last executing test programs:

959.757837ms ago: executing program 0 (id=95):
socket$tipc(0x1e, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/242, 0xf2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7})
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)

831.609624ms ago: executing program 0 (id=100):
socket$tipc(0x1e, 0x5, 0x0)
unshare(0x20040400)
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)

748.204669ms ago: executing program 0 (id=103):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)

689.415543ms ago: executing program 2 (id=105):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

689.1797ms ago: executing program 1 (id=106):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="00005033e9a9fe"], 0x48)

688.784582ms ago: executing program 0 (id=107):
recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001d00)=""/10, 0xa}, {0x0}], 0x2}, 0xc}], 0x1, 0x10000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

630.143996ms ago: executing program 1 (id=108):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8)

552.834396ms ago: executing program 2 (id=109):
unshare(0x26020480)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)

552.561846ms ago: executing program 1 (id=110):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1}}], 0x8)
bind$can_raw(r0, &(0x7f0000000480), 0x10)

552.420189ms ago: executing program 0 (id=111):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0)

551.998939ms ago: executing program 1 (id=112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa26d6e1d373a", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x1003, r0}, 0x38)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$kcm(0x1e, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0xfffffffd, 0x0, 0x0, 0x2000}, 0x10, 0x0, 0xffffffffffffffff, 0x40}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r6 = socket$kcm(0x1e, 0x4, 0x0)
write$cgroup_subtree(r6, 0x0, 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
shutdown(r2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300)=0x2, 0x4)
write$cgroup_devices(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="61202a3a2a207277007ac118d8cbb74c2da7d151f469d6ab5de05d8a31ceecacc80bf2e8220d1586e591a079bfb0"], 0x9)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x1ff)
write$cgroup_devices(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
accept4(r4, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

489.943899ms ago: executing program 0 (id=113):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68)

489.726714ms ago: executing program 2 (id=114):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)

430.102815ms ago: executing program 2 (id=115):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
r0 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$sock_proto_private(r0, 0x8930, &(0x7f0000000000))

379.532816ms ago: executing program 2 (id=116):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmmsg$unix(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, &(0x7f0000003cc0))

353.957109ms ago: executing program 1 (id=117):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)

269.951811ms ago: executing program 1 (id=118):
r0 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r4, 0x0, 0x2}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000af00)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0)
write$cgroup_int(r6, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000002d00090526bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)
recvmmsg(r0, &(0x7f000000acc0), 0x0, 0x10000, &(0x7f000000aec0))

