last executing test programs:

2m5.237291998s ago: executing program 0 (id=214):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48)

2m5.237077393s ago: executing program 0 (id=215):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000340)="5c00000033006bcc9e3be35c6e17aa3107f3653c001a0108000600070002bc24eab556a705251e618294ff0051f60a84c9f4d4b68037e786a6d0001000000e4509c5bbcd72c6c953e87efc340cb002b3cb23d694af9149ade85a2892", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m5.235858476s ago: executing program 0 (id=216):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f00000002c0)=@ethernet={0x0, @random="90e92d80d435"}, 0x80, 0x0}, 0x0)

2m5.235712445s ago: executing program 0 (id=217):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

2m5.103482862s ago: executing program 0 (id=218):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x3, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x60)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)}, 0x1c1)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x305, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000810)

2m4.621435066s ago: executing program 0 (id=229):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x4, 0x2204, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x4, @perf_config_ext={0x0, 0x5}, 0x102002, 0x3, 0x207, 0x6, 0x83, 0x5, 0x8006, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

2m4.534481999s ago: executing program 32 (id=229):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x4, 0x2204, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x4, @perf_config_ext={0x0, 0x5}, 0x102002, 0x3, 0x207, 0x6, 0x83, 0x5, 0x8006, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

1.762416811s ago: executing program 1 (id=2353):
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)

1.761901797s ago: executing program 1 (id=2355):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.69398334s ago: executing program 1 (id=2357):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="c6438c6d69", 0x5}], 0x1, &(0x7f0000000640)}, 0x0)

1.473159549s ago: executing program 3 (id=2363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x494, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1.413480872s ago: executing program 3 (id=2364):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0)

1.350562025s ago: executing program 3 (id=2367):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)

1.350161403s ago: executing program 2 (id=2369):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)

1.349529949s ago: executing program 3 (id=2370):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x4110, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, r2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100), 0x120)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r4)
socket$kcm(0x2, 0x922000000001, 0x106)
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x5)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000072050000000000eeb4fe8ba15e3999ef00"/42], 0x38}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0xe}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="62031400d755af176510120800afbcf711e12b7f96e5521c8cf21730087f", 0x1e}], 0x1}, 0x84)
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.347084269s ago: executing program 2 (id=2371):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540))
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x0, 0x0, 0xb6, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="200000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
syz_clone(0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4", 0x1b}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = getpid()
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_pid(r5, &(0x7f0000000280)=r6, 0xfde0)

1.053883792s ago: executing program 2 (id=2372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0xd07, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\x1a'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xd, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @generic="b7"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)

1.053606838s ago: executing program 2 (id=2373):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)

919.394929ms ago: executing program 3 (id=2374):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c01000010000100feffffff0001000000000000000000000000000000000001fc010000000000000000000000000001000107144e230005020000203a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0900000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001fe2000000000000000590003006465666c6174650000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000974749"], 0x14c}, 0x1, 0x0, 0x0, 0x804}, 0x0)

708.486416ms ago: executing program 3 (id=2375):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x4c}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000fcff000000000000000000850000002200000085000000070000009500000000000000e3b791f4a4a3972200e1d2acd44498f2cfbf4ae21867953463a9211404aa0e942d2460473901162b5db03303d2731c0e8ff5f76396f3a69ef52a00e8ae396de506de923c26c5bc87e3461c93cca3b186787c11d06d49d19896534d476fb6550cd031867572ce45503f6f46284b1ce64c582ae6c0e66319f800991ca2b186824cd560affec254ea32ac97873b303fdaa7cdbd52b2f10fc45beb3b5eb9b866fea3b1d06ecc"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203}, 0x25)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002480)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x2b, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff26ba, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x0, 0x7, 0x0, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x63b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x8, 0xb, 0x5, 0xfffffffffffffe7b, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001440)='syzkaller\x00', 0x2, 0x27, &(0x7f0000001480)=""/39, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002300)={0x3, 0xe, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002500)=[r4, 0xffffffffffffffff, r5], &(0x7f0000002540)=[{0x1, 0x2, 0x10}], 0x10, 0x3}, 0x94)

707.204018ms ago: executing program 2 (id=2376):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102)

706.893299ms ago: executing program 1 (id=2377):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000061114c0000000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)

706.5854ms ago: executing program 1 (id=2378):
perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0xb9, 0x1, 0x0, 0x5, 0x0, 0xe4b8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x2980, 0x2000000002, 0xfffffff7, 0x4, 0x1, 0x7, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}})
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x14}]})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="a2", 0x1}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274140000001100"], 0x84}}, 0x40)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xf19, @private0, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}, {&(0x7f0000000500)="7ed7744be9c32ba715cc99fcbf514062fb8f83925fe6bfa74602afe1aa8c3724ea9026", 0x23}], 0x2}, 0x80)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})

110.397777ms ago: executing program 1 (id=2379):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x80}, 0x40000000)
r2 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a97, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), 0x2)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1004}, r1, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000000780), 0x0, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000840)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x5513, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', r5, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r6})

