_opt_perm+0xff/0x1b0
[  402.169200][T17728]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  402.169212][T17728]  ? __pfx_xsk_setsockopt+0x10/0x10
[  402.169225][T17728]  do_sock_setsockopt+0x17c/0x1b0
[  402.169239][T17728]  __x64_sys_setsockopt+0x13f/0x1b0
[  402.169253][T17728]  do_syscall_64+0xfa/0x3b0
[  402.169266][T17728]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.169280][T17728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.169289][T17728]  ? exc_page_fault+0x9f/0xf0
[  402.169304][T17728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.169313][T17728] RIP: 0033:0x7f7ea498ebe9
[  402.169323][T17728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.169332][T17728] RSP: 002b:00007f7ea5770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  402.169343][T17728] RAX: ffffffffffffffda RBX: 00007f7ea4bc6090 RCX: 00007f7ea498ebe9
[  402.169350][T17728] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  402.169356][T17728] RBP: 00007f7ea4a11e19 R08: 0000000000000004 R09: 0000000000000000
[  402.169363][T17728] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  402.169369][T17728] R13: 00007f7ea4bc6128 R14: 00007f7ea4bc6090 R15: 00007ffe1175e658
[  402.169389][T17728]  </TASK>
[  402.170827][T17728] Mem-Info:
[  402.170836][T17728] active_anon:16920 inactive_anon:0 isolated_anon:0
[  402.170836][T17728]  active_file:15649 inactive_file:38364 isolated_file:0
[  402.170836][T17728]  unevictable:1768 dirty:150 writeback:0
[  402.170836][T17728]  slab_reclaimable:5077 slab_unreclaimable:81126
[  402.170836][T17728]  mapped:18085 shmem:2444 pagetables:966
[  402.170836][T17728]  sec_pagetables:0 bounce:0
[  402.170836][T17728]  kernel_misc_reclaimable:0
[  402.170836][T17728]  free:251843 free_pcp:15701 free_cma:0
[  402.170868][T17728] Node 0 active_anon:58056kB inactive_anon:0kB active_file:20448kB inactive_file:14792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36712kB dirty:388kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5928kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  402.170899][T17728] Node 1 active_anon:9624kB inactive_anon:0kB active_file:42148kB inactive_file:138664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35628kB dirty:212kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4812kB pagetables:1764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  402.170961][T17728] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  402.170999][T17728] lowmem_reserve[]: 0 811 811 811 811
[  402.171026][T17728] Node 0 DMA32 free:244260kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58056kB inactive_anon:0kB active_file:20448kB inactive_file:14792kB unevictable:3536kB writepending:388kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:28664kB local_pcp:9812kB free_cma:0kB
[  402.171059][T17728] lowmem_reserve[]: 0 0 0 0 0
[  402.171085][T17728] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  402.171117][T17728] lowmem_reserve[]: 0 0 854 854 854
[  402.171144][T17728] Node 1 Normal free:289136kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9624kB inactive_anon:0kB active_file:42148kB inactive_file:138664kB unevictable:3536kB writepending:212kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34140kB local_pcp:15828kB free_cma:0kB
[  402.171178][T17728] lowmem_reserve[]: 0 0 0 0 0
[  402.171204][T17728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  402.171303][T17728] Node 0 DMA32: 558*4kB (UME) 278*8kB (UE) 476*16kB (UME) 398*32kB (UME) 400*64kB (UME) 224*128kB (UME) 67*256kB (UME) 31*512kB (UME) 65*1024kB (UME) 22*2048kB (UME) 5*4096kB (UM) = 244200kB
[  402.171410][T17728] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  402.171515][T17728] Node 1 Normal: 674*4kB (UME) 49*8kB (UM) 543*16kB (UME) 597*32kB (UME) 473*64kB (UME) 273*128kB (UM) 66*256kB (UME) 32*512kB (UM) 12*1024kB (UM) 16*2048kB (UM) 28*4096kB (UM) = 289120kB
[  402.171626][T17728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  402.171636][T17728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  402.171644][T17728] 56457 total pagecache pages
[  402.171650][T17728] 0 pages in swap cache
[  402.171654][T17728] Free swap  = 124996kB
[  402.171659][T17728] Total swap = 124996kB
[  402.171664][T17728] 786301 pages RAM
[  402.171669][T17728] 0 pages HighMem/MovableOnly
[  402.171673][T17728] 241330 pages reserved
[  402.171678][T17728] 0 pages cma reserved
[  402.344381][T17732] lo speed is unknown, defaulting to 1000
[  403.128481][T17721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5119'.
[  403.273725][T17752] netlink: 'syz.2.5131': attribute type 9 has an invalid length.
[  403.276597][T17752] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5131'.
[  403.758958][T17781] netlink: 'syz.0.5144': attribute type 12 has an invalid length.
[  403.765174][T17781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5144'.
[  404.245038][T17839] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5168'.
[  404.857185][T17849] netlink: 'syz.3.5175': attribute type 10 has an invalid length.
[  404.949416][T17849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5175'.
[  404.953757][T17849] batadv0: entered promiscuous mode
[  404.986634][T17849] bridge0: port 4(batadv0) entered blocking state
[  405.007799][T17849] bridge0: port 4(batadv0) entered disabled state
[  405.014816][T17849] batadv0: entered allmulticast mode
[  405.076290][T17849] bridge0: port 4(batadv0) entered blocking state
[  405.081080][T17849] bridge0: port 4(batadv0) entered forwarding state
[  405.419407][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  405.423455][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  406.336177][T17914] net_ratelimit: 77 callbacks suppressed
[  406.336191][T17914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.495090][T17922] netlink: 'syz.0.5208': attribute type 1 has an invalid length.
[  406.498104][T17922] __nla_validate_parse: 2 callbacks suppressed
[  406.498113][T17922] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5208'.
[  406.721926][T17934] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5213'.
[  406.752924][T17934] C: entered allmulticast mode
[  407.485360][T17972] netlink: 'syz.0.5230': attribute type 2 has an invalid length.
[  407.488043][T17972] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5230'.
[  407.561245][T17980] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5234'.
[  407.582382][T17977] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.5233'.
[  408.398427][T18015] syzkaller0: entered promiscuous mode
[  408.402886][T18015] syzkaller0: entered allmulticast mode
[  408.792647][T18030] netlink: 'syz.2.5256': attribute type 10 has an invalid length.
[  408.796106][T18030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5256'.
[  409.663284][T18024] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5253'.
[  409.768348][ T5236] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  410.059711][T18048] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5264'.
[  410.082625][T18054] netlink: 'syz.3.5266': attribute type 2 has an invalid length.
[  410.086592][T18054] netlink: 'syz.3.5266': attribute type 1 has an invalid length.
[  410.092655][T18054] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5266'.
[  410.097641][T18054] nbd: illegal input index 65540
[  411.011171][T18063] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5271'.
[  411.039125][T18068] netlink: 'syz.2.5273': attribute type 10 has an invalid length.
[  411.079710][T18068] wlan1: mtu less than device minimum
[  411.081595][T18068] team0: Device wlan1 failed to change mtu
[  411.088109][T18068] .`: (slave team0): Error -22 calling dev_set_mtu
[  411.148913][T18068] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  411.184036][T18068] can: request_module (can-proto-0) failed.