0s ago: executing program 2 (id=119):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400e300b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34906' (ED25519) to the list of known hosts.
syzkaller login: [   48.536619][ T5791] cgroup: Unknown subsys name 'net'
[   48.662786][ T5791] cgroup: Unknown subsys name 'cpuset'
[   48.667230][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.356393][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.983064][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.985884][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.988366][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.991693][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.994253][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.009207][ T5203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.029982][ T5203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.039025][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.041939][ T5203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.044326][ T5203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.048024][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.050314][ T5203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.053857][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.055983][ T5203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.058503][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.333869][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   62.378923][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   62.394957][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   62.477111][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.480603][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.482783][ T5847] bridge_slave_0: entered allmulticast mode
[   62.485502][ T5847] bridge_slave_0: entered promiscuous mode
[   62.524769][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.527010][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.529212][ T5847] bridge_slave_1: entered allmulticast mode
[   62.533189][ T5847] bridge_slave_1: entered promiscuous mode
[   62.535892][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.538011][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.540427][ T5853] bridge_slave_0: entered allmulticast mode
[   62.543749][ T5853] bridge_slave_0: entered promiscuous mode
[   62.546948][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.549074][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.552272][ T5853] bridge_slave_1: entered allmulticast mode
[   62.554855][ T5853] bridge_slave_1: entered promiscuous mode
[   62.557420][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.560481][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.562604][ T5851] bridge_slave_0: entered allmulticast mode
[   62.565218][ T5851] bridge_slave_0: entered promiscuous mode
[   62.568329][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.571284][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.573439][ T5851] bridge_slave_1: entered allmulticast mode
[   62.576104][ T5851] bridge_slave_1: entered promiscuous mode
[   62.629537][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.634073][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.638365][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.645275][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.658591][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.670593][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.692079][ T5853] team0: Port device team_slave_0 added
[   62.695304][ T5853] team0: Port device team_slave_1 added
[   62.725033][ T5847] team0: Port device team_slave_0 added
[   62.737809][ T5851] team0: Port device team_slave_0 added
[   62.742441][ T5851] team0: Port device team_slave_1 added
[   62.753363][ T5847] team0: Port device team_slave_1 added
[   62.764159][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.766167][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.774157][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.787549][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.790017][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.797396][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.802204][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.804313][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.812108][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.815948][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.818227][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.826977][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.885230][ T5853] hsr_slave_0: entered promiscuous mode
[   62.888094][ T5853] hsr_slave_1: entered promiscuous mode
[   62.892025][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.894282][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.902439][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.907466][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.909987][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.917634][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.937312][ T5851] hsr_slave_0: entered promiscuous mode
[   62.939815][ T5851] hsr_slave_1: entered promiscuous mode
[   62.941957][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.944323][ T5851] Cannot create hsr debugfs directory
[   63.004420][ T5847] hsr_slave_0: entered promiscuous mode
[   63.006813][ T5847] hsr_slave_1: entered promiscuous mode
[   63.008860][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.011246][ T5847] Cannot create hsr debugfs directory
[   63.203284][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.210370][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.216304][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.226580][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.263636][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.270184][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.282845][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.295499][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.297724][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.300402][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.302540][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.307597][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.336210][   T64] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.342365][   T64] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.367029][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.373896][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.380666][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.388701][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.458167][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.482266][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   63.496374][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.499094][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.510388][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.513318][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.578367][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.588433][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.624874][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   63.631694][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   63.642448][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.645156][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.661297][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.663493][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.667045][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.669411][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.680314][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.682440][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.708044][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.772066][ T5853] veth0_vlan: entered promiscuous mode
[   63.803835][ T5853] veth1_vlan: entered promiscuous mode
[   63.824878][ T5853] veth0_macvtap: entered promiscuous mode
[   63.828960][ T5853] veth1_macvtap: entered promiscuous mode
[   63.851458][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.872610][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.884850][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.887490][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.893828][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.896495][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.955826][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.981111][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.983483][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.008007][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.012098][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.026811][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.041931][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.049945][   T54] Bluetooth: hci0: command tx timeout
[   64.083398][ T5847] veth0_vlan: entered promiscuous mode
[   64.108148][ T5847] veth1_vlan: entered promiscuous mode
[   64.129843][ T5852] Bluetooth: hci1: command tx timeout
[   64.131856][   T54] Bluetooth: hci2: command tx timeout
[   64.132787][ T5851] veth0_vlan: entered promiscuous mode