0s ago: executing program 2 (id=2380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000e307001640000097ff0800"], 0x6c}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42674' (ED25519) to the list of known hosts.
syzkaller login: [   47.979558][ T5807] cgroup: Unknown subsys name 'net'
[   48.110958][ T5807] cgroup: Unknown subsys name 'cpuset'
[   48.119429][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.687931][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.441806][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.446120][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.450508][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.456431][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.459989][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.474267][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.478282][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.481983][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.493444][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.497882][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.515465][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.520062][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.523485][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.528954][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.532578][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.788365][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   54.928960][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.008314][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.011439][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.014952][ T5842] bridge_slave_0: entered allmulticast mode
[   55.020273][ T5842] bridge_slave_0: entered promiscuous mode
[   55.027804][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.039590][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.042730][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.045743][ T5842] bridge_slave_1: entered allmulticast mode
[   55.050450][ T5842] bridge_slave_1: entered promiscuous mode
[   55.115047][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.132075][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.135673][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.138770][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.141243][ T5846] bridge_slave_0: entered allmulticast mode
[   55.143951][ T5846] bridge_slave_0: entered promiscuous mode
[   55.175638][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.178305][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.180654][ T5846] bridge_slave_1: entered allmulticast mode
[   55.183360][ T5846] bridge_slave_1: entered promiscuous mode
[   55.202232][ T5842] team0: Port device team_slave_0 added
[   55.204791][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.207781][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.210237][ T5850] bridge_slave_0: entered allmulticast mode
[   55.212856][ T5850] bridge_slave_0: entered promiscuous mode
[   55.225855][ T5842] team0: Port device team_slave_1 added
[   55.228377][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.231105][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.233831][ T5850] bridge_slave_1: entered allmulticast mode
[   55.238008][ T5850] bridge_slave_1: entered promiscuous mode
[   55.249993][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.280935][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.284544][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.287932][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.297353][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.303596][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.308642][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.320382][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.322694][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.331469][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.368326][ T5846] team0: Port device team_slave_0 added
[   55.371189][ T5850] team0: Port device team_slave_0 added
[   55.374930][ T5846] team0: Port device team_slave_1 added
[   55.378938][ T5850] team0: Port device team_slave_1 added
[   55.416496][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.419285][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.429211][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.461850][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.464850][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.476180][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.482595][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.485571][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.497412][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.508454][ T5842] hsr_slave_0: entered promiscuous mode
[   55.511772][ T5842] hsr_slave_1: entered promiscuous mode
[   55.521661][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.524496][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.535733][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.593742][ T5846] hsr_slave_0: entered promiscuous mode
[   55.597826][ T5846] hsr_slave_1: entered promiscuous mode
[   55.600651][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   55.603058][ T5846] Cannot create hsr debugfs directory
[   55.677032][ T5850] hsr_slave_0: entered promiscuous mode
[   55.680246][ T5850] hsr_slave_1: entered promiscuous mode
[   55.683194][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   55.685645][ T5850] Cannot create hsr debugfs directory
[   55.900267][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.908135][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.913773][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.923896][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.953454][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.969945][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.974566][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.989455][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.023985][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.029780][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.038429][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.047964][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.099018][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.123310][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.134340][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.137515][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.155130][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.158372][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.190065][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.195287][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.210774][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   56.224077][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.226432][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.244043][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   56.249663][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.252599][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.270649][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.273671][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.290460][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.293464][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.387391][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.436042][ T5846] veth0_vlan: entered promiscuous mode
[   56.452206][ T5846] veth1_vlan: entered promiscuous mode
[   56.472119][ T5846] veth0_macvtap: entered promiscuous mode
[   56.477530][ T5846] veth1_macvtap: entered promiscuous mode
[   56.488691][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.494970][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.505723][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.512036][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.514979][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.518271][   T55] Bluetooth: hci1: command tx timeout
[   56.521308][ T5235] Bluetooth: hci0: command tx timeout
[   56.540680][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.568647][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.575320][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.596845][   T55] Bluetooth: hci2: command tx timeout
[   56.622773][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.626013][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.667741][ T5850] veth0_vlan: entered promiscuous mode
[   56.670499][ T5156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.673446][ T5156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.678917][ T5842] veth0_vlan: entered promiscuous mode
[   56.697517][ T5850] veth1_vlan: entered promiscuous mode
[   56.705242][ T5842] veth1_vlan: entered promiscuous mode
[   56.739268][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.748256][ T5850] veth0_macvtap: entered promiscuous mode
[   56.753806][ T5842] veth0_macvtap: entered promiscuous mode
[   56.761589][ T5850] veth1_macvtap: entered promiscuous mode
[   56.781207][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.785880][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.800163][ T5842] veth1_macvtap: entered promiscuous mode
[   56.807827][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.820132][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.844293][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.853402][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.872496][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.890786][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.924204][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.931923][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.953782][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.959674][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.970954][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.974304][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.045035][ T5156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.054856][ T5156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.070470][ T5156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.073053][ T5156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.121060][ T5156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.127606][ T5156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.326383][    C0] hrtimer: interrupt took 32351 ns
[   58.597507][   T55] Bluetooth: hci1: command tx timeout
[   58.608027][ T5235] Bluetooth: hci0: command tx timeout
[   58.677359][   T55] Bluetooth: hci2: command tx timeout
[   58.703988][ T5938] IPv6: Can't replace route, no match found
[   58.821447][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   58.825115][ T5947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17'.
[   58.971938][ T5963] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.063849][ T5967] Zero length message leads to an empty skb
