last executing test programs:

17.02827892s ago: executing program 0 (id=702):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910180000000000630a64ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)

17.023816626s ago: executing program 0 (id=704):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002200)=""/274, 0x112}, {&(0x7f0000003100)=""/4056, 0xfd8}, {&(0x7f0000000940)=""/209, 0xd1}, {&(0x7f00000006c0)=""/186, 0xba}, {&(0x7f00000000c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f0000000b00)=""/161, 0xa1}, {&(0x7f00000002c0)=""/188, 0xbc}], 0x8}, 0x10080)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f086ddeff913e613c26d42000000fbac141417e000031762079f4b4d2f87e5feca6aab845013f232050039", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, 0x0, 0x2a, 0x0, 0x0, 0x86}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, r8, 0x0)
sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0xc, @private2, 0x6, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="ce509ae5f4ac749ff93f68009281c4eed52bf0b4e0fdd20d8eff4413e443741d750c89a4ed5cda5ce89899", 0x2b}, {&(0x7f00000008c0)="f8bce5ee33159928e6e9ebc9a538ad9e0c0f7df8a29dc5b21f3ac5a3a388973b7c3b39622d906f1cc6267236d98043399142063a551416a54a7c0cbfa0a1ba6abf7fc10fe50c040b59ebdec3f5ece5e1ddf2c11090f67fe2ac9aa1a34a122223a09c83d7f115b76a0ca22c", 0x6b}, {&(0x7f0000001b80)="3bed92f74f8f8185223ece69ce89530348d7c5c0b81da03c9411daaff05aa5e28ffee7fad036c0fdbd53dfb2a80c94817411f720629bf0ea848e3c6bb7e66a2d99f5194359c2c7841834cfc48427427138fa3061e79172634448d3d1806985ea55049210217f26d4c75d3c98895d8af06e8f5b56b56df1ac006d39409687602b17d0542fb2822d0bb0a37443a8094ef2710111f1d7c13a8ccbc4011a0d680e32f02aeedc43b388272d57b709c6d3a0a9787194375f1141031ebd5d4094b3098f4af6510c7ae18fd416138c6969b7", 0xce}], 0x4, &(0x7f0000001c80)=[{0x68, 0x114, 0x8, "e7c23e5b887a51fd0a3816beaf6a1fa3ed79633895d461ee1756242890185ec5682f3e9b6c4d46f305cc6466b8fd78132b1912a27ca8bb0cf6dcb24c7ea6187bcd39bf092ac561c00b214ce3e19fc24771e8f2bf9a"}, {0x110, 0x110, 0x6, "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"}, {0xa0, 0x104, 0x2, "fb2146fa26e54d7aa4a149cdf64e04b3f2a604acc656cd4af5d36a1b95aec1c58182345cc931ed8f8a249d1890c6d38c2bf2a4a840e5c7441b6d1d0494bd23eadb9015f7592fd7e027773bcdd14e7256387713ea06bebfa1b8fd66f261c8809c8b9f668ae5096ee7d1be848b1df6f84df1fce17e33b12aefb396245ccf5bbcf899fdd9c58acd0f36d36adc83"}], 0x218}, 0x20000000)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

16.927726935s ago: executing program 2 (id=705):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

16.871717863s ago: executing program 2 (id=706):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)

16.871239223s ago: executing program 1 (id=707):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0xff00)
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x8, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

16.806935382s ago: executing program 2 (id=708):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020605000000000000000000000000080c00078008001140000000000500010006000000050005000a00000005000400000000000900020073797a320000000e11000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)

16.741657694s ago: executing program 2 (id=709):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

16.741275656s ago: executing program 1 (id=710):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = getpid()
sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}, 0x8841)

16.740933918s ago: executing program 2 (id=711):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x3040}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
close(r0)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r6)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

16.672497153s ago: executing program 1 (id=712):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.566093234s ago: executing program 1 (id=713):
socket$kcm(0x2c, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, &(0x7f0000000300)=r0, 0x4)

16.432372219s ago: executing program 1 (id=714):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000300)="020401000000ffb1000000", 0xb}], 0x1}, 0x200440c4)

16.432094371s ago: executing program 1 (id=715):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005060003007665746831496d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001000000"], 0xe8}}, 0x0)

16.060446154s ago: executing program 0 (id=716):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.981811681s ago: executing program 0 (id=717):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f"], 0x33fe0)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x12)

15.901524987s ago: executing program 0 (id=718):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp}, 0x94)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/264, 0x108}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000f00)=""/4054, 0xfd6}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000001f00)=""/229, 0xe5}, {&(0x7f0000003340)=""/4082, 0xff2}, {&(0x7f0000002000)=""/225, 0xe1}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000a40)=""/194, 0xc2}, {&(0x7f0000000240)=""/117, 0x75}], 0xb}, 0x20)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

15.832842663s ago: executing program 0 (id=719):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
close(r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2300, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x52f600, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

7.876830866s ago: executing program 2 (id=720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x0, 0x0, 0xffffffff}, {0x6}]})

1.104189883s ago: executing program 32 (id=715):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005060003007665746831496d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001000000"], 0xe8}}, 0x0)

109.910049ms ago: executing program 33 (id=719):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
close(r0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x2300, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x52f600, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0xfffc, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