[   64.148940][ T5851] veth1_vlan: entered promiscuous mode
[   64.174176][ T5847] veth0_macvtap: entered promiscuous mode
[   64.188509][ T5847] veth1_macvtap: entered promiscuous mode
[   64.219654][ T5851] veth0_macvtap: entered promiscuous mode
[   64.226606][ T5851] veth1_macvtap: entered promiscuous mode
[   64.234603][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.250958][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.257972][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.261877][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.264433][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.269977][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.296061][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.318416][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.351423][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.354706][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.357955][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.367401][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.391980][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.25'.
[   64.394774][ T5924] Zero length message leads to an empty skb
[   64.437269][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.453366][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.466992][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   64.473996][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'.
[   64.493172][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.499486][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.553077][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.556105][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.602699][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.605215][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.848569][    C1] IPv4: Oversized IP packet from 127.0.0.1
[   64.871167][ T5947] netlink: 'syz.0.33': attribute type 5 has an invalid length.
[   65.080423][ T5964] raw_sendmsg: syz.2.43 forgot to set AF_INET. Fix it!
[   65.428273][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   65.557851][ T5886] IPVS: starting estimator thread 0...
[   65.635391][ T5998] TCP: TCP_TX_DELAY enabled
[   65.663825][ T5996] IPVS: using max 62 ests per chain, 148800 per kthread
[   65.694945][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'.
[   65.996684][ T6020] sctp: [Deprecated]: syz.1.68 (pid 6020) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.996684][ T6020] Use struct sctp_sack_info instead
[   66.077318][ T6024] netlink: 'syz.1.70': attribute type 21 has an invalid length.
[   66.081352][ T6024] netlink: 'syz.1.70': attribute type 22 has an invalid length.
[   66.083790][ T6024] netlink: 'syz.1.70': attribute type 23 has an invalid length.
[   66.086131][ T6024] netlink: 136 bytes leftover after parsing attributes in process `syz.1.70'.
[   66.129709][   T54] Bluetooth: hci0: command tx timeout
[   66.209730][   T54] Bluetooth: hci2: command tx timeout
[   66.211392][   T54] Bluetooth: hci1: command tx timeout
[   66.750074][ T6054] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[   66.816393][ T6057] veth3: entered promiscuous mode
[   67.112614][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   67.133679][ T6082] warning: `syz.0.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.156111][ T6082] Bluetooth: MGMT ver 1.23
[   67.271861][ T6094] SET target dimension over the limit!
[   67.713833][ T6131] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   67.716217][ T6131] netlink: 224 bytes leftover after parsing attributes in process `syz.1.117'.
[   68.210072][ T5852] Bluetooth: hci0: command tx timeout
[   68.289899][ T5852] Bluetooth: hci1: command tx timeout
[   68.291641][ T5852] Bluetooth: hci2: command tx timeout
[   68.501605][ T5862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.551337][ T5862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.589782][ T5862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.681683][ T5862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.806866][ T5862] bridge_slave_1: left allmulticast mode
[   68.808911][ T5862] bridge_slave_1: left promiscuous mode
[   68.812028][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.818108][ T5862] bridge_slave_0: left allmulticast mode
[   68.822780][ T5862] bridge_slave_0: left promiscuous mode
[   68.825010][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.028501][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.033735][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.037722][ T5862] bond0 (unregistering): Released all slaves
[   69.227592][ T5862] hsr_slave_0: left promiscuous mode
[   69.231241][ T5862] hsr_slave_1: left promiscuous mode
[   69.233284][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.235592][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.238439][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.240988][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.252894][ T5862] veth1_macvtap: left promiscuous mode
[   69.254757][ T5862] veth0_macvtap: left promiscuous mode
[   69.256853][ T5862] veth1_vlan: left promiscuous mode
[   69.258553][ T5862] veth0_vlan: left promiscuous mode
[   69.497898][ T5862] team0 (unregistering): Port device team_slave_1 removed
[   69.516887][ T5862] team0 (unregistering): Port device team_slave_0 removed
[   70.054267][ T5862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.134678][ T5862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.179174][ T5862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.225569][ T5862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.329082][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.380592][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.437276][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.488171][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.565769][ T5862] bridge_slave_1: left allmulticast mode
[   70.567573][ T5862] bridge_slave_1: left promiscuous mode
[   70.571093][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.574922][ T5862] bridge_slave_0: left allmulticast mode
[   70.576667][ T5862] bridge_slave_0: left promiscuous mode
[   70.578467][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.583806][ T5862] bridge_slave_1: left allmulticast mode
[   70.585511][ T5862] bridge_slave_1: left promiscuous mode
[   70.587238][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.591636][ T5862] bridge_slave_0: left allmulticast mode
[   70.593353][ T5862] bridge_slave_0: left promiscuous mode
[   70.595079][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.817111][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.822089][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.826623][ T5862] bond0 (unregistering): Released all slaves
[   71.012428][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.016372][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.020031][ T5862] bond0 (unregistering): Released all slaves
[   71.177146][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.179486][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.538977][ T5862] hsr_slave_0: left promiscuous mode
[   71.543350][ T5862] hsr_slave_1: left promiscuous mode
[   71.545403][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.547666][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.550545][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.552856][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.558315][ T5862] hsr_slave_0: left promiscuous mode
[   71.561581][ T5862] hsr_slave_1: left promiscuous mode
[   71.563650][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.566064][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.568667][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.571098][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.587882][ T5862] veth1_macvtap: left promiscuous mode
[   71.590098][ T5862] veth0_macvtap: left promiscuous mode
[   71.591888][ T5862] veth1_vlan: left promiscuous mode
[   71.593550][ T5862] veth0_vlan: left promiscuous mode
[   71.596556][ T5862] veth1_macvtap: left promiscuous mode
[   71.598297][ T5862] veth0_macvtap: left promiscuous mode
[   71.603774][ T5862] veth1_vlan: left promiscuous mode
[   71.605485][ T5862] veth0_vlan: left promiscuous mode
[   71.901356][ T5862] team0 (unregistering): Port device team_slave_1 removed
[   71.921408][ T5862] team0 (unregistering): Port device team_slave_0 removed
[   72.305257][ T5862] team0 (unregistering): Port device team_slave_1 removed
[   72.326931][ T5862] team0 (unregistering): Port device team_slave_0 removed
[   73.039140][ T5862] IPVS: stop unused estimator thread 0...
[   81.414139][   T51] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
02:06:32  Registers:
info registers vcpu 0

CPU#0
RAX=8a564e46933d0900 RBX=ffffffff81974d58 RCX=8a564e46933d0900 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc4a870438 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=03ee7bee79501700 RBX=ffffffff81974d58 RCX=03ee7bee79501700 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e32fe3bb50 CR3=000000010983c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000073 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000001001 0000000000000014
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