[  411.288412][T18068] syz.2.5273 (18068) used greatest stack depth: 17408 bytes left
[  411.415275][T18098] openvswitch: netlink: IP tunnel TTL not specified.
[  411.807995][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5291'.
[  411.825503][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5291'.
[  412.175965][T18130] nftables ruleset with unbound set
[  412.304121][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'.
[  413.308825][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'.
[  413.843108][T18193] sit0: left promiscuous mode
[  414.102913][T18198] sit0: entered promiscuous mode
[  414.249816][T18212] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.5335'.
[  414.254569][T18212] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5335'.
[  414.266564][T18214] netlink: 'syz.0.5336': attribute type 2 has an invalid length.
[  414.275595][T18214] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5336'.
[  414.878846][T18242] netlink: 'syz.2.5345': attribute type 10 has an invalid length.
[  415.157041][T18242] team0 (unregistering): Port device C removed
[  415.181712][T18242] team0 (unregistering): Port device team_slave_1 removed
[  415.198822][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5353'.
[  415.202146][T18254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5353'.
[  415.202588][T18242] team0 (unregistering): Port device geneve1 removed
[  415.218524][T18242] team0 (unregistering): Port device wlan1 removed
[  415.351276][T18265] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5358'.
[  416.775541][T18358] netlink: 'syz.2.5402': attribute type 6 has an invalid length.
[  416.921625][T18370] netlink: 'syz.3.5408': attribute type 1 has an invalid length.
[  416.924471][T18370] netlink: 'syz.3.5408': attribute type 2 has an invalid length.
[  416.927036][T18370] __nla_validate_parse: 8 callbacks suppressed
[  416.927042][T18370] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.5408'.
[  417.285409][T18404] netlink: 'syz.0.5422': attribute type 4 has an invalid length.
[  417.287904][T18404] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5422'.
[  417.301181][T18404] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  418.144536][T18438] netlink: 'syz.0.5436': attribute type 23 has an invalid length.
[  418.422484][T18455] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5443'.
[  418.474378][T18460] netlink: 'syz.0.5445': attribute type 1 has an invalid length.
[  418.515759][T18462] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5446'.
[  418.547019][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5447'.
[  418.555424][T18464] : entered promiscuous mode
[  418.818591][T18484] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5457'.
[  419.408516][T18503] sctp: [Deprecated]: syz.3.5465 (pid 18503) Use of int in maxseg socket option.
[  419.408516][T18503] Use struct sctp_assoc_value instead
[  419.927087][T18517] netlink: 277 bytes leftover after parsing attributes in process `syz.0.5471'.
[  420.030015][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5472'.
[  420.178787][T18527] netlink: 'syz.2.5476': attribute type 3 has an invalid length.
[  420.182977][T18527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5476'.
[  420.376393][T18549] netlink: 9292 bytes leftover after parsing attributes in process `syz.3.5487'.
[  420.944646][ T5236] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  421.392384][T18590] batadv0: left allmulticast mode
[  421.395443][T18590] bridge0: port 4(batadv0) entered disabled state
[  421.414385][T18590] bridge0: port 3(dummy0) entered disabled state
[  421.433578][T18590] bridge_slave_1: left allmulticast mode
[  421.435974][T18590] bridge_slave_1: left promiscuous mode
[  421.439097][T18590] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.456462][T18590] bridge_slave_0: left promiscuous mode
[  421.462216][T18590] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.899464][T18621] : entered promiscuous mode
[  422.022243][T18627] syzkaller0: entered promiscuous mode
[  422.024526][T18627] syzkaller0: entered allmulticast mode
[  423.323857][T18674] __nla_validate_parse: 6 callbacks suppressed
[  423.323869][T18674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5543'.
[  423.507816][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5553'.
[  423.547008][T18698] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  423.615799][T18706] netlink: 'syz.2.5558': attribute type 21 has an invalid length.
[  423.620233][T18706] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5558'.
[  423.842983][T18716] syzkaller0: entered promiscuous mode
[  423.845575][T18716] syzkaller0: entered allmulticast mode
[  424.067639][T18719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5564'.
[  425.755974][T18785] netlink: 'syz.3.5584': attribute type 2 has an invalid length.
[  425.758653][T18785] netlink: 'syz.3.5584': attribute type 1 has an invalid length.
[  425.770034][T18785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5584'.
[  425.777193][T18785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5584'.
[  425.780193][T18779] netlink: 'syz.2.5582': attribute type 1 has an invalid length.
[  425.787806][T18785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5584'.
[  425.794279][T18785] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5584'.
[  426.087996][T18833] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  426.145485][T18835] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5596'.
[  427.118115][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5599'.
[  428.418038][T18895] __nla_validate_parse: 1 callbacks suppressed
[  428.418056][T18895] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5621'.
[  428.542435][T18905] netlink: 'syz.3.5624': attribute type 28 has an invalid length.
[  428.545778][T18905] netlink: 'syz.3.5624': attribute type 4 has an invalid length.
[  428.551853][T18905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5624'.
[  428.668189][ T5236] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  428.740871][T18920] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5633'.
[  429.460101][T18969] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5652'.
[  429.473746][T18969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5652'.
[  429.477677][T18969] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  430.179659][T18982] netlink: 'syz.0.5657': attribute type 1 has an invalid length.
[  431.552383][T19061] netlink: 'syz.0.5692': attribute type 1 has an invalid length.
[  431.561072][T19061] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5692'.
[  432.292590][T19086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5702'.
[  432.585188][T19096] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  432.590646][T19092] netlink: 'syz.0.5705': attribute type 21 has an invalid length.
[  432.815238][T19106] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5710'.
[  432.819468][T19106] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  432.965376][T19119] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5716'.
[  433.056399][T19119] netlink: 'syz.3.5716': attribute type 39 has an invalid length.
[  433.194029][T19135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5724'.
[  433.431150][T19147] netlink: 'syz.3.5730': attribute type 29 has an invalid length.
[  433.516988][T19155] __nla_validate_parse: 1 callbacks suppressed
[  433.517003][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'.
[  433.567217][T19159] syzkaller0: entered promiscuous mode
[  433.572566][T19159] syzkaller0: entered allmulticast mode
[  433.698586][T19168] delete_channel: no stack
[  433.791744][T19181] siw: device registration error -23
[  433.860259][T19193] netlink: 'syz.2.5752': attribute type 10 has an invalid length.
[  433.863679][T19193] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5752'.
[  434.404550][T19236] netlink: 'syz.0.5772': attribute type 25 has an invalid length.
[  434.407322][T19236] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.5772'.
[  434.521858][T19248] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5778'.
[  435.162836][T19276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5789'.
[  435.166782][T19276] netlink: 46 bytes leftover after parsing attributes in process `syz.3.5789'.
[  435.179589][T19276] netlink: 46 bytes leftover after parsing attributes in process `syz.3.5789'.
[  436.247884][T19293] netlink: 'syz.3.5796': attribute type 21 has an invalid length.
[  436.723538][T19301] netlink: 182 bytes leftover after parsing attributes in process `syz.2.5799'.