0s ago: executing program 34 (id=720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x0, 0x0, 0xffffffff}, {0x6}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53995' (ED25519) to the list of known hosts.
syzkaller login: [   56.325096][ T5833] cgroup: Unknown subsys name 'net'
[   56.451221][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.455725][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.125155][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.486666][ T5857] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.512630][ T5861] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.787805][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.492099][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.495039][ T5900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.498568][ T5908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.501332][ T5908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.504198][ T5908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.506646][ T5908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.510023][ T5903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.513239][ T5903] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.517016][ T5908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.533015][ T5906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.544999][ T5908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.548225][ T5908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.561815][ T5908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.566820][ T5908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.570700][ T5907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.825363][ T5904] chnl_net:caif_netlink_parms(): no params data found
[   69.953546][ T5898] chnl_net:caif_netlink_parms(): no params data found
[   70.004053][ T5901] chnl_net:caif_netlink_parms(): no params data found
[   70.012017][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.014356][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.017017][ T5904] bridge_slave_0: entered allmulticast mode
[   70.021218][ T5904] bridge_slave_0: entered promiscuous mode
[   70.037362][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.040339][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.043050][ T5904] bridge_slave_1: entered allmulticast mode
[   70.046721][ T5904] bridge_slave_1: entered promiscuous mode
[   70.107657][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.112771][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.137599][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.142234][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.144794][ T5898] bridge_slave_0: entered allmulticast mode
[   70.148747][ T5898] bridge_slave_0: entered promiscuous mode
[   70.165400][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.168020][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.171319][ T5898] bridge_slave_1: entered allmulticast mode
[   70.174795][ T5898] bridge_slave_1: entered promiscuous mode
[   70.183144][ T5904] team0: Port device team_slave_0 added
[   70.202481][ T5904] team0: Port device team_slave_1 added
[   70.242673][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.244765][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.247181][ T5901] bridge_slave_0: entered allmulticast mode
[   70.250823][ T5901] bridge_slave_0: entered promiscuous mode
[   70.256095][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.261300][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.288865][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.291273][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.293754][ T5901] bridge_slave_1: entered allmulticast mode
[   70.297265][ T5901] bridge_slave_1: entered promiscuous mode
[   70.312779][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.315441][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.323688][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.340353][ T5898] team0: Port device team_slave_0 added
[   70.355192][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.357791][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.367941][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.378189][ T5898] team0: Port device team_slave_1 added
[   70.384373][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.408815][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.460473][ T5904] hsr_slave_0: entered promiscuous mode
[   70.463533][ T5904] hsr_slave_1: entered promiscuous mode
[   70.468145][ T5901] team0: Port device team_slave_0 added
[   70.473803][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.476396][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.485339][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.490495][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.492595][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.501390][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.506586][ T5901] team0: Port device team_slave_1 added
[   70.557959][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.560701][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.572757][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.594470][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.596754][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.605938][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.623634][ T5898] hsr_slave_0: entered promiscuous mode
[   70.626293][ T5898] hsr_slave_1: entered promiscuous mode
[   70.629132][ T5898] debugfs: 'hsr0' already exists in 'hsr'
[   70.631080][ T5898] Cannot create hsr debugfs directory
[   70.719341][ T5901] hsr_slave_0: entered promiscuous mode
[   70.722280][ T5901] hsr_slave_1: entered promiscuous mode
[   70.725132][ T5901] debugfs: 'hsr0' already exists in 'hsr'
[   70.727384][ T5901] Cannot create hsr debugfs directory
[   70.941046][ T5904] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.947623][ T5904] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.965177][ T5904] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.982236][ T5904] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.026044][ T5898] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.033806][ T5898] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.045063][ T5898] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.071131][ T5898] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.108778][ T5901] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.119698][ T5901] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.136802][ T5901] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.150240][ T5901] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.242779][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.291269][ T5904] 8021q: adding VLAN 0 to HW filter on device team0
[   71.307777][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.310776][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.320052][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.322549][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.323217][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.340084][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.342823][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.381886][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.396269][ T5898] 8021q: adding VLAN 0 to HW filter on device team0
[   71.411384][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.414323][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.425615][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.428084][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.452528][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[   71.495359][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.498207][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.531651][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.534406][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.549904][ T5907] Bluetooth: hci2: command tx timeout