[   59.283327][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'.
[   59.497713][ T5981] netlink: 'syz.0.34': attribute type 21 has an invalid length.
[   59.571393][ T5986] netlink: 'syz.0.36': attribute type 10 has an invalid length.
[   60.156292][ T6013] netlink: 17 bytes leftover after parsing attributes in process `syz.2.49'.
[   60.160607][ T6013] netlink: zone id is out of range
[   60.162339][ T6013] netlink: zone id is out of range
[   60.164135][ T6013] netlink: zone id is out of range
[   60.165827][ T6013] netlink: zone id is out of range
[   60.175797][ T6013] netlink: zone id is out of range
[   60.178634][ T6013] netlink: zone id is out of range
[   60.181194][ T6013] netlink: zone id is out of range
[   60.183311][ T6013] netlink: zone id is out of range
[   60.185534][ T6013] netlink: zone id is out of range
[   60.187633][ T6013] netlink: zone id is out of range
[   60.331079][ T6021] netlink: 'syz.1.53': attribute type 58 has an invalid length.
[   60.342222][ T6021] netlink: 144 bytes leftover after parsing attributes in process `syz.1.53'.
[   60.400203][ T6023] netlink: 'syz.1.54': attribute type 40 has an invalid length.
[   60.425060][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.573051][ T6034] netlink: 825 bytes leftover after parsing attributes in process `syz.0.59'.
[   60.576231][ T6034] netlink: 130144 bytes leftover after parsing attributes in process `syz.0.59'.
[   60.677037][   T55] Bluetooth: hci1: command tx timeout
[   60.690992][   T55] Bluetooth: hci0: command tx timeout
[   60.757595][   T55] Bluetooth: hci2: command tx timeout
[   60.841263][ T6047] netlink: 'syz.0.64': attribute type 11 has an invalid length.
[   60.843901][ T6047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.64'.
[   60.871833][ T6049] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.65'.
[   60.957321][ T6046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.396263][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.450703][ T6068] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.73'.
[   61.537900][ T6072] netlink: 'syz.1.75': attribute type 10 has an invalid length.
[   61.632394][ T6072] veth0_vlan: left promiscuous mode
[   61.652790][ T6072] veth0_vlan: entered promiscuous mode
[   61.686762][ T6072] team0: Device veth0_vlan failed to register rx_handler
[   61.821166][ T6072] syz.1.75 (6072) used greatest stack depth: 17528 bytes left
[   62.133267][ T6088] netlink: 'syz.2.80': attribute type 13 has an invalid length.
[   62.765767][   T55] Bluetooth: hci0: command tx timeout
[   62.765799][ T5235] Bluetooth: hci1: command tx timeout
[   62.839604][ T5235] Bluetooth: hci2: command tx timeout
[   63.782834][ T6148] netlink: 'syz.0.108': attribute type 39 has an invalid length.
[   64.903305][ T6154] __nla_validate_parse: 2 callbacks suppressed
[   64.903323][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   64.930135][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1003665492 wd_nsec: 1003665515
[   65.366636][ T6167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.114'.
[   65.379492][ T6167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.114'.
[   65.419226][ T6167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.114'.
[   65.571099][ T6175] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   65.588258][ T6173] net_ratelimit: 75 callbacks suppressed
[   65.588316][ T6173] openvswitch: netlink: IP tunnel dst address not specified
[   65.818955][ T6185] netlink: 'syz.2.123': attribute type 16 has an invalid length.
[   65.821645][ T6185] netlink: 156 bytes leftover after parsing attributes in process `syz.2.123'.
[   65.944539][ T6187] delete_channel: no stack
[   66.074263][ T6201] netlink: 'syz.1.130': attribute type 21 has an invalid length.
[   66.079708][ T6201] netlink: 156 bytes leftover after parsing attributes in process `syz.1.130'.
[   66.305334][ T6211] netlink: 'syz.1.135': attribute type 21 has an invalid length.
[   66.802888][ T6213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.897930][ T6208] infiniband syz0: set active
[   66.899914][ T6208] infiniband syz0: added veth0_vlan
[   66.943350][ T6222] netlink: 'syz.2.140': attribute type 22 has an invalid length.
[   66.948779][ T6208] RDS/IB: syz0: added
[   66.954636][ T6208] smc: adding ib device syz0 with port count 1
[   66.962329][ T6208] smc:    ib device syz0 port 1 has pnetid 
[   67.136248][ T6235] netlink: 'syz.2.147': attribute type 9 has an invalid length.
[   67.140279][ T6235] netlink: 'syz.2.147': attribute type 8 has an invalid length.
[   67.143225][ T6235] netlink: 143452 bytes leftover after parsing attributes in process `syz.2.147'.
[   67.179471][ T6238] netlink: 'syz.2.148': attribute type 28 has an invalid length.
[   67.182073][ T6238] netlink: 2 bytes leftover after parsing attributes in process `syz.2.148'.
[   67.540875][ T6259] =======================================================
[   67.540875][ T6259] WARNING: The mand mount option has been deprecated and
[   67.540875][ T6259]          and is ignored by this kernel. Remove the mand
[   67.540875][ T6259]          option from the mount to silence this warning.
[   67.540875][ T6259] =======================================================
[   67.600004][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'.
[   67.658327][ T6267] netlink: 176 bytes leftover after parsing attributes in process `syz.1.158'.
[   68.496575][ T6295] syz.2.173 uses obsolete (PF_INET,SOCK_PACKET)
[   70.605111][ T6329] __nla_validate_parse: 6 callbacks suppressed
[   70.605167][ T6329] netlink: 5520 bytes leftover after parsing attributes in process `syz.1.187'.
[   71.000615][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.003616][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.301829][ T5846] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[   71.305693][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   71.305704][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.305709][ T5846] Call Trace:
[   71.305714][ T5846]  <TASK>
[   71.305718][ T5846]  dump_stack_lvl+0x189/0x250
[   71.305732][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.305740][ T5846]  ? __pfx__printk+0x10/0x10
[   71.305755][ T5846]  dump_header+0xd3/0x480
[   71.305766][ T5846]  oom_kill_process+0x387/0x920
[   71.305776][ T5846]  out_of_memory+0xf09/0x12a0
[   71.305812][ T5846]  ? __pfx_out_of_memory+0x10/0x10
[   71.305822][ T5846]  mem_cgroup_out_of_memory+0x145/0x240
[   71.305830][ T5846]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   71.305841][ T5846]  ? _raw_spin_unlock+0x28/0x50
[   71.305850][ T5846]  ? memcg1_oom_prepare+0x37f/0x450
[   71.305859][ T5846]  try_charge_memcg+0xdff/0x1290
[   71.305875][ T5846]  ? __pfx_try_charge_memcg+0x10/0x10
[   71.305890][ T5846]  charge_memcg+0x9f/0x180
[   71.305899][ T5846]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   71.305907][ T5846]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   71.305917][ T5846]  __read_swap_cache_async+0x28c/0x510
[   71.305929][ T5846]  swap_cluster_readahead+0x305/0x5f0
[   71.305939][ T5846]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   71.305951][ T5846]  ? get_vma_policy+0x27c/0x3c0
[   71.305961][ T5846]  swapin_readahead+0x17d/0xb50
[   71.305968][ T5846]  ? __pfx_filemap_get_entry+0x10/0x10
[   71.305979][ T5846]  ? __pfx_swapin_readahead+0x10/0x10
[   71.305987][ T5846]  ? __filemap_get_folio+0x9a6/0xaf0
[   71.305997][ T5846]  ? swap_cache_get_folio+0xae/0x3b0
[   71.306006][ T5846]  do_swap_page+0x525/0x5ac0
[   71.306014][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   71.306023][ T5846]  ? __lock_acquire+0xab9/0xd20
[   71.306043][ T5846]  ? do_swap_page+0x184/0x5ac0
[   71.306050][ T5846]  ? __pfx_do_swap_page+0x10/0x10
[   71.306057][ T5846]  ? __lock_acquire+0xab9/0xd20
[   71.306066][ T5846]  ? __pfx_default_wake_function+0x10/0x10
[   71.306076][ T5846]  ? ___pte_offset_map+0x1cf/0x250
[   71.306086][ T5846]  ? pte_offset_map_rw_nolock+0xea/0x160
[   71.306096][ T5846]  __handle_mm_fault+0xe55/0x5440
[   71.306103][ T5846]  ? __lock_acquire+0xab9/0xd20
[   71.306117][ T5846]  ? __pfx___handle_mm_fault+0x10/0x10
[   71.306131][ T5846]  ? lock_vma_under_rcu+0xdf/0x3d0
[   71.306140][ T5846]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[   71.306152][ T5846]  handle_mm_fault+0x40a/0x8e0
[   71.306164][ T5846]  do_user_addr_fault+0xa81/0x1390
[   71.306177][ T5846]  ? rcu_is_watching+0x15/0xb0
[   71.306184][ T5846]  ? trace_page_fault_user+0x84/0x1e0
[   71.306195][ T5846]  exc_page_fault+0x76/0xf0
[   71.306205][ T5846]  asm_exc_page_fault+0x26/0x30
[   71.306211][ T5846] RIP: 0033:0x7f85491c1468
[   71.306219][ T5846] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[   71.306225][ T5846] RSP: 002b:00007ffdd0f32680 EFLAGS: 00010293
[   71.306232][ T5846] RAX: 0000000000000000 RBX: 0000000000000078 RCX: 00007f85491c1465
[   71.306237][ T5846] RDX: 00007ffdd0f326c0 RSI: 0000000000000000 RDI: 0000000000000000
[   71.306241][ T5846] RBP: 00007ffdd0f3272c R08: 0000000000000000 R09: 0000000000000000
[   71.306245][ T5846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[   71.306249][ T5846] R13: 00000000000927c0 R14: 000000000001123a R15: 00007ffdd0f32780
[   71.306260][ T5846]  </TASK>
[   71.306263][ T5846] memory: usage 307200kB, limit 307200kB, failcnt 9843
[   71.445150][ T5846] memory+swap: usage 279328kB, limit 9007199254740988kB, failcnt 0
[   71.449583][ T5846] kmem: usage 278964kB, limit 9007199254740988kB, failcnt 0
[   71.452542][ T5846] Memory cgroup stats for /syz2:
[   71.452730][ T5846] cache 0
[   71.466325][ T5846] rss 0
[   71.469538][ T5846] rss_huge 0
[   71.470884][ T5846] shmem 0
[   71.472125][ T5846] mapped_file 0
[   71.473590][ T5846] dirty 0
[   71.474843][ T5846] writeback 0
[   71.476204][ T5846] workingset_refault_anon 0
[   71.487308][ T5846] workingset_refault_file 0
[   71.489212][ T5846] swap 212992
[   71.490618][ T5846] swapcached 0
[   71.497142][ T5846] pgpgin 29241
[   71.498571][ T5846] pgpgout 29241
[   71.500054][ T5846] pgfault 6614
[   71.501485][ T5846] pgmajfault 3
[   71.507999][ T5846] inactive_anon 0
[   71.509235][ T5846] active_anon 0
[   71.510693][ T5846] inactive_file 0
[   71.512248][ T5846] active_file 0
[   71.524021][ T5846] unevictable 0
[   71.525265][ T5846] hierarchical_memory_limit 314572800
[   71.528225][ T5846] hierarchical_memsw_limit 9223372036854771712
[   71.530447][ T5846] total_cache 0
[   71.531651][ T5846] total_rss 0
[   71.532805][ T5846] total_rss_huge 0
[   71.544531][ T5846] total_shmem 0
[   71.545756][ T5846] total_mapped_file 0
[   71.548295][ T5846] total_dirty 0
[   71.549768][ T5846] total_writeback 0
[   71.551094][ T5846] total_workingset_refault_anon 0
[   71.552864][ T5846] total_workingset_refault_file 0
[   71.565059][ T5846] total_swap 212992
[   71.574484][ T5846] total_swapcached 0
[   71.591556][ T5846] total_pgpgin 29241
[   71.593101][ T5846] total_pgpgout 29241
[   71.594563][ T5846] total_pgfault 6614