[  437.147840][T19318] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5806'.
[  437.603772][T19330] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5811'.
[  438.032291][T19344] netlink: zone id is out of range
[  438.034152][T19344] netlink: zone id is out of range
[  438.036227][T19344] netlink: zone id is out of range
[  438.038274][T19344] netlink: zone id is out of range
[  438.050322][T19344] netlink: zone id is out of range
[  438.053522][T19344] netlink: zone id is out of range
[  438.056042][T19344] netlink: zone id is out of range
[  438.058388][T19344] netlink: zone id is out of range
[  438.067183][T19344] netlink: zone id is out of range
[  438.070377][T19344] netlink: zone id is out of range
[  439.427316][T19396] netlink: 'syz.3.5840': attribute type 12 has an invalid length.
[  439.449353][T19396] __nla_validate_parse: 3 callbacks suppressed
[  439.449419][T19396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5840'.
[  439.902900][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  439.905630][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  440.162125][T19434] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.5856'.
[  440.626324][T19457] syz.2.5866: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  440.664455][T19457] CPU: 1 UID: 0 PID: 19457 Comm: syz.2.5866 Not tainted syzkaller #0 PREEMPT(full) 
[  440.664476][T19457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  440.664482][T19457] Call Trace:
[  440.664488][T19457]  <TASK>
[  440.664492][T19457]  dump_stack_lvl+0x189/0x250
[  440.664507][T19457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.664517][T19457]  ? __pfx__printk+0x10/0x10
[  440.664527][T19457]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  440.664536][T19457]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  440.664546][T19457]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  440.664556][T19457]  warn_alloc+0x214/0x310
[  440.664566][T19457]  ? stack_depot_save_flags+0x40/0x860
[  440.664576][T19457]  ? __pfx_warn_alloc+0x10/0x10
[  440.664587][T19457]  ? kasan_save_track+0x4f/0x80
[  440.664595][T19457]  ? xskq_create+0x56/0x170
[  440.664603][T19457]  ? xsk_init_queue+0xb0/0x110
[  440.664609][T19457]  ? xsk_setsockopt+0x57b/0x8d0
[  440.664616][T19457]  ? do_sock_setsockopt+0x17c/0x1b0
[  440.664622][T19457]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  440.664627][T19457]  ? do_syscall_64+0xfa/0x3b0
[  440.664636][T19457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.664646][T19457]  __vmalloc_node_range_noprof+0x125/0x12f0
[  440.664671][T19457]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  440.664681][T19457]  ? xskq_create+0x56/0x170
[  440.664691][T19457]  ? __kasan_kmalloc+0x93/0xb0
[  440.664702][T19457]  vmalloc_user_noprof+0xad/0xf0
[  440.664711][T19457]  ? xskq_create+0xbf/0x170
[  440.664719][T19457]  xskq_create+0xbf/0x170
[  440.664729][T19457]  xsk_init_queue+0xb0/0x110
[  440.664739][T19457]  xsk_setsockopt+0x57b/0x8d0
[  440.664754][T19457]  ? __pfx_xsk_setsockopt+0x10/0x10
[  440.664762][T19457]  ? __pfx_aa_sk_perm+0x10/0x10
[  440.664773][T19457]  ? __fget_files+0x2a/0x420
[  440.664778][T19457]  ? aa_sock_opt_perm+0xff/0x1b0
[  440.664787][T19457]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  440.664794][T19457]  ? __pfx_xsk_setsockopt+0x10/0x10
[  440.664803][T19457]  do_sock_setsockopt+0x17c/0x1b0
[  440.664813][T19457]  __x64_sys_setsockopt+0x13f/0x1b0
[  440.664823][T19457]  do_syscall_64+0xfa/0x3b0
[  440.664832][T19457]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.664841][T19457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.664847][T19457]  ? exc_page_fault+0x9f/0xf0
[  440.664856][T19457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.664863][T19457] RIP: 0033:0x7f03daf8ebe9
[  440.664870][T19457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.664876][T19457] RSP: 002b:00007f03dbd75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  440.664884][T19457] RAX: ffffffffffffffda RBX: 00007f03db1c6090 RCX: 00007f03daf8ebe9
[  440.664889][T19457] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  440.664894][T19457] RBP: 00007f03db011e19 R08: 0000000000000004 R09: 0000000000000000
[  440.664898][T19457] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  440.664902][T19457] R13: 00007f03db1c6128 R14: 00007f03db1c6090 R15: 00007ffded9dfa88
[  440.664914][T19457]  </TASK>
[  440.664917][T19457] Mem-Info:
[  440.789876][T19457] active_anon:16924 inactive_anon:0 isolated_anon:0
[  440.789876][T19457]  active_file:16031 inactive_file:38380 isolated_file:0
[  440.789876][T19457]  unevictable:1768 dirty:146 writeback:0
[  440.789876][T19457]  slab_reclaimable:5196 slab_unreclaimable:81351
[  440.789876][T19457]  mapped:18063 shmem:2454 pagetables:1203
[  440.789876][T19457]  sec_pagetables:0 bounce:0
[  440.789876][T19457]  kernel_misc_reclaimable:0
[  440.789876][T19457]  free:212034 free_pcp:26950 free_cma:0
[  440.812785][T19457] Node 0 active_anon:58208kB inactive_anon:0kB active_file:21976kB inactive_file:14828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36688kB dirty:316kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5924kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  440.830571][T19457] Node 1 active_anon:9556kB inactive_anon:0kB active_file:42148kB inactive_file:138692kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35564kB dirty:268kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4752kB pagetables:2264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  440.841523][T19457] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  440.853432][T19457] lowmem_reserve[]: 0 811 811 811 811
[  440.855357][T19457] Node 0 DMA32 free:227616kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58208kB inactive_anon:0kB active_file:21976kB inactive_file:14828kB unevictable:3536kB writepending:316kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:44440kB local_pcp:31436kB free_cma:0kB
[  440.866684][T19457] lowmem_reserve[]: 0 0 0 0 0
[  440.868466][T19457] Node 1 DMA32 free:354432kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18316kB local_pcp:1976kB free_cma:0kB
[  440.881247][T19457] lowmem_reserve[]: 0 0 854 854 854
[  440.906411][T19457] Node 1 Normal free:285392kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9556kB inactive_anon:0kB active_file:42148kB inactive_file:138692kB unevictable:3536kB writepending:268kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39872kB local_pcp:17256kB free_cma:0kB
[  440.929257][T19457] lowmem_reserve[]: 0 0 0 0 0
[  440.931365][T19457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  440.943336][T19457] Node 0 DMA32: 1502*4kB (UME) 987*8kB (UME) 578*16kB (UME) 701*32kB (UME) 356*64kB (UME) 171*128kB (UME) 77*256kB (UME) 30*512kB (UME) 61*1024kB (UME) 19*2048kB (U) 0*4096kB = 226704kB
[  440.950965][T19457] Node 1 DMA32: 134*4kB (U) 124*8kB (UM) 120*16kB (UM) 125*32kB (UM) 124*64kB (UM) 109*128kB (UM) 103*256kB (UM) 94*512kB (UM) 74*1024kB (UM) 3*2048kB (UM) 47*4096kB (M) = 378264kB
[  440.957096][T19457] Node 1 Normal: 1464*4kB (UME) 822*8kB (UME) 603*16kB (UME) 675*32kB (UME) 631*64kB (UME) 365*128kB (UME) 156*256kB (UME) 92*512kB (UM) 56*1024kB (UM) 3*2048kB (UM) 1*4096kB (U) = 285408kB
[  440.966207][T19457] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  440.969717][T19457] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  440.972790][T19457] 56865 total pagecache pages
[  440.974362][T19457] 0 pages in swap cache
[  440.975816][T19457] Free swap  = 124996kB
[  440.977219][T19457] Total swap = 124996kB
[  440.978620][T19457] 786301 pages RAM
[  440.982089][T19457] 0 pages HighMem/MovableOnly
[  440.983896][T19457] 241330 pages reserved
[  440.985451][T19457] 0 pages cma reserved
[  441.755662][T19506] netlink: 'syz.0.5886': attribute type 10 has an invalid length.