[   71.631151][   T54] Bluetooth: hci1: command tx timeout
[   71.633556][ T5907] Bluetooth: hci0: command tx timeout
[   71.642109][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.709900][ T5904] veth0_vlan: entered promiscuous mode
[   71.730076][ T5904] veth1_vlan: entered promiscuous mode
[   71.766530][ T5904] veth0_macvtap: entered promiscuous mode
[   71.779617][ T5904] veth1_macvtap: entered promiscuous mode
[   71.786080][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.807335][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.824295][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.842810][ T5911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.850386][ T5911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.856604][ T5911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.863295][ T5911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.906265][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.937713][ T5898] veth0_vlan: entered promiscuous mode
[   71.991809][ T5898] veth1_vlan: entered promiscuous mode
[   72.000355][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.003426][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.059918][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.067639][ T5898] veth0_macvtap: entered promiscuous mode
[   72.070459][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.073262][ T5898] veth1_macvtap: entered promiscuous mode
[   72.111145][ T5901] veth0_vlan: entered promiscuous mode
[   72.118075][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.146776][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.167105][ T5901] veth1_vlan: entered promiscuous mode
[   72.171378][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.179863][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.183130][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.186234][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.333844][ T5901] veth0_macvtap: entered promiscuous mode
[   72.400679][ T5901] veth1_macvtap: entered promiscuous mode
[   72.400757][  T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.408501][  T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.452564][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.465772][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.493713][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.498023][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.498725][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.502466][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.507179][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.519805][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.616093][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.623367][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.674818][ T5977] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.25'.
[   72.700793][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.705040][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.172703][ T5907] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[   73.486813][ T6018] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.40'.
[   73.632748][ T6030] netlink: 'syz.0.46': attribute type 11 has an invalid length.
[   73.633067][ T5907] Bluetooth: hci2: command tx timeout
[   73.635070][ T6030] netlink: 'syz.0.46': attribute type 11 has an invalid length.
[   73.647516][ T6030] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.46'.
[   73.669349][ T6032] veth0_vlan: entered allmulticast mode
[   73.708988][ T5907] Bluetooth: hci0: command tx timeout
[   73.711664][   T54] Bluetooth: hci1: command tx timeout
[   73.751120][    C0] hrtimer: interrupt took 60502 ns
[   74.231654][ T6040] veth0_vlan: left promiscuous mode
[   74.236996][ T6040] veth0_vlan: entered promiscuous mode
[   74.606641][ T6063] warning: `syz.0.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.734617][ T6072] netlink: 'syz.2.64': attribute type 6 has an invalid length.
[   74.874252][ T6082] netlink: 'syz.2.67': attribute type 12 has an invalid length.
[   74.877242][ T6082] netlink: 172 bytes leftover after parsing attributes in process `syz.2.67'.
[   75.776365][ T5907] Bluetooth: hci2: command tx timeout
[   75.801711][ T5907] Bluetooth: hci0: command tx timeout
[   75.803904][ T5907] Bluetooth: hci1: command tx timeout
[   76.812786][ T6125] netlink: 'syz.2.88': attribute type 29 has an invalid length.
[   76.817644][ T6125] netlink: 'syz.2.88': attribute type 29 has an invalid length.
[   77.135506][ T6145] Zero length message leads to an empty skb
[   77.290961][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   77.294473][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'.
[   77.793002][   T54] Bluetooth: hci2: command tx timeout
[   77.884144][ T5907] Bluetooth: hci0: command tx timeout
[   77.886421][   T54] Bluetooth: hci1: command tx timeout
[   79.015178][ T6219] netlink: 104 bytes leftover after parsing attributes in process `syz.1.128'.
[   79.497983][ T6237] netlink: 'syz.1.134': attribute type 33 has an invalid length.
[   79.506573][ T6237] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.134'.
[   79.569848][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[   79.573621][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'.
[   79.841667][ T6257] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.144'.
[   79.889435][ T6259] netlink: 'syz.0.145': attribute type 2 has an invalid length.
[   79.891951][ T6259] netlink: 'syz.0.145': attribute type 8 has an invalid length.
[   79.894424][ T6259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.145'.
[   80.090016][ T6268] netlink: 'syz.2.146': attribute type 10 has an invalid length.
[   80.092933][ T6268] netlink: 55 bytes leftover after parsing attributes in process `syz.2.146'.
[   80.853391][ T6282] netlink: 'syz.0.152': attribute type 10 has an invalid length.
[   80.945105][ T6282] bridge0: port 3(netdevsim0) entered blocking state
[   80.949358][ T6282] bridge0: port 3(netdevsim0) entered disabled state
[   80.954220][ T6282] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   81.025051][ T6282] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   82.155068][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'.
[   82.160804][ T6310] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   82.163949][ T6310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.066440][   T54] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[   84.433500][ T6368] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.190'.
[   84.592511][ T6374] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.193'.
[   85.067500][ T6380] syz.2.195 uses obsolete (PF_INET,SOCK_PACKET)
[   85.104555][ T6380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.195'.
[   85.135149][ T6386] netlink: 'syz.0.197': attribute type 6 has an invalid length.
[   85.137585][ T6386] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.197'.
[   85.167163][ T6380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.195'.
[   85.203435][ T6393] netlink: 'syz.0.200': attribute type 2 has an invalid length.
[   85.216456][ T6393] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   85.221512][ T6393] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.200'.
[   85.224373][ T6393] block nbd5: not configured, cannot reconfigure
[   85.251150][ T6380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.195'.