[   71.596068][ T5846] total_pgmajfault 3
[   71.607269][ T5846] total_inactive_anon 0
[   71.608711][ T5846] total_active_anon 0
[   71.610072][ T5846] total_inactive_file 0
[   71.616722][ T5846] total_active_file 0
[   71.618087][ T5846] total_unevictable 0
[   71.619546][ T5846] anon_cost 0
[   71.620688][ T5846] file_cost 0
[   71.627574][ T5846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.180,pid=6309,uid=0
[   71.643657][ T5846] Memory cgroup out of memory: Killed process 6309 (syz.2.180) total-vm:104136kB, anon-rss:1084kB, file-rss:22700kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   72.720567][ T6334] netlink: 'syz.2.188': attribute type 1 has an invalid length.
[   72.844176][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'.
[   73.199400][ T6352] netlink: 'syz.1.194': attribute type 1 has an invalid length.
[   73.202757][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[   73.210826][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.405531][ T5235] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[   73.504159][ T6360] netlink: 'syz.2.198': attribute type 11 has an invalid length.
[   73.868842][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[   74.140814][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'.
[   74.177661][ T6385] netlink: 220 bytes leftover after parsing attributes in process `syz.0.210'.
[   74.185410][ T6385] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   74.684652][ T6399] netlink: 72 bytes leftover after parsing attributes in process `syz.0.215'.
[   74.745715][ T6401] raw_sendmsg: syz.0.216 forgot to set AF_INET. Fix it!
[   75.405828][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.497790][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.566218][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.632285][ T6430] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.233'.
[   75.649120][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.695787][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.700428][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.703172][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.706054][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.712080][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.881885][ T6440] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.237'.
[   75.922974][   T13] bridge_slave_1: left allmulticast mode
[   75.924963][   T13] bridge_slave_1: left promiscuous mode
[   75.933157][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.938221][   T13] bridge_slave_0: left allmulticast mode
[   75.940053][   T13] bridge_slave_0: left promiscuous mode
[   75.941912][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.214927][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.219542][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.223162][   T13] bond0 (unregistering): Released all slaves
[   76.337116][ T6466] netlink: 'syz.2.246': attribute type 25 has an invalid length.
[   76.340469][ T6466] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.246'.
[   76.478451][ T6477] netlink: 'syz.2.248': attribute type 1 has an invalid length.
[   76.481190][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[   76.492924][ T6431] chnl_net:caif_netlink_parms(): no params data found
[   76.525109][ T6479] bridge0: port 3(ip6gretap0) entered blocking state
[   76.532175][ T6479] bridge0: port 3(ip6gretap0) entered disabled state
[   76.537677][ T6479] ip6gretap0: entered allmulticast mode
[   76.540658][ T6479] ip6gretap0: entered promiscuous mode
[   76.543261][ T6479] bridge0: port 3(ip6gretap0) entered blocking state
[   76.545644][ T6479] bridge0: port 3(ip6gretap0) entered forwarding state
[   76.689853][   T13] hsr_slave_0: left promiscuous mode
[   76.692092][   T13] hsr_slave_1: left promiscuous mode
[   76.694220][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.704964][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.715967][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.720820][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.764500][   T13] veth1_macvtap: left promiscuous mode
[   76.771788][   T13] veth0_macvtap: left promiscuous mode
[   76.776209][   T13] veth1_vlan: left promiscuous mode
[   76.782007][   T13] veth0_vlan: left promiscuous mode
[   77.011959][   T53] smc: removing ib device syz0
[   77.257698][   T13] team0 (unregistering): Port device team_slave_1 removed
[   77.293900][   T13] team0 (unregistering): Port device team_slave_0 removed
[   77.529431][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.532352][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.535280][ T6431] bridge_slave_0: entered allmulticast mode
[   77.539088][ T6431] bridge_slave_0: entered promiscuous mode
[   77.543492][ T5907] syz0: Port: 1 Link DOWN
[   77.684703][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.688561][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.691246][ T6431] bridge_slave_1: entered allmulticast mode
[   77.708295][ T6431] bridge_slave_1: entered promiscuous mode
[   77.807994][   T55] Bluetooth: hci2: command tx timeout
[   78.699324][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.742357][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.822853][ T6519] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.259'.
[   78.825872][ T6431] team0: Port device team_slave_0 added
[   78.827312][ T6519] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   78.838843][ T6519] openvswitch: netlink: Message has 6324 unknown bytes.
[   78.841888][ T6431] team0: Port device team_slave_1 added
[   78.910674][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.913621][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.939320][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.954379][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.965620][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.982487][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.010324][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'.
[   79.014589][ T6527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'.
[   79.116708][ T6431] hsr_slave_0: entered promiscuous mode
[   79.119916][ T6431] hsr_slave_1: entered promiscuous mode
[   79.128963][ T6431] debugfs: 'hsr0' already exists in 'hsr'
[   79.131244][ T6431] Cannot create hsr debugfs directory
[   79.188426][ T6538] netlink: 48 bytes leftover after parsing attributes in process `syz.1.266'.
[   79.350010][ T6549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.272'.
[   79.366272][ T6549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.272'.
[   79.458421][ T6431] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.480330][ T6431] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.500220][ T6431] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.507829][ T6431] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.672630][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.712217][ T6431] 8021q: adding VLAN 0 to HW filter on device team0
[   79.731176][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.734711][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.781926][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.784979][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.877134][   T55] Bluetooth: hci2: command tx timeout
[   80.035027][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.080270][ T6431] veth0_vlan: entered promiscuous mode
[   80.087399][ T6431] veth1_vlan: entered promiscuous mode
[   80.124588][ T6431] veth0_macvtap: entered promiscuous mode
[   80.145041][ T6431] veth1_macvtap: entered promiscuous mode
[   80.172028][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.185467][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.197887][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.200903][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.204273][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.209352][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.254843][ T6600] netlink: 'syz.1.285': attribute type 1 has an invalid length.
[   80.306208][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.322325][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.360100][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.363906][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.478839][ T6615] netlink: 'syz.3.290': attribute type 2 has an invalid length.
[   80.492874][ T6615] nbd: must specify an index to disconnect
[   80.838890][ T6645] __nla_validate_parse: 2 callbacks suppressed
[   80.838900][ T6645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'.
[   80.855946][ T6645] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   80.865885][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'.
[   80.875592][ T6648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.300'.
[   81.103234][ T6628] tap0: tun_chr_ioctl cmd 1074025677
[   81.109676][ T6628] tap0: linktype set to 0
[   81.256133][  T124] cfg80211: failed to load regulatory.db
[   81.347997][ T6673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'.
[   82.106880][   T55] Bluetooth: hci2: command tx timeout
[   82.663940][ T6693] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.313'.
[   82.807399][ T6711] netlink: 'syz.3.320': attribute type 7 has an invalid length.
[   82.810307][ T6711] netlink: 140 bytes leftover after parsing attributes in process `syz.3.320'.
[   82.863793][ T6715] netlink: 'syz.1.322': attribute type 21 has an invalid length.
[   82.873502][ T6715] netlink: 'syz.1.322': attribute type 20 has an invalid length.
[   82.893051][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[   83.253957][ T6728] netlink: 'syz.3.328': attribute type 2 has an invalid length.
[   83.277714][ T6728] netlink: 'syz.3.328': attribute type 1 has an invalid length.
[   83.526983][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'.
[   83.531268][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.335'.
[   83.534980][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'.
[   83.759116][ T6713] infiniband syz1: set active
[   83.765654][ T6713] infiniband syz1: added team_slave_0
[   83.789248][ T6713] RDS/IB: syz1: added
[   83.792145][ T6713] smc: adding ib device syz1 with port count 1
[   83.794288][ T6713] smc:    ib device syz1 port 1 has pnetid 
[   84.117502][   T55] Bluetooth: hci2: command tx timeout
[   85.836064][ T6836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.011629][   T33] audit: type=1107 audit(1757531554.663:2): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[   86.982396][ T6891] __nla_validate_parse: 1 callbacks suppressed
[   86.982409][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'.
[   87.440723][ T6910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.405'.
[   87.794194][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.824246][ T6910] bridge_slave_0 (unregistering): left allmulticast mode
[   87.836633][ T6910] bridge_slave_0 (unregistering): left promiscuous mode