[  441.767495][T19506] veth1_vlan: entered allmulticast mode
[  441.933841][T19523] netlink: 'syz.2.5894': attribute type 1 has an invalid length.
[  441.936380][T19523] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5894'.
[  442.234990][T19560] netlink: 'syz.0.5912': attribute type 1 has an invalid length.
[  442.795606][T19584] netlink: 'syz.0.5923': attribute type 10 has an invalid length.
[  442.803007][T19584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5923'.
[  442.806282][T19584] batadv0: entered promiscuous mode
[  443.234909][T19598] netlink: 'syz.3.5929': attribute type 1 has an invalid length.
[  443.238448][T19598] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5929'.
[  443.437803][T19612] syzkaller0: entered promiscuous mode
[  443.439846][T19612] syzkaller0: entered allmulticast mode
[  443.507439][T19616] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5939'.
[  443.540204][T19616] C: entered allmulticast mode
[  443.970232][T19658] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5959'.
[  444.057504][T19668] netlink: 'syz.3.5967': attribute type 2 has an invalid length.
[  444.061454][T19668] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5967'.
[  444.314311][T19685] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.5970'.
[  444.439870][T19698] netlink: 'syz.0.5977': attribute type 2 has an invalid length.
[  444.472950][T19703] net_ratelimit: 78 callbacks suppressed
[  444.472960][T19703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.591012][T19713] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5985'.
[  444.753447][T19725] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.5990'.
[  445.044813][T19741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5995'.
[  445.117433][T19754] netlink: 'syz.0.6004': attribute type 2 has an invalid length.
[  445.120873][T19754] netlink: 'syz.0.6004': attribute type 1 has an invalid length.
[  445.123463][T19754] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6004'.
[  445.126611][T19754] nbd: illegal input index 65540
[  445.156054][T19753] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6001'.
[  445.354047][T19766] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6011'.
[  446.383607][T19790] netlink: 'syz.0.6018': attribute type 10 has an invalid length.
[  446.557288][T19790] can: request_module (can-proto-0) failed.
[  446.823761][T19793] syzkaller0: entered promiscuous mode
[  446.825995][T19793] syzkaller0: entered allmulticast mode
[  448.326600][T19822] openvswitch: netlink: IP tunnel TTL not specified.
[  449.273380][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6034'.
[  449.276246][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6034'.
[  449.340520][T19840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6038'.
[  449.449325][T19848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6043'.
[  449.742434][T19867] netlink: 'syz.0.6052': attribute type 29 has an invalid length.
[  449.746339][T19867] netlink: 'syz.0.6052': attribute type 10 has an invalid length.
[  449.823394][T19869] __nla_validate_parse: 1 callbacks suppressed
[  449.823403][T19869] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6058'.
[  450.032884][T19878] netlink: 'syz.3.6054': attribute type 1 has an invalid length.
[  450.431963][T19931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6068'.
[  450.435037][T19931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6068'.
[  450.535763][T19935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6071'.
[  450.567860][T19939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6073'.
[  450.572091][T19939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6073'.
[  450.575670][T19939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6073'.
[  450.725947][T19943] netlink: 'syz.3.6075': attribute type 10 has an invalid length.
[  450.756152][T19943] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  450.773058][T19943] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  450.777303][T19943] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  450.810229][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6077'.
[  451.028658][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6090'.
[  451.038645][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6090'.
[  451.633205][T20019] sit0: entered allmulticast mode
[  452.123460][T20034] xt_time: invalid argument - start or stop time greater than 23:59:59
[  452.141674][T20015] sit0: entered promiscuous mode
[  452.533834][T20051] netlink: 'syz.0.6124': attribute type 1 has an invalid length.
[  452.536353][T20051] netlink: 'syz.0.6124': attribute type 2 has an invalid length.
[  453.712234][T20112] netlink: 'syz.3.6146': attribute type 10 has an invalid length.
[  454.127515][T20144] netlink: 'syz.0.6164': attribute type 21 has an invalid length.
[  454.194565][T20148] netlink: 'syz.0.6165': attribute type 6 has an invalid length.
[  454.393693][T20159] netlink: 'syz.0.6170': attribute type 12 has an invalid length.
[  455.362853][T20198] sctp: [Deprecated]: syz.2.6189 (pid 20198) Use of int in maxseg socket option.
[  455.362853][T20198] Use struct sctp_assoc_value instead
[  455.675311][T20230] __nla_validate_parse: 10 callbacks suppressed
[  455.675321][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'.
[  455.757229][T20238] netlink: 9292 bytes leftover after parsing attributes in process `syz.0.6209'.
[  455.840360][T20239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6206'.
[  456.686469][T20268] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6222'.
[  456.734063][T20271] netlink: 'syz.3.6223': attribute type 2 has an invalid length.
[  456.737053][T20271] netlink: 'syz.3.6223': attribute type 8 has an invalid length.
[  456.740284][T20271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6223'.
[  457.150214][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6227'.
[  457.177344][T20299] netlink: 'syz.3.6232': attribute type 1 has an invalid length.
[  457.181293][T20299] netlink: 'syz.3.6232': attribute type 3 has an invalid length.
[  457.184418][T20299] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6232'.
[  457.294784][T20304] netlink: 'syz.3.6235': attribute type 29 has an invalid length.
[  459.074661][T20368] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6265'.
[  459.078106][T20368] batadv_slave_1: entered promiscuous mode
[  459.257815][T20370] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  459.526051][T20380] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6271'.
[  459.550625][T20380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6271'.
[  459.882042][T20410] netlink: 'syz.3.6283': attribute type 4 has an invalid length.
[  459.919731][T20412] netlink: 'syz.0.6284': attribute type 9 has an invalid length.
[  460.137764][T20428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.303507][T20448] netlink: 'syz.2.6302': attribute type 2 has an invalid length.
[  460.548952][T20475] sctp: [Deprecated]: syz.0.6311 (pid 20475) Use of int in maxseg socket option.
[  460.548952][T20475] Use struct sctp_assoc_value instead
[  460.766083][T20481] netlink: 'syz.2.6314': attribute type 28 has an invalid length.