[   85.441732][ T6405] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   85.444574][ T6405] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   85.655217][ T6410] xt_time: invalid argument - start or stop time greater than 23:59:59
[   86.147583][ T6426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.212'.
[   86.156404][ T6426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.212'.
[   86.162124][ T6426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.212'.
[   86.199413][   T10] cfg80211: failed to load regulatory.db
[   86.632603][ T6446] netlink: 'syz.1.222': attribute type 6 has an invalid length.
[   88.572150][ T6432] syz.0.215: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.579887][ T6432] CPU: 1 UID: 0 PID: 6432 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) 
[   88.579907][ T6432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.579916][ T6432] Call Trace:
[   88.579922][ T6432]  <TASK>
[   88.579941][ T6432]  dump_stack_lvl+0x189/0x250
[   88.579966][ T6432]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.579983][ T6432]  ? __pfx__printk+0x10/0x10
[   88.580003][ T6432]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.580020][ T6432]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.580038][ T6432]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.580056][ T6432]  warn_alloc+0x214/0x310
[   88.580083][ T6432]  ? __pfx_warn_alloc+0x10/0x10
[   88.580110][ T6432]  ? __get_vm_area_node+0x28f/0x300
[   88.580130][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580155][ T6432]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   88.580200][ T6432]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.580219][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580242][ T6432]  ? __get_vm_area_node+0x28f/0x300
[   88.580261][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580283][ T6432]  __vmalloc_node_range_noprof+0x56a/0x12f0
[   88.580302][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580343][ T6432]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.580365][ T6432]  ? rcu_is_watching+0x15/0xb0
[   88.580378][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580396][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580414][ T6432]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   88.580431][ T6432]  ? hash_netportnet_create+0x354/0xf90
[   88.580452][ T6432]  ? hash_netportnet_create+0x2fa/0xf90
[   88.580474][ T6432]  hash_netportnet_create+0x354/0xf90
[   88.580497][ T6432]  ? __nla_parse+0x40/0x60
[   88.580514][ T6432]  ? __pfx_hash_netportnet_create+0x10/0x10
[   88.580535][ T6432]  ip_set_create+0xa97/0x1940
[   88.580551][ T6432]  ? ip_set_create+0x4a2/0x1940
[   88.580573][ T6432]  ? __pfx_ip_set_create+0x10/0x10
[   88.580618][ T6432]  nfnetlink_rcv_msg+0xb4d/0x1130
[   88.580634][ T6432]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   88.580661][ T6432]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   88.580676][ T6432]  ? kasan_save_free_info+0x46/0x50
[   88.580722][ T6432]  netlink_rcv_skb+0x208/0x470
[   88.580742][ T6432]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   88.580788][ T6432]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   88.580819][ T6432]  ? bpf_lsm_capable+0x9/0x20
[   88.580836][ T6432]  ? security_capable+0x7e/0x2e0
[   88.580868][ T6432]  nfnetlink_rcv+0x26a/0x2520
[   88.580888][ T6432]  ? __dev_queue_xmit+0x1d79/0x3b50
[   88.580912][ T6432]  ? __dev_queue_xmit+0x27b/0x3b50
[   88.580936][ T6432]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   88.580952][ T6432]  ? __pfx___dev_queue_xmit+0x10/0x10
[   88.580975][ T6432]  ? ref_tracker_free+0x63a/0x7d0
[   88.580991][ T6432]  ? __asan_memcpy+0x40/0x70
[   88.581004][ T6432]  ? __pfx_ref_tracker_free+0x10/0x10
[   88.581017][ T6432]  ? __skb_clone+0x63/0x7a0
[   88.581032][ T6432]  ? __skb_clone+0x483/0x7a0
[   88.581048][ T6432]  ? skb_clone+0x246/0x3a0
[   88.581064][ T6432]  ? __netlink_deliver_tap+0x807/0x850
[   88.581081][ T6432]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.581103][ T6432]  ? netlink_deliver_tap+0x2e/0x1b0
[   88.581127][ T6432]  netlink_unicast+0x82f/0x9e0
[   88.581149][ T6432]  ? __pfx_netlink_unicast+0x10/0x10
[   88.581168][ T6432]  ? netlink_sendmsg+0x642/0xb30
[   88.581184][ T6432]  ? skb_put+0x11b/0x210
[   88.581208][ T6432]  netlink_sendmsg+0x805/0xb30
[   88.581233][ T6432]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.581255][ T6432]  ? aa_sock_msg_perm+0xf1/0x1d0
[   88.581277][ T6432]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   88.581291][ T6432]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.581310][ T6432]  __sock_sendmsg+0x21c/0x270
[   88.581330][ T6432]  ____sys_sendmsg+0x505/0x830
[   88.581349][ T6432]  ? __pfx_____sys_sendmsg+0x10/0x10
[   88.581372][ T6432]  ? import_iovec+0x74/0xa0
[   88.581391][ T6432]  ___sys_sendmsg+0x21f/0x2a0
[   88.581407][ T6432]  ? __pfx____sys_sendmsg+0x10/0x10
[   88.581451][ T6432]  ? __fget_files+0x2a/0x420
[   88.581464][ T6432]  ? __fget_files+0x3a0/0x420
[   88.581485][ T6432]  __x64_sys_sendmsg+0x19b/0x260
[   88.581502][ T6432]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   88.581523][ T6432]  ? rcu_is_watching+0x15/0xb0
[   88.581541][ T6432]  ? do_syscall_64+0xbe/0x3b0
[   88.581563][ T6432]  do_syscall_64+0xfa/0x3b0
[   88.581581][ T6432]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.581599][ T6432]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.581613][ T6432]  ? exc_page_fault+0x9f/0xf0
[   88.581632][ T6432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.581646][ T6432] RIP: 0033:0x7fd38a18ebe9
[   88.581660][ T6432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.581672][ T6432] RSP: 002b:00007fd38af80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   88.581686][ T6432] RAX: ffffffffffffffda RBX: 00007fd38a3b5fa0 RCX: 00007fd38a18ebe9
[   88.581696][ T6432] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[   88.581705][ T6432] RBP: 00007fd38a211e19 R08: 0000000000000000 R09: 0000000000000000
[   88.581714][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.581721][ T6432] R13: 00007fd38a3b6038 R14: 00007fd38a3b5fa0 R15: 00007fff7f598558
[   88.581745][ T6432]  </TASK>
[   88.581751][ T6432] Mem-Info:
[   88.794198][ T6432] active_anon:5154 inactive_anon:0 isolated_anon:0
[   88.794198][ T6432]  active_file:11401 inactive_file:38233 isolated_file:0
[   88.794198][ T6432]  unevictable:1768 dirty:175 writeback:0
[   88.794198][ T6432]  slab_reclaimable:9304 slab_unreclaimable:52515
[   88.794198][ T6432]  mapped:18069 shmem:2431 pagetables:1086
[   88.794198][ T6432]  sec_pagetables:0 bounce:0
[   88.794198][ T6432]  kernel_misc_reclaimable:0
[   88.794198][ T6432]  free:249319 free_pcp:26787 free_cma:0
[   88.811847][ T6432] Node 0 active_anon:11616kB inactive_anon:0kB active_file:20572kB inactive_file:21040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28944kB dirty:256kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5552kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.824600][ T6432] Node 1 active_anon:9000kB inactive_anon:0kB active_file:25032kB inactive_file:131892kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43332kB dirty:444kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5936kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   88.851377][ T6432] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.864767][ T6432] lowmem_reserve[]: 0 811 811 811 811
[   88.873443][ T6432] Node 0 DMA32 free:382436kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11616kB inactive_anon:0kB active_file:20572kB inactive_file:21040kB unevictable:3536kB writepending:732kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:60632kB local_pcp:16716kB free_cma:0kB
[   88.888176][ T6432] lowmem_reserve[]: 0 0 0 0 0