[   87.839748][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.068128][ T6925] netlink: 'syz.1.413': attribute type 5 has an invalid length.
[   88.076281][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.413'.
[   88.143174][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'.
[   88.147478][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'.
[   88.467049][ T6944] netlink: 'syz.2.420': attribute type 29 has an invalid length.
[   89.329692][ T6968] netlink: 763 bytes leftover after parsing attributes in process `syz.1.429'.
[   89.333577][ T6968] netlink: 'syz.1.429': attribute type 10 has an invalid length.
[   89.337182][ T6968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.429'.
[   89.340979][ T6968] team0: entered promiscuous mode
[   89.342878][ T6968] team_slave_0: entered promiscuous mode
[   89.345195][ T6968] team_slave_1: entered promiscuous mode
[   89.348739][ T6968] team0: entered allmulticast mode
[   89.350978][ T6968] team_slave_0: entered allmulticast mode
[   89.354799][ T6968] team_slave_1: entered allmulticast mode
[   89.374614][ T6968] bridge0: port 3(team0) entered blocking state
[   89.434178][ T6968] bridge0: port 3(team0) entered disabled state
[   89.438581][ T6968] bridge0: port 3(team0) entered blocking state
[   89.440798][ T6968] bridge0: port 3(team0) entered forwarding state
[   92.378816][ T7020] netlink: 104 bytes leftover after parsing attributes in process `syz.2.439'.
[   92.454343][ T7027] netlink: 'syz.3.441': attribute type 10 has an invalid length.
[   92.473605][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.476877][ T7027] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.656118][ T7039] syzkaller0: entered promiscuous mode
[   92.662091][ T7039] syzkaller0: entered allmulticast mode
[   93.973874][ T7067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.125096][ T7078] netlink: 'syz.2.457': attribute type 2 has an invalid length.
[   94.131194][ T7078] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   94.134019][ T7078] netlink: 'syz.2.457': attribute type 1 has an invalid length.
[   94.264384][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   94.592924][ T7109] Driver unsupported XDP return value 0 on prog  (id 168) dev N/A, expect packet loss!
[   95.432258][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.474'.
[   95.441058][ T7123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.474'.
[   95.751251][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'.
[   96.352018][   T55] Bluetooth: hci1: Received unexpected HCI Event 0x00
[   96.401200][ T7173] netlink: 'syz.1.496': attribute type 21 has an invalid length.
[   96.631089][ T7183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.501'.
[   96.635135][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.638401][ T7183] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.752126][ T7185] netlink: 'syz.2.502': attribute type 4 has an invalid length.
[   96.755791][ T7185] netlink: 152 bytes leftover after parsing attributes in process `syz.2.502'.
[   96.858008][ T7185] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   96.917530][ T7189] netlink: 48 bytes leftover after parsing attributes in process `syz.3.504'.
[   97.193257][ T7205] netlink: 'syz.2.511': attribute type 2 has an invalid length.
[   97.297045][ T7210] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.510'.
[   97.302983][ T7208] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.510'.
[   97.310199][ T7210] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.510'.
[   97.419867][ T7216] netlink: 'syz.3.514': attribute type 10 has an invalid length.
[   97.430411][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.434800][ T7216] team0: Port device bond0 added
[   97.500725][ T7218] netlink: 360 bytes leftover after parsing attributes in process `syz.3.515'.
[   97.778439][   T55] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[   97.970462][ T7235] netlink: 196 bytes leftover after parsing attributes in process `syz.3.523'.
[   98.707739][ T7267] netlink: 104 bytes leftover after parsing attributes in process `syz.2.538'.
[   98.779803][ T7271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.891651][ T7273] netlink: 64 bytes leftover after parsing attributes in process `syz.3.540'.
[   98.943790][ T7277] netlink: 'syz.2.542': attribute type 1 has an invalid length.
[   98.983045][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'.
[   98.988083][ T7281] netlink: 35 bytes leftover after parsing attributes in process `syz.2.544'.
[   98.991649][ T7281] netlink: 35 bytes leftover after parsing attributes in process `syz.2.544'.
[   98.995269][ T7279] netlink: 830 bytes leftover after parsing attributes in process `syz.1.543'.
[   99.148533][ T7295] netlink: 'syz.3.552': attribute type 41 has an invalid length.
[   99.151602][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.552'.
[   99.536338][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.775651][   T55] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11
[   99.834590][ T7365] netlink: 'syz.1.584': attribute type 11 has an invalid length.
[   99.841407][ T7365] netlink: 'syz.1.584': attribute type 11 has an invalid length.
[   99.922291][   T55] Bluetooth: hci2: Malformed LE Event: 0x0b
[  100.021753][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  100.381216][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.383912][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.391772][ T7408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.394648][ T7408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.579866][ T7423] netlink: 'syz.3.609': attribute type 25 has an invalid length.
[  101.582564][ T7423] netlink: 'syz.3.609': attribute type 28 has an invalid length.
[  101.631590][ T7425] netlink: 'syz.1.610': attribute type 1 has an invalid length.
[  102.051738][ T7457] netlink: 'syz.2.625': attribute type 1 has an invalid length.
[  102.054612][ T7457] netlink: 'syz.2.625': attribute type 2 has an invalid length.
[  102.112121][ T7450] netlink: 'syz.1.622': attribute type 10 has an invalid length.
[  102.405414][ T7484] netlink: 'syz.2.637': attribute type 10 has an invalid length.
[  102.498220][ T7484] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  102.672483][ T7504] __nla_validate_parse: 9 callbacks suppressed
[  102.672494][ T7504] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.647'.
[  102.856130][ T7519] netlink: 'syz.2.654': attribute type 29 has an invalid length.
[  102.864125][ T7519] netlink: 'syz.2.654': attribute type 29 has an invalid length.
[  103.024446][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.655'.
[  104.104142][ T7555] netlink: 830 bytes leftover after parsing attributes in process `syz.3.670'.
[  104.158905][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  104.383602][ T7572] validate_nla: 3 callbacks suppressed
[  104.383938][ T7572] netlink: 'syz.3.678': attribute type 21 has an invalid length.
[  104.404282][ T7572] netlink: 'syz.3.678': attribute type 15 has an invalid length.
[  104.408017][ T7572] netlink: 156 bytes leftover after parsing attributes in process `syz.3.678'.
[  104.411186][ T7572] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.414362][ T7572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.416935][ T7572] IPv6: NLM_F_CREATE should be set when creating new route
[  104.419933][ T7572] IPv6: NLM_F_CREATE should be set when creating new route
[  104.423001][ T7572] IPv6: NLM_F_CREATE should be set when creating new route
[  106.205474][ T7629] C: renamed from team_slave_0 (while UP)
[  106.213534][ T7629] netlink: 'syz.2.700': attribute type 3 has an invalid length.
[  106.216203][ T7629] netlink: 152 bytes leftover after parsing attributes in process `syz.2.700'.
[  106.435571][ T7644] netlink: 'syz.2.705': attribute type 2 has an invalid length.
[  106.438980][ T7644] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.705'.
[  106.969269][ T7671] netlink: 'syz.1.716': attribute type 27 has an invalid length.
[  106.972232][ T7671] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.716'.
[  107.181464][   T55] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  107.184032][   T55] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  107.557199][ T7709] netlink: 'syz.3.734': attribute type 21 has an invalid length.
[  107.697603][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'.
[  107.700966][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'.
[  107.704215][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'.
[  107.904806][ T7730] netlink: 'syz.3.744': attribute type 1 has an invalid length.
[  107.909191][ T7730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.000682][ T7742] netlink: 'syz.3.749': attribute type 2 has an invalid length.
[  108.003978][ T7742] netlink: 119 bytes leftover after parsing attributes in process `syz.3.749'.
[  108.276032][ T7748] syzkaller0: entered promiscuous mode
[  108.279569][ T7748] syzkaller0: entered allmulticast mode
[  108.953972][ T7763] netlink: 'syz.1.759': attribute type 10 has an invalid length.
[  108.963388][ T7763] netlink: 168 bytes leftover after parsing attributes in process `syz.1.759'.
[  109.114163][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.310451][   T55] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  109.620900][ T7796] netlink: 'syz.3.773': attribute type 39 has an invalid length.
[  110.932165][ T7810] netlink: 'syz.2.779': attribute type 11 has an invalid length.
[  110.947672][ T7808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.778'.
[  111.060674][ T7816] dummy0: entered promiscuous mode
[  111.113147][ T7818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.783'.
[  111.121240][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'.
[  111.227445][ T7828] netlink: 'syz.3.789': attribute type 4 has an invalid length.
[  111.230454][ T7828] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.789'.
[  111.320903][   T55] Bluetooth: hci2: command tx timeout
[  112.247827][ T7878] netlink: 48 bytes leftover after parsing attributes in process `syz.1.810'.
[  112.394292][   T55] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  112.590719][ T7910] netlink: 'syz.3.825': attribute type 10 has an invalid length.
[  112.669981][   T55] Bluetooth: hci1: Malformed HCI Event: 0x22
[  112.835713][ T7927] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  112.839161][ T7927] netlink: 'syz.2.834': attribute type 4 has an invalid length.
[  112.843562][ T7927] __nla_validate_parse: 1 callbacks suppressed
[  112.843576][ T7927] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.834'.
[  113.048277][ T7942] netlink: 'syz.2.841': attribute type 10 has an invalid length.
[  113.174793][ T7947] sit0: entered allmulticast mode
[  113.186032][ T7947] sit0: entered promiscuous mode
[  113.521549][ T7953] netlink: 14 bytes leftover after parsing attributes in process `syz.3.845'.
[  113.525515][ T7953] hsr0: entered promiscuous mode