[  460.773176][T20481] netlink: 'syz.2.6314': attribute type 4 has an invalid length.
[  460.776552][T20481] __nla_validate_parse: 6 callbacks suppressed
[  460.776565][T20481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6314'.
[  460.905178][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6322'.
[  460.908241][T20494] openvswitch: netlink: nsh attr 165 is out of range max 3
[  460.911065][T20494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.994911][T20505] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.003122][T20505] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.008407][T20505] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  461.044977][T20510] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6329'.
[  461.165233][T20521] syzkaller0: entered promiscuous mode
[  461.167808][T20521] syzkaller0: entered allmulticast mode
[  461.874124][T20543] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6344'.
[  462.088696][T20561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6356'.
[  462.096018][T20561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6356'.
[  462.182788][T20566] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6356'.
[  462.192236][T20561] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6356'.
[  462.212498][T20566] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6356'.
[  463.629799][T20616] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6379'.
[  464.138681][T20638] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.143688][T20638] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.157119][T20638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.161415][T20638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.177169][ T5236] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5
[  465.413054][T20682] validate_nla: 2 callbacks suppressed
[  465.413065][T20682] netlink: 'syz.0.6402': attribute type 12 has an invalid length.
[  466.209423][T20719] delete_channel: no stack
[  466.320665][T20732] netlink: 'syz.3.6424': attribute type 10 has an invalid length.
[  466.323660][T20732] __nla_validate_parse: 7 callbacks suppressed
[  466.323669][T20732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6424'.
[  466.541889][T20756] syzkaller0: entered promiscuous mode
[  466.543704][T20756] syzkaller0: entered allmulticast mode
[  468.341472][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'.
[  468.550890][T20813] netlink: 'syz.3.6459': attribute type 21 has an invalid length.
[  468.553694][T20813] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6459'.
[  468.660959][T20827] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6466'.
[  468.964208][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6478'.
[  468.970780][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6478'.
[  468.975258][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6478'.
[  469.196401][T20866] batadv_slave_1: entered allmulticast mode
[  470.230194][T20878] netlink: 'syz.0.6489': attribute type 9 has an invalid length.
[  470.233327][T20878] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.6489'.
[  470.330952][T20881] netlink: 'syz.2.6490': attribute type 10 has an invalid length.
[  470.987011][T20901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6498'.
[  471.101008][T20905] netlink: 'syz.2.6500': attribute type 29 has an invalid length.
[  471.138349][T20908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6501'.
[  471.158992][T20910] netlink: 'syz.3.6502': attribute type 1 has an invalid length.
[  471.384336][T20931] __nla_validate_parse: 1 callbacks suppressed
[  471.384351][T20931] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6511'.
[  471.408241][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6510'.
[  471.531636][T20944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6518'.
[  471.538638][T20946] netlink: 'syz.0.6519': attribute type 1 has an invalid length.
[  471.545213][T20944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6518'.
[  471.552126][T20944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6518'.
[  471.601925][   T33] audit: type=1107 audit(1757339805.115:4): pid=20947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  471.683824][T20958] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6525'.
[  471.698361][T20956] netlink: 'syz.0.6524': attribute type 29 has an invalid length.
[  471.859931][T20968] netlink: 'syz.0.6524': attribute type 29 has an invalid length.
[  472.233985][T21003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6546'.
[  472.786311][T21027] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.6556'.
[  472.791897][T21027] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.6556'.
[  472.799567][T21027] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.6556'.
[  473.670120][T21045] netlink: 'syz.3.6565': attribute type 21 has an invalid length.
[  474.270234][T21072] netlink: 'syz.2.6575': attribute type 10 has an invalid length.
[  474.553731][T21080] netlink: 'syz.2.6579': attribute type 10 has an invalid length.
[  475.687478][T21160] netlink: set zone limit has 4 unknown bytes
[  475.775521][T21166] netlink: 'syz.2.6618': attribute type 21 has an invalid length.
[  475.778428][T21166] netlink: 'syz.2.6618': attribute type 1 has an invalid length.
[  476.848929][T21185] veth1_macvtap: left promiscuous mode
[  477.314743][T21205] vcan0 speed is unknown, defaulting to 1000
[  477.320057][T21205] vcan0 speed is unknown, defaulting to 1000
[  477.325291][T21205] vcan0 speed is unknown, defaulting to 1000
[  477.574962][T21210] __nla_validate_parse: 4 callbacks suppressed
[  477.574973][T21210] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6635'.
[  478.099930][   T47] vcan0 speed is unknown, defaulting to 1000
[  478.102614][T21205] infiniband syz1: set active
[  478.105969][T21205] infiniband syz1: added vcan0
[  478.265819][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6642'.
[  478.289978][T21205] RDS/IB: syz1: added
[  478.292084][T21205] smc: adding ib device syz1 with port count 1
[  478.294516][T21205] smc:    ib device syz1 port 1 has pnetid 
[  478.298365][   T47] vcan0 speed is unknown, defaulting to 1000
[  478.303096][T21205] vcan0 speed is unknown, defaulting to 1000
[  478.447535][T21205] vcan0 speed is unknown, defaulting to 1000
[  478.552136][T21205] vcan0 speed is unknown, defaulting to 1000
[  479.340074][T21248] validate_nla: 5 callbacks suppressed
[  479.340084][T21248] netlink: 'syz.3.6652': attribute type 4 has an invalid length.
[  479.443533][T21256] xt_policy: neither incoming nor outgoing policy selected
[  479.467898][T21258] netlink: 'syz.2.6657': attribute type 10 has an invalid length.
[  479.481693][T21258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6657'.
[  479.775874][T21283] netlink: 'syz.2.6669': attribute type 15 has an invalid length.
[  481.642262][T21292] netlink: 'syz.2.6673': attribute type 29 has an invalid length.
[  481.646866][T21292] netlink: 'syz.2.6673': attribute type 29 has an invalid length.
[  481.651156][T21292] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6673'.
[  481.657984][T21295] tmpfs: Bad value for 'gid'
[  481.662145][T21295] tmpfs: Bad value for 'gid'
[  481.718294][T21297] netlink: 'syz.2.6675': attribute type 10 has an invalid length.
[  482.260816][T21317] tun0: tun_chr_ioctl cmd 1074025675
[  482.262867][T21317] tun0: persist enabled
[  482.265709][T21317] tun0: tun_chr_ioctl cmd 1074025675
[  482.267839][T21317] tun0: persist disabled
[  482.298488][T21331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6687'.
[  482.307706][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6687'.
[  482.504843][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6690'.
[  482.814224][T21353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6698'.
[  484.217047][T21410] netlink: 'syz.2.6724': attribute type 1 has an invalid length.
[  484.221033][T21410] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6724'.
[  484.470313][T21416] delete_channel: no stack
[  484.882201][T21440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.056900][T21460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6746'.
[  487.406201][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6749'.
[  487.847032][T21501] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6766'.
[  488.000923][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6770'.
[  488.187020][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'.
[  488.305231][T21532] netlink: 182 bytes leftover after parsing attributes in process `syz.0.6780'.
[  488.314249][T21532] netlink: 'syz.0.6780': attribute type 10 has an invalid length.