[   88.890393][ T6432] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   88.907450][ T6432] lowmem_reserve[]: 0 0 854 854 854
[   88.910244][ T6432] Node 1 Normal free:146336kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9000kB inactive_anon:0kB active_file:25032kB inactive_file:131892kB unevictable:3536kB writepending:444kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42392kB local_pcp:26484kB free_cma:0kB
[   88.929546][ T6432] lowmem_reserve[]: 0 0 0 0 0
[   88.931475][ T6432] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   88.936370][ T6432] Node 0 DMA32: 542*4kB (UME) 278*8kB (UME) 264*16kB (UME) 66*32kB (UME) 160*64kB (UM) 108*128kB (UME) 66*256kB (UME) 56*512kB (UM) 39*1024kB (UM) 2*2048kB (U) 63*4096kB (UM) = 382440kB
[   88.948578][ T6432] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   88.963695][ T6432] Node 1 Normal: 0*4kB 1110*8kB (ME) 143*16kB (ME) 116*32kB (UME) 68*64kB (UM) 53*128kB (M) 18*256kB (M) 4*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 26*4096kB (M) = 146336kB
[   88.971678][ T6432] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.975351][ T6432] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   88.981963][ T6432] 52065 total pagecache pages
[   88.983834][ T6432] 0 pages in swap cache
[   88.985469][ T6432] Free swap  = 124996kB
[   88.987140][ T6432] Total swap = 124996kB
[   88.989837][ T6432] 786301 pages RAM
[   88.991494][ T6432] 0 pages HighMem/MovableOnly
[   88.993513][ T6432] 241329 pages reserved
[   88.995204][ T6432] 0 pages cma reserved
[   89.511886][ T6482] __nla_validate_parse: 8 callbacks suppressed
[   89.511902][ T6482] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.239'.
[   89.826710][ T6495] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.244'.
[   90.050051][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   90.061025][ T6507] netlink: 'syz.1.247': attribute type 27 has an invalid length.
[   90.068539][ T6507] netlink: 'syz.1.247': attribute type 1 has an invalid length.
[   90.072998][ T6507] bridge0: port 1(bridge_slave_0) entered learning state
[   90.178061][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.181837][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.207131][ T6516] bridge0: entered allmulticast mode
[   90.266264][ T6516] bridge_slave_1: left allmulticast mode
[   90.276810][ T6516] bridge_slave_1: left promiscuous mode
[   90.285485][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.300597][ T6516] bridge_slave_0: left allmulticast mode
[   90.303026][ T6516] bridge_slave_0: left promiscuous mode
[   90.306329][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.538211][ T6543] netlink: 'syz.1.253': attribute type 1 has an invalid length.
[   90.825288][ T6583] netlink: 188 bytes leftover after parsing attributes in process `syz.1.256'.
[   91.235381][ T6600] netlink: 830 bytes leftover after parsing attributes in process `syz.2.262'.
[   91.953471][ T6620] delete_channel: no stack
[   91.958994][ T6620] delete_channel: no stack
[   92.041860][ T6620] netlink: 'syz.1.272': attribute type 6 has an invalid length.
[   92.045340][ T6620] netlink: 164 bytes leftover after parsing attributes in process `syz.1.272'.
[   93.776985][ T6679] netlink: 'syz.1.298': attribute type 10 has an invalid length.
[   93.810958][ T6679] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   94.100985][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   94.300447][ T6687] netlink: del zone limit has 4 unknown bytes
[   94.306795][ T6683] netlink: zone id is out of range
[   94.543974][ T6695] netlink: 830 bytes leftover after parsing attributes in process `syz.1.305'.
[   94.601878][ T6695] bond_slave_0: entered promiscuous mode
[   94.604695][ T6695] bond_slave_1: entered promiscuous mode
[   94.610386][ T6699] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.305'.
[   94.755738][ T6683] netlink: set zone limit has 4 unknown bytes
[   96.019528][ T6765] netlink: 'syz.2.336': attribute type 13 has an invalid length.
[   96.312991][ T6777] netlink: 'syz.2.341': attribute type 1 has an invalid length.
[   96.315588][ T6777] netlink: 'syz.2.341': attribute type 4 has an invalid length.
[   96.320664][ T6777] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.341'.
[   96.452435][ T6783] netlink: 'syz.2.344': attribute type 12 has an invalid length.
[   96.455897][ T6783] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.344'.
[   97.046972][ T6804] netlink: 'syz.2.354': attribute type 2 has an invalid length.
[   97.051087][ T6804] netlink: 'syz.2.354': attribute type 3 has an invalid length.
[   97.054888][ T6804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.354'.
[   97.075300][ T6810] netlink: 948 bytes leftover after parsing attributes in process `syz.0.357'.
[   97.170754][ T6812] netlink: 'syz.2.354': attribute type 2 has an invalid length.
[   97.173056][ T6812] netlink: 'syz.2.354': attribute type 8 has an invalid length.
[   97.194292][ T6812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.354'.
[  100.786785][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.397'.
[  100.856572][ T6909] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[  101.150861][ T6916] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.403'.
[  101.545503][ T6938] Illegal XDP return value 4294967274 on prog  (id 136) dev N/A, expect packet loss!
[  102.926686][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'.
[  103.001064][   T54] Bluetooth: hci1: Malformed LE Event: 0x02
[  103.020638][ T6998] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.440'.
[  104.073606][ T7010] netlink: 10 bytes leftover after parsing attributes in process `syz.1.446'.
[  104.220633][ T7017] netlink: 'syz.2.448': attribute type 19 has an invalid length.
[  105.064900][ T7051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.465'.
[  105.125086][ T7057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.165687][ T7115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.475714][ T7158] netlink: 56 bytes leftover after parsing attributes in process `syz.2.509'.
[  108.712064][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'.
[  108.715592][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'.
[  108.719437][ T7177] netlink: 2 bytes leftover after parsing attributes in process `syz.2.518'.
[  109.099645][ T7194] ksmbd: Unknown IPC event: 1, ignore.
[  109.218766][ T7198] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.527'.
[  109.735322][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'.
[  109.748689][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'.
[  109.779428][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'.
[  109.782609][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'.
[  109.825199][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.533'.
[  109.830448][ T7219] syzkaller0: create flow: hash 3266435553 index 1
[  109.879422][   T13] syzkaller0: tun_net_xmit 76
[  109.882127][   T13] syzkaller0: tun_net_xmit 48
[  109.902298][ T7215] syzkaller0: delete flow: hash 3266435553 index 1
[  111.362569][ T7256] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[  112.097959][ T7285] netlink: 'syz.0.565': attribute type 10 has an invalid length.
[  112.100963][ T7285] batadv0: entered promiscuous mode
[  112.102973][ T7285] batadv0: entered allmulticast mode
[  112.105705][ T7285] bridge0: port 4(batadv0) entered blocking state
[  112.108890][ T7285] bridge0: port 4(batadv0) entered disabled state
[  112.115731][ T7285] bridge0: port 4(batadv0) entered blocking state
[  112.118379][ T7285] bridge0: port 4(batadv0) entered forwarding state