[  113.565161][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  113.661672][ T7953] hsr0: entered allmulticast mode
[  113.672595][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  113.677764][ T7953] hsr_slave_0: entered allmulticast mode
[  113.680935][ T7953] hsr_slave_1: entered allmulticast mode
[  114.103947][ T7967] ref_ctr_offset mismatch. inode: 0x5c2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  114.236910][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'.
[  114.240879][ T7969] netlink: 48 bytes leftover after parsing attributes in process `syz.3.852'.
[  114.477272][ T7976] sit0: entered promiscuous mode
[  114.480274][ T7976] sit0: entered allmulticast mode
[  115.400894][ T8003] netlink: 196 bytes leftover after parsing attributes in process `syz.1.867'.
[  115.720067][ T8013] netlink: 2 bytes leftover after parsing attributes in process `syz.2.871'.
[  115.723996][ T8013] batadv_slave_1: entered promiscuous mode
[  116.446086][ T8037] netlink: 'syz.2.880': attribute type 13 has an invalid length.
[  116.953805][ T8055] netlink: 'syz.2.888': attribute type 7 has an invalid length.
[  117.195900][ T8052] netlink: 96 bytes leftover after parsing attributes in process `syz.3.886'.
[  117.199758][ T8052] netlink: 96 bytes leftover after parsing attributes in process `syz.3.886'.
[  117.273019][   T55] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  118.158274][ T8093] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  118.389879][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  118.451569][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'.
[  118.522076][ T8123] netlink: 348 bytes leftover after parsing attributes in process `syz.3.918'.
[  118.525975][ T8122] netlink: 'syz.1.917': attribute type 21 has an invalid length.
[  118.565760][ T8123] lo speed is unknown, defaulting to 1000
[  118.572660][ T8127] netlink: 'syz.2.920': attribute type 1 has an invalid length.
[  118.582480][ T8129] netlink: 'syz.1.921': attribute type 10 has an invalid length.
[  118.586153][ T8129] bridge0: port 3(team0) entered disabled state
[  118.591568][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.674905][ T8129] bridge0: port 3(team0) entered blocking state
[  118.677437][ T8129] bridge0: port 3(team0) entered forwarding state
[  118.680174][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.682784][ T8129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.695033][ T8129] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  118.760329][ T8123] lo speed is unknown, defaulting to 1000
[  118.772167][ T8123] lo speed is unknown, defaulting to 1000
[  118.793593][ T8123] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  118.841016][ T8123] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  118.953141][ T8123] lo speed is unknown, defaulting to 1000
[  118.963811][ T8123] lo speed is unknown, defaulting to 1000
[  118.973273][ T8123] lo speed is unknown, defaulting to 1000
[  120.403290][ T8160] netlink: 'syz.3.934': attribute type 10 has an invalid length.
[  120.457084][ T8164] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  121.217092][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.944'.
[  121.482288][ T8201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.949'.
[  121.554579][ T8203] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.950'.
[  122.098230][ T8211] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.951'.
[  122.102380][ T8211] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.951'.
[  122.139692][ T8211] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.951'.
[  122.470830][ T8227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.958'.
[  123.034930][ T8270] Dead loop on virtual device ip6_vti0, fix it urgently!
[  123.038200][ T8270] Dead loop on virtual device ip6_vti0, fix it urgently!
[  123.040971][ T8270] Dead loop on virtual device ip6_vti0, fix it urgently!
[  123.240585][ T8284] team0: Port device bond0 removed
[  123.250462][ T8284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.263118][ T8284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.270408][ T8284] bond0 (unregistering): Released all slaves
[  123.535563][ T8305] __nla_validate_parse: 8 callbacks suppressed
[  123.535576][ T8305] netlink: 10 bytes leftover after parsing attributes in process `syz.3.993'.
[  123.795877][ T8325] netlink: 'syz.1.1003': attribute type 28 has an invalid length.
[  124.955510][ T8342] netlink: 'syz.2.1011': attribute type 1 has an invalid length.
[  124.962981][ T8342] netlink: 'syz.2.1011': attribute type 2 has an invalid length.
[  125.982650][ T8353] netlink: 'syz.2.1013': attribute type 28 has an invalid length.
[  125.993881][ T8353] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1013'.
[  127.618162][ T8394] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1031'.
[  127.749367][ T8406] netlink: 'syz.1.1037': attribute type 10 has an invalid length.
[  127.752193][ T8406] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1037'.
[  127.753698][ T8404] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1036'.
[  128.016081][ T8424] C: renamed from team_slave_0 (while UP)
[  128.222609][ T8435] netlink: 'syz.2.1050': attribute type 10 has an invalid length.
[  128.311316][ T8442] netlink: 'syz.2.1050': attribute type 10 has an invalid length.
[  128.498572][ T8442] team0: Device hsr_slave_0 failed to register rx_handler
[  128.800125][ T8464] netlink: 'syz.3.1060': attribute type 1 has an invalid length.
[  128.803720][ T8464] netlink: 'syz.3.1060': attribute type 4 has an invalid length.
[  128.806767][ T8464] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1060'.
[  129.431618][ T8456] lo speed is unknown, defaulting to 1000
[  130.058458][ T8492] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1071'.
[  130.223497][ T8500] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1073'.
[  130.443602][ T8502] mac80211_hwsim hwsim7 .3c: renamed from wlan1 (while UP)
[  130.554059][ T8508] netlink: 'syz.1.1077': attribute type 21 has an invalid length.
[  130.557700][ T8508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1077'.
[  130.561059][ T8508] netlink: 'syz.1.1077': attribute type 5 has an invalid length.
[  130.574345][ T8508] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1077'.
[  130.975381][ T8543] netlink: 'syz.1.1093': attribute type 21 has an invalid length.
[  131.081438][ T8549] netlink: 'syz.1.1096': attribute type 14 has an invalid length.
[  131.084842][ T8549] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1096'.
[  131.355436][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  131.864918][ T8570] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  132.336523][ T8585] : port 1(vlan0) entered blocking state
[  132.338507][ T8585] : port 1(vlan0) entered disabled state
[  132.341493][ T8585] vlan0: entered allmulticast mode
[  132.347453][ T8585] veth0_vlan: entered allmulticast mode
[  132.350985][ T8585] vlan0: entered promiscuous mode
[  132.363811][ T8578] : port 1(vlan0) entered blocking state
[  132.367363][ T8578] : port 1(vlan0) entered forwarding state
[  132.396554][ T8597] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  132.439100][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.441695][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.505992][ T8605] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  132.551824][ T8611] netlink: 'syz.2.1123': attribute type 2 has an invalid length.
[  132.648495][   T55] Bluetooth: hci2: adv larger than maximum supported
[  133.685434][ T8647] netlink: 'syz.2.1139': attribute type 1 has an invalid length.
[  133.692700][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1139'.
[  133.740908][ T8651] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1140'.
[  133.797501][   T55] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  133.802223][   T55] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  133.866256][ T8661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'.
[  133.886099][ T8661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'.
[  133.891404][ T8661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'.
[  134.241691][ T8681] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  134.560174][ T8703] syzkaller0: entered promiscuous mode
[  134.562176][ T8703] syzkaller0: entered allmulticast mode
[  134.574439][ T8703] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  134.577616][ T8709] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1167'.
[  134.980560][ T8718] netlink: 'syz.3.1171': attribute type 1 has an invalid length.
[  135.016036][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'.
[  135.109968][ T8725] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.113253][ T8725] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.291406][ T8729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1175'.
[  135.326914][ T8731] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1176'.
[  135.329976][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'.
[  136.001521][ T8736] netlink: 'syz.2.1178': attribute type 10 has an invalid length.
[  136.014789][ T8736] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1178'.
[  136.061398][ T8742] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1181'.
[  136.755564][ T8781] netlink: 'syz.2.1197': attribute type 21 has an invalid length.
[  136.853922][ T8785] netlink: 'syz.3.1199': attribute type 2 has an invalid length.
[  136.857609][ T8785] netlink: 'syz.3.1199': attribute type 8 has an invalid length.
[  138.141846][ T8828] netlink: 'syz.1.1215': attribute type 39 has an invalid length.
[  138.726000][ T8874] netlink: 'syz.1.1238': attribute type 10 has an invalid length.
[  138.740731][ T8874] bridge0: port 3(team0) entered disabled state
[  138.748097][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.911161][ T8884] __nla_validate_parse: 11 callbacks suppressed
[  138.911171][ T8884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1242'.
[  138.951402][ T8888] sit0: left promiscuous mode
[  138.960495][ T8888] sit0: entered promiscuous mode
[  139.123003][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  139.195012][ T8897] netlink: 'syz.1.1248': attribute type 29 has an invalid length.
[  139.199726][ T8897] netlink: 'syz.1.1248': attribute type 29 has an invalid length.
[  139.203227][ T8897] netlink: 'syz.1.1248': attribute type 29 has an invalid length.
[  139.230544][ T8899] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1249'.
[  139.923740][ T8904] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1251'.
[  140.155102][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1253'.
[  140.317101][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  140.490037][ T8923] Dead loop on virtual device ip6_vti0, fix it urgently!
[  140.602025][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1264'.
[  140.730515][ T8947] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  140.743121][ T8949] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1271'.