[  488.353934][T21535] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6781'.
[  488.357343][T21535] netlink: 'syz.2.6781': attribute type 1 has an invalid length.
[  488.399427][T21532] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6780'.
[  488.440534][T21532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6780'.
[  489.062465][T21570] netlink: 'syz.3.6797': attribute type 16 has an invalid length.
[  489.065143][T21570] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6797'.
[  489.351655][T21600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6811'.
[  489.362468][T21596] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  489.366316][T21596] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  489.452735][T21605] netlink: 'syz.0.6813': attribute type 2 has an invalid length.
[  489.460988][T21605] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6813'.
[  490.666335][ T5236] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23
[  491.893022][T21670] netlink: 'syz.2.6841': attribute type 27 has an invalid length.
[  492.175725][T21691] netlink: 'syz.2.6851': attribute type 1 has an invalid length.
[  492.415707][T21711] macsec0: entered promiscuous mode
[  492.418077][T21711] macsec0: entered allmulticast mode
[  492.425455][T21711] veth1_macvtap: entered allmulticast mode
[  493.711725][T21758] ==================================================================
[  493.714498][T21758] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  493.717241][T21758] Read of size 1 at addr ffff888024441530 by task syz.3.6883/21758
[  493.720760][T21758] 
[  493.721603][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.3.6883 Not tainted syzkaller #0 PREEMPT(full) 
[  493.721615][T21758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  493.721621][T21758] Call Trace:
[  493.721624][T21758]  <TASK>
[  493.721629][T21758]  dump_stack_lvl+0x189/0x250
[  493.721667][T21758]  ? __kasan_check_byte+0x12/0x40
[  493.721680][T21758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.721688][T21758]  ? lock_release+0x4b/0x3e0
[  493.721700][T21758]  ? __virt_addr_valid+0x4a5/0x5c0
[  493.721711][T21758]  print_report+0xca/0x240
[  493.721718][T21758]  ? xfrm_state_find+0x2cf2/0x5400
[  493.721726][T21758]  kasan_report+0x118/0x150
[  493.721736][T21758]  ? xfrm_state_find+0x2cf2/0x5400
[  493.721743][T21758]  xfrm_state_find+0x2cf2/0x5400
[  493.721749][T21758]  ? perf_trace_run_bpf_submit+0xee/0x170
[  493.721760][T21758]  ? xfrm_state_find+0x1da/0x5400
[  493.721766][T21758]  ? __pfx_xfrm_state_find+0x10/0x10
[  493.721772][T21758]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.721785][T21758]  ? xfrm_resolve_and_create_bundle+0x395/0x2f80
[  493.721794][T21758]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  493.721806][T21758]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  493.721813][T21758]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  493.721823][T21758]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  493.721831][T21758]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  493.721840][T21758]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  493.721854][T21758]  ? xfrm_expand_policies+0x41f/0x6a0
[  493.721864][T21758]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  493.721872][T21758]  ? ip_route_output_key_hash+0xde/0x2e0
[  493.721881][T21758]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  493.721888][T21758]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  493.721898][T21758]  xfrm_lookup_route+0x3c/0x1c0
[  493.721906][T21758]  vti6_tnl_xmit+0x5f4/0x1a70
[  493.721913][T21758]  ? skb_network_protocol+0x508/0x760
[  493.721921][T21758]  ? is_bpf_text_address+0x26/0x2b0
[  493.721931][T21758]  ? validate_xmit_xfrm+0xbf/0x1130
[  493.721941][T21758]  ? __pfx_vti6_tnl_xmit+0x10/0x10
[  493.721949][T21758]  ? __lock_acquire+0xab9/0xd20
[  493.721959][T21758]  dev_hard_start_xmit+0x2d7/0x830
[  493.721969][T21758]  __dev_queue_xmit+0x1b8d/0x3b50
[  493.721976][T21758]  ? do_syscall_64+0xfa/0x3b0
[  493.721985][T21758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.721993][T21758]  ? __dev_queue_xmit+0x27b/0x3b50
[  493.722002][T21758]  ? __pfx___dev_queue_xmit+0x10/0x10
[  493.722012][T21758]  ? rcu_is_watching+0x15/0xb0
[  493.722021][T21758]  ? pskb_expand_head+0xa40/0x1150
[  493.722036][T21758]  ? __bpf_redirect+0x56d/0xe40
[  493.722048][T21758]  __bpf_tx_skb+0x18e/0x260
[  493.722057][T21758]  bpf_clone_redirect+0x272/0x3d0
[  493.722068][T21758]  ? bpf_test_run+0x197/0x7b0
[  493.722079][T21758]  bpf_prog_6893982b85ceadf7+0x5f/0x68
[  493.722087][T21758]  ? perf_event_namespaces_output+0x390/0x5a0
[  493.722095][T21758]  ? perf_trace_preemptirq_template+0x280/0x340
[  493.722104][T21758]  ? __local_bh_enable_ip+0xce/0x1c0
[  493.722112][T21758]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  493.722123][T21758]  ? __local_bh_disable_ip+0xf1/0x190
[  493.722129][T21758]  ? __pfx___cant_migrate+0x10/0x10
[  493.722136][T21758]  ? __local_bh_enable_ip+0x12d/0x1c0
[  493.722142][T21758]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  493.722149][T21758]  ? bpf_test_timer_continue+0x136/0x350
[  493.722159][T21758]  bpf_test_run+0x318/0x7b0
[  493.722171][T21758]  ? __pfx_bpf_test_run+0x10/0x10
[  493.722184][T21758]  ? slab_build_skb+0x273/0x3e0
[  493.722193][T21758]  ? convert___skb_to_skb+0x3d/0x590
[  493.722202][T21758]  bpf_prog_test_run_skb+0xb30/0x1560
[  493.722213][T21758]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  493.722223][T21758]  bpf_prog_test_run+0x2c7/0x340
[  493.722233][T21758]  __sys_bpf+0x581/0x870
[  493.722241][T21758]  ? __pfx___sys_bpf+0x10/0x10
[  493.722252][T21758]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  493.722262][T21758]  __x64_sys_bpf+0x7c/0x90
[  493.722270][T21758]  do_syscall_64+0xfa/0x3b0
[  493.722282][T21758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.722288][T21758]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  493.722296][T21758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.722303][T21758] RIP: 0033:0x7f7ea498ebe9
[  493.722310][T21758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.722316][T21758] RSP: 002b:00007f7ea5791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  493.722324][T21758] RAX: ffffffffffffffda RBX: 00007f7ea4bc5fa0 RCX: 00007f7ea498ebe9
[  493.722329][T21758] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  493.722334][T21758] RBP: 00007f7ea4a11e19 R08: 0000000000000000 R09: 0000000000000000