[  112.121716][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  112.124943][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  112.565264][ T7305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  112.571897][ T7305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.717037][ T7333] __nla_validate_parse: 6 callbacks suppressed
[  113.717053][ T7333] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.582'.
[  115.217308][ T7444] netlink: 'syz.0.636': attribute type 10 has an invalid length.
[  115.297674][ T7444] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  115.396955][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.638'.
[  115.776919][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'.
[  116.011801][ T7459] netlink: 'syz.1.643': attribute type 6 has an invalid length.
[  116.015109][ T7459] netlink: 168 bytes leftover after parsing attributes in process `syz.1.643'.
[  118.946024][ T7476] netlink: 10 bytes leftover after parsing attributes in process `syz.1.648'.
[  119.014667][ T7485] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.652'.
[  119.079429][ T7488] syzkaller0: entered promiscuous mode
[  119.081780][ T7488] syzkaller0: entered allmulticast mode
[  119.147373][ T7494] netlink: 'syz.0.657': attribute type 10 has an invalid length.
[  119.194139][ T7494] team0: Device ipvlan1 failed to register rx_handler
[  119.319899][ T7494] netlink: 'syz.0.657': attribute type 29 has an invalid length.
[  119.322663][ T7494] netlink: 'syz.0.657': attribute type 3 has an invalid length.
[  119.325119][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.657'.
[  119.427566][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.431701][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.435886][ T7509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'.
[  119.729869][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.2.672'.
[  120.697611][ T7550] netlink: 188 bytes leftover after parsing attributes in process `syz.2.681'.
[  120.901758][ T7559] netlink: 'syz.2.681': attribute type 10 has an invalid length.
[  120.921917][ T7559] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  122.352679][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1614360517 wd_nsec: 1614360568
[  123.022126][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.704'.
[  123.026158][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.704'.
[  123.143806][ T7607] netlink: 'syz.0.704': attribute type 21 has an invalid length.
[  123.149143][ T7607] netlink: 'syz.0.704': attribute type 4 has an invalid length.
[  123.151902][ T7607] netlink: 'syz.0.704': attribute type 5 has an invalid length.
[  124.104356][ T7636] netlink: 'syz.0.718': attribute type 29 has an invalid length.
[  124.110294][ T7636] netlink: 'syz.0.718': attribute type 29 has an invalid length.
[  124.115105][ T7636] netlink: 'syz.0.718': attribute type 29 has an invalid length.
[  132.166659][   T10] sched: DL replenish lagged too much
[  133.505745][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  133.510416][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  139.172518][ T5907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  139.176043][ T5907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  139.181306][ T5907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  139.185232][ T5907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  139.188734][ T5907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  140.316060][ T5907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.324428][ T5907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.327630][ T5907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.338577][ T5907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.342914][ T5907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  140.451131][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  140.454952][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  140.457948][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  140.461830][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  140.464956][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  141.228623][ T5907] Bluetooth: hci3: command tx timeout
[  142.090884][ T7651] chnl_net:caif_netlink_parms(): no params data found
[  142.433277][ T5907] Bluetooth: hci4: command tx timeout
[  142.555558][ T5907] Bluetooth: hci5: command tx timeout
[  143.318446][ T5907] Bluetooth: hci3: command tx timeout
[  144.526816][ T5907] Bluetooth: hci4: command tx timeout
[  144.624061][ T7642] chnl_net:caif_netlink_parms(): no params data found
[  144.644580][ T5907] Bluetooth: hci5: command tx timeout
[  145.388401][ T5907] Bluetooth: hci3: command tx timeout
[  146.588557][ T5907] Bluetooth: hci4: command tx timeout
[  146.678554][ T5907] Bluetooth: hci5: command tx timeout
[  146.933303][ T7649] chnl_net:caif_netlink_parms(): no params data found
[  147.125206][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.128140][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.134462][ T7651] bridge_slave_0: entered allmulticast mode
[  147.138419][ T7651] bridge_slave_0: entered promiscuous mode
[  147.187799][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.190631][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.193459][ T7651] bridge_slave_1: entered allmulticast mode
[  147.197213][ T7651] bridge_slave_1: entered promiscuous mode
[  147.256535][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.259317][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.261797][ T7642] bridge_slave_0: entered allmulticast mode
[  147.264882][ T7642] bridge_slave_0: entered promiscuous mode
[  147.272227][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.274780][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.277051][ T7642] bridge_slave_1: entered allmulticast mode
[  147.280878][ T7642] bridge_slave_1: entered promiscuous mode
[  147.298771][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.311877][ T7651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.374895][ T7651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.404520][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.407029][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.409960][ T7649] bridge_slave_0: entered allmulticast mode
[  147.412900][ T7649] bridge_slave_0: entered promiscuous mode
[  147.420126][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.431986][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.442693][ T7651] team0: Port device team_slave_0 added
[  147.445447][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.448033][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.450826][ T7649] bridge_slave_1: entered allmulticast mode
[  147.454226][ T7649] bridge_slave_1: entered promiscuous mode
[  147.459017][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.464197][ T7651] team0: Port device team_slave_1 added
[  147.475749][ T5907] Bluetooth: hci3: command tx timeout
[  147.527004][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.557785][ T7642] team0: Port device team_slave_0 added
[  147.563278][ T7642] team0: Port device team_slave_1 added
[  147.581205][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.584119][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.595814][ T7651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.605791][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.616886][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.631522][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.653713][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.656389][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.666641][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.672100][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.674775][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.685222][ T7651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.711213][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.713910][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.724173][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.803015][ T7651] hsr_slave_0: entered promiscuous mode