[  140.797638][ T8953] validate_nla: 1 callbacks suppressed
[  140.797653][ T8953] netlink: 'syz.2.1273': attribute type 2 has an invalid length.
[  140.948873][ T8965] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.1277'.
[  141.009327][ T8976] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1284'.
[  141.478414][ T9009] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  142.235991][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.821049][ T9035] xt_time: unknown flags 0xf4
[  142.986118][ T9039] netlink: 'syz.1.1310': attribute type 2 has an invalid length.
[  142.991975][ T9039] netlink: 'syz.1.1310': attribute type 4 has an invalid length.
[  143.171955][ T9049] netlink: 'syz.3.1313': attribute type 33 has an invalid length.
[  143.257098][ T9037] lo speed is unknown, defaulting to 1000
[  145.129139][ T9115] : renamed from team_slave_1 (while UP)
[  145.954495][ T9134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.957483][ T9134] IPv6: NLM_F_CREATE should be set when creating new route
[  145.960381][ T9134] IPv6: NLM_F_CREATE should be set when creating new route
[  145.963102][ T9134] IPv6: NLM_F_CREATE should be set when creating new route
[  146.044556][ T9138] __nla_validate_parse: 7 callbacks suppressed
[  146.044570][ T9138] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1354'.
[  146.790899][ T9187] netlink: 'syz.3.1371': attribute type 29 has an invalid length.
[  146.800348][ T9187] netlink: 'syz.3.1371': attribute type 29 has an invalid length.
[  146.989522][ T9201] netlink: 'syz.3.1378': attribute type 4 has an invalid length.
[  147.078005][ T9204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1380'.
[  147.287408][ T9218] netlink: 'syz.3.1383': attribute type 2 has an invalid length.
[  147.435528][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'.
[  147.864962][ T9239] lo speed is unknown, defaulting to 1000
[  147.922865][ T9250] openvswitch: netlink: Message has 1 unknown bytes.
[  147.926164][ T9250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.078968][ T9256] veth1_macvtap: left promiscuous mode
[  148.081374][ T9256] macsec0: entered promiscuous mode
[  148.535795][ T9268] netlink: 'syz.2.1399': attribute type 29 has an invalid length.
[  148.868787][ T9272] netlink: 'syz.1.1401': attribute type 1 has an invalid length.
[  148.912104][ T9276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.171256][ T5235] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  149.233880][ T9295] netlink: 'syz.2.1412': attribute type 19 has an invalid length.
[  149.390417][ T9316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1416'.
[  149.405811][ T9316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1416'.
[  149.416123][ T9316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1416'.
[  149.425900][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'.
[  149.428951][ T9322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'.
[  149.455164][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'.
[  149.535020][ T9333] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.552388][ T9333] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.613663][ T9340] delete_channel: no stack
[  149.615704][ T9340] delete_channel: no stack
[  149.784219][ T9358] netlink: 'syz.1.1434': attribute type 7 has an invalid length.
[  149.787932][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1434'.
[  149.942767][ T9372] netlink: 'syz.2.1441': attribute type 21 has an invalid length.
[  150.124102][ T9381] sctp: [Deprecated]: syz.2.1444 (pid 9381) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.124102][ T9381] Use struct sctp_sack_info instead
[  151.290104][ T9411] netlink: 'syz.1.1457': attribute type 10 has an invalid length.
[  151.294258][ T9411] bond0: (slave bond_slave_0): Releasing backup interface
[  152.250450][ T9437] netlink: 'syz.2.1469': attribute type 2 has an invalid length.
[  152.253019][ T9437] netlink: 'syz.2.1469': attribute type 7 has an invalid length.
[  152.266526][ T9437] netlink: 85 bytes leftover after parsing attributes in process `syz.2.1469'.
[  152.269475][ T9437] netlink: 130140 bytes leftover after parsing attributes in process `syz.2.1469'.
[  152.275882][ T9437] netlink: 'syz.2.1469': attribute type 2 has an invalid length.
[  152.282554][ T9439] netlink: 'syz.1.1470': attribute type 11 has an invalid length.
[  152.285388][ T9437] netlink: 'syz.2.1469': attribute type 7 has an invalid length.
[  152.289711][ T9437] netlink: 85 bytes leftover after parsing attributes in process `syz.2.1469'.
[  153.237879][ T5235] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  153.241432][ T5235] Bluetooth: hci1: Injecting HCI hardware error event
[  153.245451][ T5235] Bluetooth: hci1: hardware error 0x00
[  153.298503][ T9456] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1476'.
[  153.572580][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'.
[  153.809968][ T9470] syz.1.1482 (9470) used obsolete PPPIOCDETACH ioctl
[  153.963556][ T9489] : renamed from dummy0 (while UP)
[  154.015506][ T9496] netlink: 211 bytes leftover after parsing attributes in process `syz.1.1492'.
[  154.186333][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'.
[  154.341826][ T9518] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1504'.
[  154.475279][   T55] Bluetooth: hci2: Malformed LE Event: 0x0d
[  154.598573][ T9530] netlink: 'syz.2.1510': attribute type 10 has an invalid length.
[  154.601588][ T9530] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1510'.
[  154.680279][ T9542] netlink: 'syz.3.1515': attribute type 1 has an invalid length.
[  154.683461][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'.
[  154.845844][ T9550] : entered promiscuous mode
[  155.044944][ T9557] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  155.324587][ T5235] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  155.778109][ T9583] netlink: 'syz.1.1534': attribute type 29 has an invalid length.
[  156.205997][ T9606] bridge0: port 3(ip6gretap0) entered disabled state
[  156.208485][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.213613][ T9606] bridge0: entered allmulticast mode
[  156.333902][ T9606] ip6gretap0: left allmulticast mode
[  156.336085][ T9606] ip6gretap0: left promiscuous mode
[  156.342705][ T9606] bridge0: port 3(ip6gretap0) entered disabled state
[  156.393783][ T9606] bridge_slave_1: left allmulticast mode
[  156.398228][ T9606] bridge_slave_1: left promiscuous mode
[  156.403792][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.888897][ T9634] __nla_validate_parse: 6 callbacks suppressed
[  157.888911][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'.
[  158.227145][ T9662] netlink: 'syz.3.1564': attribute type 21 has an invalid length.
[  158.390939][ T9669] netlink: 'syz.2.1566': attribute type 10 has an invalid length.
[  158.393752][ T9669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1566'.
[  158.397755][ T9669] batadv0: entered promiscuous mode
[  158.399691][ T9669] batadv0: entered allmulticast mode
[  158.426836][ T9669] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  158.639555][ T5235] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  158.845965][ T9693] netlink: 'syz.3.1576': attribute type 1 has an invalid length.
[  158.860962][ T9693] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1576'.
[  158.889304][ T9699] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1579'.
[  159.206987][ T9705] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1581'.
[  159.257298][ T9706] netlink: 'syz.3.1581': attribute type 1 has an invalid length.
[  159.259800][ T9706] netlink: 'syz.3.1581': attribute type 2 has an invalid length.
[  160.315898][ T9731] netlink: 'syz.2.1591': attribute type 11 has an invalid length.
[  160.323851][ T9731] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1591'.
[  160.376241][ T9731] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  160.389408][ T9735] netlink: 'syz.1.1593': attribute type 237 has an invalid length.
[  160.414785][ T9730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.839397][ T9769] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1610'.
[  161.154837][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'.
[  161.437057][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'.
[  162.438384][ T9842] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  162.892464][ T9868] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1648'.
[  162.905424][ T9870] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1649'.
[  164.192139][ T9904] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1663'.
[  164.486034][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'.
[  164.494234][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'.
[  164.508663][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'.
[  166.269903][ T5235] Bluetooth: hci0: adv larger than maximum supported
[  166.269947][ T5235] Bluetooth: hci0: Unknown advertising packet type: 0x73
[  166.354406][ T9964] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.360095][ T9964] Dead loop on virtual device ip6_vti0, fix it urgently!
[  166.784336][ T9988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1702'.
[  166.804063][ T9988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1702'.
[  167.728690][T10018] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1717'.
[  167.731933][T10018] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1717'.
[  167.841435][T10028] netlink: 'syz.2.1721': attribute type 3 has an invalid length.
[  167.844858][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1721'.
[  168.330065][T10046] netlink: 'syz.1.1729': attribute type 23 has an invalid length.
[  168.426417][T10053] netlink: 'syz.2.1731': attribute type 7 has an invalid length.
[  168.514610][T10044] lo speed is unknown, defaulting to 1000
[  168.550681][T10065] netlink: 'syz.1.1736': attribute type 6 has an invalid length.
[  168.554547][T10065] netlink: 'syz.1.1736': attribute type 3 has an invalid length.
[  168.559292][T10065] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1736'.
[  168.795222][T10086] netlink: 'syz.1.1746': attribute type 1 has an invalid length.
[  168.799637][T10086] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1746'.
[  168.842281][T10084] netlink: 'syz.2.1745': attribute type 39 has an invalid length.
[  169.810613][T10112] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  169.815406][T10112] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  171.199584][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.245100][T10151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.248218][T10151] IPv6: NLM_F_CREATE should be set when creating new route
[  171.251247][T10151] IPv6: NLM_F_CREATE should be set when creating new route
[  172.152107][T10167] netlink: 'syz.2.1783': attribute type 7 has an invalid length.
[  173.079410][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'.
[  173.254592][T10206] netlink: 'syz.1.1800': attribute type 21 has an invalid length.