[  493.722338][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.722342][T21758] R13: 00007f7ea4bc6038 R14: 00007f7ea4bc5fa0 R15: 00007ffe1175e658
[  493.722350][T21758]  </TASK>
[  493.722352][T21758] 
[  493.914769][T21758] Allocated by task 19453:
[  493.916606][T21758]  kasan_save_track+0x3e/0x80
[  493.918604][T21758]  __kasan_slab_alloc+0x6c/0x80
[  493.920589][T21758]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  493.922870][T21758]  xfrm_state_alloc+0x24/0x2f0
[  493.924901][T21758]  xfrm_add_sa+0x17d1/0x4070
[  493.926861][T21758]  xfrm_user_rcv_msg+0x7a3/0xab0
[  493.928964][T21758]  netlink_rcv_skb+0x208/0x470
[  493.931030][T21758]  xfrm_netlink_rcv+0x79/0x90
[  493.932992][T21758]  netlink_unicast+0x82f/0x9e0
[  493.934952][T21758]  netlink_sendmsg+0x805/0xb30
[  493.936654][T21758]  __sock_sendmsg+0x21c/0x270
[  493.938517][T21758]  ____sys_sendmsg+0x505/0x830
[  493.940211][T21758]  ___sys_sendmsg+0x21f/0x2a0
[  493.941892][T21758]  __x64_sys_sendmsg+0x19b/0x260
[  493.943989][T21758]  do_syscall_64+0xfa/0x3b0
[  493.945704][T21758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  493.947808][T21758] 
[  493.948740][T21758] Freed by task 10:
[  493.949986][T21758]  kasan_save_track+0x3e/0x80
[  493.951511][T21758]  kasan_save_free_info+0x46/0x50
[  493.953153][T21758]  __kasan_slab_free+0x5b/0x80
[  493.954699][T21758]  kmem_cache_free+0x18f/0x400
[  493.956344][T21758]  xfrm_state_gc_task+0x52d/0x6b0
[  493.958438][T21758]  process_scheduled_works+0xae1/0x17b0
[  493.960321][T21758]  worker_thread+0x8a0/0xda0
[  493.961779][T21758]  kthread+0x711/0x8a0
[  493.963231][T21758]  ret_from_fork+0x3fc/0x770
[  493.965071][T21758]  ret_from_fork_asm+0x1a/0x30
[  493.967015][T21758] 
[  493.967995][T21758] The buggy address belongs to the object at ffff888024441200
[  493.967995][T21758]  which belongs to the cache xfrm_state of size 928
[  493.972957][T21758] The buggy address is located 816 bytes inside of
[  493.972957][T21758]  freed 928-byte region [ffff888024441200, ffff8880244415a0)
[  493.978503][T21758] 
[  493.979528][T21758] The buggy address belongs to the physical page:
[  493.982185][T21758] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24440
[  493.985803][T21758] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  493.989194][T21758] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  493.992330][T21758] page_type: f5(slab)
[  493.994054][T21758] raw: 00fff00000000040 ffff88801d79f280 dead000000000122 0000000000000000
[  493.997576][T21758] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  494.001121][T21758] head: 00fff00000000040 ffff88801d79f280 dead000000000122 0000000000000000
[  494.004663][T21758] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  494.008253][T21758] head: 00fff00000000002 ffffea0000911001 00000000ffffffff 00000000ffffffff
[  494.011835][T21758] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  494.015383][T21758] page dumped because: kasan: bad access detected
[  494.018016][T21758] page_owner tracks the page as allocated
[  494.020369][T21758] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 14991, tgid 14990 (syz.0.3907), ts 325116256811, free_ts 270054668700
[  494.028185][T21758]  post_alloc_hook+0x240/0x2a0
[  494.030190][T21758]  get_page_from_freelist+0x21e4/0x22c0
[  494.032467][T21758]  __alloc_frozen_pages_noprof+0x181/0x370
[  494.034847][T21758]  alloc_pages_mpol+0x232/0x4a0
[  494.036860][T21758]  allocate_slab+0x8a/0x370
[  494.038754][T21758]  ___slab_alloc+0xbeb/0x1410
[  494.040814][T21758]  kmem_cache_alloc_noprof+0x283/0x3c0
[  494.043117][T21758]  xfrm_state_alloc+0x24/0x2f0
[  494.045148][T21758]  xfrm_add_sa+0x17d1/0x4070
[  494.047106][T21758]  xfrm_user_rcv_msg+0x7a3/0xab0
[  494.049210][T21758]  netlink_rcv_skb+0x208/0x470
[  494.051272][T21758]  xfrm_netlink_rcv+0x79/0x90
[  494.053277][T21758]  netlink_unicast+0x82f/0x9e0
[  494.055329][T21758]  netlink_sendmsg+0x805/0xb30
[  494.057364][T21758]  __sock_sendmsg+0x21c/0x270
[  494.059223][T21758]  ____sys_sendmsg+0x505/0x830
[  494.060736][T21758] page last free pid 12850 tgid 12849 stack trace:
[  494.062787][T21758]  __free_frozen_pages+0xbc4/0xd30
[  494.064406][T21758]  free_large_kmalloc+0x13a/0x1f0
[  494.065994][T21758]  skb_release_data+0x62d/0x7c0
[  494.067546][T21758]  sk_skb_reason_drop+0x127/0x170
[  494.069125][T21758]  ip_tunnel_xmit+0xe76/0x2390
[  494.070660][T21758]  __gre_xmit+0x19a/0x240
[  494.072031][T21758]  erspan_xmit+0xa04/0x1220
[  494.073478][T21758]  dev_hard_start_xmit+0x2d7/0x830
[  494.075092][T21758]  sch_direct_xmit+0x241/0x4b0
[  494.076623][T21758]  __dev_queue_xmit+0x1857/0x3b50
[  494.078225][T21758]  packet_sendmsg+0x3e33/0x5080
[  494.079780][T21758]  __sock_sendmsg+0x21c/0x270
[  494.081270][T21758]  ____sys_sendmsg+0x505/0x830
[  494.082788][T21758]  ___sys_sendmsg+0x21f/0x2a0
[  494.084282][T21758]  __x64_sys_sendmsg+0x19b/0x260
[  494.085864][T21758]  do_syscall_64+0xfa/0x3b0
[  494.087308][T21758] 
[  494.088108][T21758] Memory state around the buggy address:
[  494.089889][T21758]  ffff888024441400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.092459][T21758]  ffff888024441480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.094964][T21758] >ffff888024441500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  494.097508][T21758]                                      ^
[  494.099278][T21758]  ffff888024441580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  494.101846][T21758]  ffff888024441600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  494.104417][T21758] ==================================================================
[  494.107148][T21758] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  494.109515][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.3.6883 Not tainted syzkaller #0 PREEMPT(full) 
[  494.112593][T21758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  494.115901][T21758] Call Trace:
[  494.117032][T21758]  <TASK>
[  494.118036][T21758]  dump_stack_lvl+0x99/0x250
[  494.119548][T21758]  ? __asan_memcpy+0x40/0x70
[  494.121039][T21758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  494.122711][T21758]  ? __pfx__printk+0x10/0x10
[  494.124261][T21758]  vpanic+0x281/0x750
[  494.125572][T21758]  ? __pfx_vpanic+0x10/0x10
[  494.127084][T21758]  ? irqentry_exit+0x74/0x90
[  494.128960][T21758]  panic+0xb9/0xc0
[  494.130501][T21758]  ? __pfx_panic+0x10/0x10