[  147.806321][ T7651] hsr_slave_1: entered promiscuous mode
[  147.809933][ T7651] debugfs: 'hsr0' already exists in 'hsr'
[  147.812280][ T7651] Cannot create hsr debugfs directory
[  147.816168][ T7649] team0: Port device team_slave_0 added
[  147.849310][ T7649] team0: Port device team_slave_1 added
[  147.856752][ T7642] hsr_slave_0: entered promiscuous mode
[  147.860967][ T7642] hsr_slave_1: entered promiscuous mode
[  147.863771][ T7642] debugfs: 'hsr0' already exists in 'hsr'
[  147.866035][ T7642] Cannot create hsr debugfs directory
[  147.924846][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.927110][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.936697][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.942408][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.944532][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.956120][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.023574][   T12] bond_slave_0: left promiscuous mode
[  148.025782][   T12] bond_slave_1: left promiscuous mode
[  148.283896][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.291355][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.296377][   T12] bond0 (unregistering): Released all slaves
[  148.414000][ T7649] hsr_slave_0: entered promiscuous mode
[  148.416911][ T7649] hsr_slave_1: entered promiscuous mode
[  148.423617][ T7649] debugfs: 'hsr0' already exists in 'hsr'
[  148.425776][ T7649] Cannot create hsr debugfs directory
[  148.664560][   T12] hsr_slave_0: left promiscuous mode
[  148.667474][   T12] hsr_slave_1: left promiscuous mode
[  148.669893][ T5907] Bluetooth: hci4: command tx timeout
[  148.673628][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.676598][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.684150][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.687124][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.704406][   T12] veth1_macvtap: left promiscuous mode
[  148.706919][   T12] veth0_macvtap: left promiscuous mode
[  148.709532][   T12] veth1_vlan: left promiscuous mode
[  148.711766][   T12] veth0_vlan: left promiscuous mode
[  148.750886][ T5907] Bluetooth: hci5: command tx timeout
[  149.092229][   T12] team0 (unregistering): Port device team_slave_1 removed
[  149.122879][   T12] team0 (unregistering): Port device team_slave_0 removed
[  149.582649][ T7651] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  149.593700][ T7651] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  149.625495][ T7651] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  149.642933][ T7651] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  149.686226][ T7649] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  149.701109][ T7649] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  149.707784][ T7649] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  149.723834][ T7649] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  149.825242][ T7642] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  149.832213][ T7642] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  149.847788][ T7642] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  149.855133][ T7642] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  149.885148][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.949741][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.985332][ T7651] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.015575][ T7649] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.034275][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.051767][ T7651] 8021q: adding VLAN 0 to HW filter on device team0
[  150.065853][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.068923][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.082076][ T7649] 8021q: adding VLAN 0 to HW filter on device team0
[  150.109040][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  150.112318][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  150.115498][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  150.123933][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.133498][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.136362][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.152515][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.155281][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.181006][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.184130][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.216852][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.315731][ T7642] 8021q: adding VLAN 0 to HW filter on device team0
[  150.371432][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.374164][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.395066][   T12] bridge0: port 4(batadv0) entered disabled state
[  150.404092][   T12] bridge_slave_1: left allmulticast mode
[  150.406266][   T12] bridge_slave_1: left promiscuous mode
[  150.409855][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.415844][   T12] bridge_slave_0: left allmulticast mode
[  150.418075][   T12] bridge_slave_0: left promiscuous mode
[  150.422343][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.762396][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.767973][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.773000][   T12] bond0 (unregistering): Released all slaves
[  150.787706][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.790706][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.958147][ T7651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.066982][ T7649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.147543][   T12] hsr_slave_0: left promiscuous mode
[  151.151116][   T12] hsr_slave_1: left promiscuous mode
[  151.153180][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.155729][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.159459][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.161903][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.178920][   T12] veth1_macvtap: left promiscuous mode
[  151.181122][   T12] veth0_macvtap: left promiscuous mode
[  151.182841][   T12] veth1_vlan: left promiscuous mode
[  151.184459][   T12] veth0_vlan: left promiscuous mode
[  151.532209][   T12] team0 (unregistering): Port device team_slave_1 removed
[  151.556371][   T12] team0 (unregistering): Port device team_slave_0 removed
[  151.983477][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.083545][ T7651] veth0_vlan: entered promiscuous mode
[  152.102687][ T7642] veth0_vlan: entered promiscuous mode
[  152.109608][ T7642] veth1_vlan: entered promiscuous mode
[  152.117047][ T7651] veth1_vlan: entered promiscuous mode
[  152.161302][ T7649] veth0_vlan: entered promiscuous mode
[  152.166530][ T7642] veth0_macvtap: entered promiscuous mode
[  152.177749][ T7642] veth1_macvtap: entered promiscuous mode
[  152.190511][ T7651] veth0_macvtap: entered promiscuous mode
[  152.195504][ T7651] veth1_macvtap: entered promiscuous mode
[  152.209884][ T7649] veth1_vlan: entered promiscuous mode
[  152.214500][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.232913][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.254066][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.260969][ T5911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.263744][ T5911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.266529][ T5911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.284192][ T7649] veth0_macvtap: entered promiscuous mode
[  152.293588][   T12] ------------[ cut here ]------------
[  152.295663][   T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  152.299403][   T12] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  152.301286][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  152.306006][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.310428][   T12] Workqueue: netns cleanup_net
[  152.312352][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  152.314585][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 fa e1 f7 e8 c1 c8 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b3 c8 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  152.322600][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  152.325029][   T12] RAX: ffffffff8a21e38f RBX: ffff888124800000 RCX: ffff88801c685640
[  152.328117][   T12] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff88801c685640
[  152.331419][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  152.334613][   T12] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffffffff8f630c20
[  152.337786][   T12] R13: 1ffff9200001ef40 R14: ffff888124801480 R15: dffffc0000000000
[  152.341000][   T12] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  152.344609][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.347280][   T12] CR2: 00007fc42e6b1440 CR3: 000000010b1c6000 CR4: 00000000000006f0
[  152.350774][   T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  152.353876][   T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  152.356933][   T12] Call Trace:
[  152.358361][   T12]  <TASK>
[  152.359537][   T12]  xfrm_net_exit+0x2d/0x70
[  152.361328][   T12]  ops_undo_list+0x49a/0x990
[  152.363173][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  152.365252][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  152.367299][   T12]  cleanup_net+0x4c5/0x800
[  152.369186][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  152.371137][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.373156][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  152.375365][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  152.377545][   T12]  process_scheduled_works+0xae1/0x17b0
[  152.380056][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  152.382520][   T12]  worker_thread+0x8a0/0xda0
[  152.384447][   T12]  kthread+0x711/0x8a0
[  152.386109][   T12]  ? __pfx_worker_thread+0x10/0x10
[  152.388160][   T12]  ? __pfx_kthread+0x10/0x10
[  152.390205][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.392310][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.394282][   T12]  ? __pfx_kthread+0x10/0x10
[  152.396052][   T12]  ret_from_fork+0x3fc/0x770
[  152.397939][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  152.400152][   T12]  ? __switch_to_asm+0x39/0x70
[  152.402197][   T12]  ? __switch_to_asm+0x33/0x70
[  152.404596][   T12]  ? __pfx_kthread+0x10/0x10
[  152.406507][   T12]  ret_from_fork_asm+0x1a/0x30
[  152.408826][   T12]  </TASK>
[  152.410074][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  152.412661][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  152.415898][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.419808][   T12] Workqueue: netns cleanup_net
[  152.421700][   T12] Call Trace:
[  152.423008][   T12]  <TASK>
[  152.424146][   T12]  dump_stack_lvl+0x99/0x250
[  152.425931][   T12]  ? __asan_memcpy+0x40/0x70
[  152.428074][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.430135][   T12]  ? __pfx__printk+0x10/0x10
[  152.432056][   T12]  vpanic+0x281/0x750
[  152.433682][   T12]  ? __pfx__printk+0x10/0x10
[  152.435653][   T12]  ? __pfx_vpanic+0x10/0x10
[  152.437504][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  152.439645][   T12]  panic+0xb9/0xc0
[  152.441142][   T12]  ? __pfx_panic+0x10/0x10
[  152.443045][   T12]  __warn+0x31b/0x4b0
[  152.444740][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  152.446821][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  152.448771][   T12]  report_bug+0x2be/0x4f0
[  152.450485][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  152.452582][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  152.454615][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  152.456562][   T12]  handle_bug+0x84/0x160
[  152.458262][   T12]  exc_invalid_op+0x1a/0x50
[  152.460149][   T12]  asm_exc_invalid_op+0x1a/0x20
[  152.462147][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  152.464384][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 3d 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 86 fa e1 f7 e8 c1 c8 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 b3 c8 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  152.471805][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  152.474271][   T12] RAX: ffffffff8a21e38f RBX: ffff888124800000 RCX: ffff88801c685640
[  152.477456][   T12] RDX: 0000000000000000 RSI: ffffffff8dba5cac RDI: ffff88801c685640
[  152.480675][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  152.483831][   T12] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: ffffffff8f630c20
[  152.487033][   T12] R13: 1ffff9200001ef40 R14: ffff888124801480 R15: dffffc0000000000
[  152.490259][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  152.492288][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  152.494333][   T12]  xfrm_net_exit+0x2d/0x70
[  152.496139][   T12]  ops_undo_list+0x49a/0x990
[  152.498051][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  152.500120][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  152.502254][   T12]  cleanup_net+0x4c5/0x800
[  152.504127][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  152.506298][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.508388][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  152.510758][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  152.513056][   T12]  process_scheduled_works+0xae1/0x17b0
[  152.515297][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  152.517674][   T12]  worker_thread+0x8a0/0xda0
[  152.519524][   T12]  kthread+0x711/0x8a0
[  152.521196][   T12]  ? __pfx_worker_thread+0x10/0x10
[  152.523317][   T12]  ? __pfx_kthread+0x10/0x10
[  152.525241][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.527382][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.529541][   T12]  ? __pfx_kthread+0x10/0x10
[  152.531443][   T12]  ret_from_fork+0x3fc/0x770
[  152.533350][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  152.535501][   T12]  ? __switch_to_asm+0x39/0x70
[  152.537446][   T12]  ? __switch_to_asm+0x33/0x70
[  152.539391][   T12]  ? __pfx_kthread+0x10/0x10
[  152.541274][   T12]  ret_from_fork_asm+0x1a/0x30
[  152.543243][   T12]  </TASK>
[  152.545246][   T12] Kernel Offset: disabled
[  152.547024][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:30:20  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff8881068a0237 R9 =1ffff11020d14046 R10=dffffc0000000000 R11=ffffffff854efa70
R12=dffffc0000000000 R13=ffffffff99af98ce R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc42e6b1440 CR3=000000010b1c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000135 0000000000003030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=6c6c696b66722f35 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000080080783 RBX=1ffff11020fc625a RCX=000000000000009d RDX=ffff888107e312d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0c28 RSP=ffffc900001e0a80
R8 =ffff888107e316bf R9 =1ffff11020fc62d7 R10=dffffc0000000000 R11=ffffed1020fc62d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff86986fd7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa2580cd800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd1887bffc CR3=000000010f27e000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