[  494.132270][T21758]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  494.134423][T21758]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  494.136655][T21758]  ? xfrm_state_find+0x2cf2/0x5400
[  494.138506][T21758]  check_panic_on_warn+0x89/0xb0
[  494.140440][T21758]  ? xfrm_state_find+0x2cf2/0x5400
[  494.142455][T21758]  end_report+0x78/0x160
[  494.144161][T21758]  kasan_report+0x129/0x150
[  494.145968][T21758]  ? xfrm_state_find+0x2cf2/0x5400
[  494.147993][T21758]  xfrm_state_find+0x2cf2/0x5400
[  494.149984][T21758]  ? perf_trace_run_bpf_submit+0xee/0x170
[  494.152269][T21758]  ? xfrm_state_find+0x1da/0x5400
[  494.154209][T21758]  ? __pfx_xfrm_state_find+0x10/0x10
[  494.156115][T21758]  ? lockdep_hardirqs_on+0x9c/0x150
[  494.158079][T21758]  ? xfrm_resolve_and_create_bundle+0x395/0x2f80
[  494.160338][T21758]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  494.162399][T21758]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  494.164370][T21758]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  494.166461][T21758]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  494.168789][T21758]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  494.171031][T21758]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  494.173125][T21758]  ? xfrm_expand_policies+0x41f/0x6a0
[  494.175045][T21758]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  494.176793][T21758]  ? ip_route_output_key_hash+0xde/0x2e0
[  494.178829][T21758]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  494.180942][T21758]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  494.182934][T21758]  xfrm_lookup_route+0x3c/0x1c0
[  494.184696][T21758]  vti6_tnl_xmit+0x5f4/0x1a70
[  494.186215][T21758]  ? skb_network_protocol+0x508/0x760
[  494.188012][T21758]  ? is_bpf_text_address+0x26/0x2b0
[  494.189743][T21758]  ? validate_xmit_xfrm+0xbf/0x1130
[  494.191440][T21758]  ? __pfx_vti6_tnl_xmit+0x10/0x10
[  494.193097][T21758]  ? __lock_acquire+0xab9/0xd20
[  494.194693][T21758]  dev_hard_start_xmit+0x2d7/0x830
[  494.196375][T21758]  __dev_queue_xmit+0x1b8d/0x3b50
[  494.198011][T21758]  ? do_syscall_64+0xfa/0x3b0
[  494.199533][T21758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.201478][T21758]  ? __dev_queue_xmit+0x27b/0x3b50
[  494.203104][T21758]  ? __pfx___dev_queue_xmit+0x10/0x10
[  494.204856][T21758]  ? rcu_is_watching+0x15/0xb0
[  494.206393][T21758]  ? pskb_expand_head+0xa40/0x1150
[  494.208055][T21758]  ? __bpf_redirect+0x56d/0xe40
[  494.209619][T21758]  __bpf_tx_skb+0x18e/0x260
[  494.211122][T21758]  bpf_clone_redirect+0x272/0x3d0
[  494.212768][T21758]  ? bpf_test_run+0x197/0x7b0
[  494.214297][T21758]  bpf_prog_6893982b85ceadf7+0x5f/0x68
[  494.216043][T21758]  ? perf_event_namespaces_output+0x390/0x5a0
[  494.217990][T21758]  ? perf_trace_preemptirq_template+0x280/0x340
[  494.219986][T21758]  ? __local_bh_enable_ip+0xce/0x1c0
[  494.221644][T21758]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  494.223852][T21758]  ? __local_bh_disable_ip+0xf1/0x190
[  494.225570][T21758]  ? __pfx___cant_migrate+0x10/0x10
[  494.227282][T21758]  ? __local_bh_enable_ip+0x12d/0x1c0
[  494.229105][T21758]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  494.230927][T21758]  ? bpf_test_timer_continue+0x136/0x350
[  494.232757][T21758]  bpf_test_run+0x318/0x7b0
[  494.234232][T21758]  ? __pfx_bpf_test_run+0x10/0x10
[  494.235862][T21758]  ? slab_build_skb+0x273/0x3e0
[  494.237423][T21758]  ? convert___skb_to_skb+0x3d/0x590
[  494.239089][T21758]  bpf_prog_test_run_skb+0xb30/0x1560
[  494.240798][T21758]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  494.242658][T21758]  bpf_prog_test_run+0x2c7/0x340
[  494.244232][T21758]  __sys_bpf+0x581/0x870
[  494.245601][T21758]  ? __pfx___sys_bpf+0x10/0x10
[  494.247156][T21758]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  494.249270][T21758]  __x64_sys_bpf+0x7c/0x90
[  494.250744][T21758]  do_syscall_64+0xfa/0x3b0
[  494.252295][T21758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.254258][T21758]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  494.256257][T21758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  494.258191][T21758] RIP: 0033:0x7f7ea498ebe9
[  494.259662][T21758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  494.265818][T21758] RSP: 002b:00007f7ea5791038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  494.268553][T21758] RAX: ffffffffffffffda RBX: 00007f7ea4bc5fa0 RCX: 00007f7ea498ebe9
[  494.271132][T21758] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  494.274017][T21758] RBP: 00007f7ea4a11e19 R08: 0000000000000000 R09: 0000000000000000
[  494.276589][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  494.279166][T21758] R13: 00007f7ea4bc6038 R14: 00007f7ea4bc5fa0 R15: 00007ffe1175e658
[  494.281805][T21758]  </TASK>
[  494.283521][T21758] Kernel Offset: disabled
[  494.284987][T21758] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:57:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001a1e0 RDI=000000000001a1e1 RBP=00000000000003f8 RSP=ffffc900074f6330
R8 =ffff888021920237 R9 =1ffff11004324046 R10=dffffc0000000000 R11=ffffffff854efb30
R12=dffffc0000000000 R13=ffffffff99af9909 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efbac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7ea57916c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3401dff8 CR3=000000010e810000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7ea4b97498 ffffffff81b7b12a XMM03=00007f7ea4b974a8 00007f7ea4b974a0
XMM04=00007f7ea56fd100 00007f7ea4b97460 XMM05=00007f7ea4b97478 00007f7ea4b974c0
XMM06=00007f7ea4b974b8 00007f7ea4b974b0 XMM07=00007f7ea4b974a8 00007f7ea4b974a0
XMM08=9614c00a6b2950a4 0d1938b248dfa1b9 XMM09=0000000000000000 00007f7ea4a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b134191636a35d00 RBX=ffffffff819683a8 RCX=b134191636a35d00 RDX=0000000000000001
RSI=ffffffff8d9b6ac3 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38030 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3401cff8 CR3=000000011c94a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=c2dd04b315017751 581d39f08c689db4
XMM02=20b4c1776a4b4064 e5ad8aac2a19a0e5 XMM03=78457d95ee574dd5 760091fedb378101
XMM04=7f0f5e517ca8a968 726c49c0f370ba49 XMM05=21a95ee745cd1ef8 5a8d0a18c0088c02
XMM06=f68e03285716d14b 437f0f5e517ca8a9 XMM07=68726c49c0f370ba 4978457d95ee574d
XMM08=d5760091fedb3781 0120b4c1776a4b40 XMM09=0000000000000000 00007f9c17812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