[  174.540757][T10281] netlink: 'syz.3.1833': attribute type 29 has an invalid length.
[  174.714330][T10288] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1835'.
[  175.151213][T10304] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.703529][T10330] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.709424][T10330] bridge0: entered allmulticast mode
[  175.804376][T10336] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1849'.
[  176.588491][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1859'.
[  176.592391][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1859'.
[  176.595825][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1859'.
[  178.309287][T10428] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1891'.
[  178.313220][T10428] netlink: 'syz.3.1891': attribute type 1 has an invalid length.
[  178.442120][T10444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1899'.
[  178.676341][T10454] nftables ruleset with unbound chain
[  178.708546][T10442] syzkaller0: entered promiscuous mode
[  178.710566][T10442] syzkaller0: entered allmulticast mode
[  180.235280][T10462] bridge_slave_1: left allmulticast mode
[  180.237623][T10462] bridge_slave_1: left promiscuous mode
[  180.239514][T10462] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.243252][T10462] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.373416][T10474] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1909'.
[  180.523860][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'.
[  180.596559][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  180.712813][T10507] sock: sock_timestamping_bind_phc: sock not bind to device
[  180.821289][T10517] netlink: 495 bytes leftover after parsing attributes in process `syz.2.1929'.
[  180.981095][T10519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.576717][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1944'.
[  181.705058][T10565] netlink: 'syz.2.1951': attribute type 2 has an invalid length.
[  181.711616][T10565] netlink: 'syz.2.1951': attribute type 1 has an invalid length.
[  181.777067][T10570] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1953'.
[  183.219471][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  184.029885][T10632] netlink: 'syz.3.1982': attribute type 1 has an invalid length.
[  184.494793][T10669] netlink: 'syz.2.2000': attribute type 1 has an invalid length.
[  184.597314][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'.
[  184.881847][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'.
[  185.429200][T10732] netlink: 'syz.3.2030': attribute type 1 has an invalid length.
[  185.432572][T10732] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2030'.
[  185.472263][T10736] netlink: 'syz.3.2032': attribute type 21 has an invalid length.
[  185.705736][T10734] delete_channel: no stack
[  185.761500][T10744] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2036'.
[  185.765240][T10734] delete_channel: no stack
[  185.795440][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'.
[  186.227040][ T5235] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10
[  186.441106][T10782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.475861][T10785] netlink: 'syz.2.2054': attribute type 3 has an invalid length.
[  186.484301][T10785] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2054'.
[  186.490046][T10787] netlink: 'syz.1.2055': attribute type 3 has an invalid length.
[  186.493088][T10787] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2055'.
[  186.642553][T10796] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2059'.
[  186.831674][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2070'.
[  187.016945][T10830] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.2076'.
[  187.021276][T10830] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  187.025070][T10830] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  187.040380][T10832] netlink: 'syz.1.2077': attribute type 64 has an invalid length.
[  187.201816][T10839] netlink: 'syz.1.2080': attribute type 1 has an invalid length.
[  187.855110][T10871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.179083][T10881] IPv6: NLM_F_CREATE should be specified when creating new route
[  188.217194][T10887] netlink: 'syz.3.2101': attribute type 3 has an invalid length.
[  188.220862][T10887] netlink: 'syz.3.2101': attribute type 1 has an invalid length.
[  188.224217][T10887] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2101'.
[  189.297518][T10901] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.312350][T10901] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.513570][T10924] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2115'.
[  189.719481][T10946] netlink: 'syz.1.2125': attribute type 4 has an invalid length.
[  190.446002][T10978] -1: renamed from syzkaller0
[  190.561141][T10980] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2141'.
[  190.567324][T10980] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  190.779109][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'.
[  190.783154][T10994] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2147'.
[  190.943537][T11008] netlink: 211 bytes leftover after parsing attributes in process `syz.2.2153'.
[  190.985564][T11013] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2155'.
[  190.987241][T11014] netlink: 'syz.1.2156': attribute type 10 has an invalid length.
[  190.992009][T11010] nftables ruleset with unbound set
[  191.001626][T11014] team0: left allmulticast mode
[  191.003547][T11014] team_slave_0: left allmulticast mode
[  191.005325][T11014] team_slave_1: left allmulticast mode
[  191.012519][T11014] team0: left promiscuous mode
[  191.015408][T11014] team_slave_0: left promiscuous mode
[  191.027025][T11014] team_slave_1: left promiscuous mode
[  191.029568][T11014] bridge0: port 3(team0) entered disabled state
[  191.041170][T11014] 8021q: adding VLAN 0 to HW filter on device team0
[  191.046969][T11014] bond0: (slave team0): Enslaving as an active interface with an up link
[  191.065756][T11018] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2158'.
[  191.072476][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'.
[  191.135562][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'.
[  191.257296][T11035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.290728][T11041] netlink: 'syz.3.2168': attribute type 21 has an invalid length.
[  191.436709][T11047] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2172'.
[  192.345701][T11075] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  192.405130][T11079] netlink: 'syz.2.2184': attribute type 97 has an invalid length.
[  192.412383][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'.
[  192.416322][T11079] netlink: 'syz.2.2184': attribute type 97 has an invalid length.
[  192.981331][T11133] openvswitch: netlink: Message has 16 unknown bytes.
[  192.984334][T11133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.468969][T11162] netlink: 'syz.1.2220': attribute type 10 has an invalid length.
[  193.479958][T11164] netlink: 'syz.3.2221': attribute type 4 has an invalid length.
[  193.483295][T11164] netlink: 'syz.3.2221': attribute type 3 has an invalid length.
[  193.628355][T11183] netlink: 'syz.1.2229': attribute type 3 has an invalid length.
[  193.661458][T11189] unsupported nla_type 52263
[  193.891275][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.893330][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  193.954011][T11215] netlink: 'syz.2.2243': attribute type 21 has an invalid length.
[  194.911928][T11276] validate_nla: 3 callbacks suppressed
[  194.911938][T11276] netlink: 'syz.1.2269': attribute type 1 has an invalid length.
[  195.438379][T11287] sctp: [Deprecated]: syz.2.2274 (pid 11287) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.438379][T11287] Use struct sctp_sack_info instead
[  195.592156][T11295] __nla_validate_parse: 14 callbacks suppressed
[  195.592167][T11295] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2278'.
[  195.600161][T11295] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2278'.
[  195.633523][T11297] netlink: 'syz.2.2279': attribute type 10 has an invalid length.
[  195.636321][T11297] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2279'.
[  195.974742][T11302] lo speed is unknown, defaulting to 1000
[  196.082220][T11325] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2291'.
[  196.337862][T11346] netlink: 'syz.2.2301': attribute type 21 has an invalid length.
[  196.340329][T11346] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2301'.
[  196.404844][T11352] netlink: 'syz.2.2304': attribute type 1 has an invalid length.
[  196.412427][T11350] netlink: 'syz.1.2303': attribute type 29 has an invalid length.
[  196.417947][T11350] netlink: 'syz.1.2303': attribute type 29 has an invalid length.
[  196.428677][T11350] netlink: 'syz.1.2303': attribute type 29 has an invalid length.
[  196.440124][T11350] netlink: 'syz.1.2303': attribute type 29 has an invalid length.
[  197.570893][T11385] delete_channel: no stack
[  197.574231][T11418] syzkaller0: entered promiscuous mode
[  197.581026][T11418] syzkaller0: entered allmulticast mode
[  197.747670][T11435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2337'.
[  197.820886][T11435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2337'.
[  197.890039][T11443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2343'.
[  197.915991][T11443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2343'.
[  197.921762][T11443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2343'.
[  198.115404][T11458] netlink: 'syz.1.2349': attribute type 3 has an invalid length.
[  198.934963][T11510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.794406][T11526] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  199.800049][T11527] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  200.070520][T11533] ==================================================================
[  200.073527][T11533] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  200.076253][T11533] Read of size 2 at addr ffff88803c797bc2 by task syz.2.2380/11533
[  200.079810][T11533] 
[  200.080674][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.2.2380 Not tainted syzkaller #0 PREEMPT(full) 
[  200.080684][T11533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.080689][T11533] Call Trace:
[  200.080694][T11533]  <TASK>
[  200.080698][T11533]  dump_stack_lvl+0x189/0x250
[  200.080710][T11533]  ? __kasan_check_byte+0x12/0x40
[  200.080722][T11533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.080730][T11533]  ? lock_release+0x4b/0x3e0
[  200.080744][T11533]  ? __virt_addr_valid+0x4a5/0x5c0
[  200.080754][T11533]  print_report+0xca/0x240
[  200.080762][T11533]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  200.080768][T11533]  kasan_report+0x118/0x150
[  200.080809][T11533]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  200.080819][T11533]  __xfrm_state_lookup+0x6ad/0x8d0
[  200.080828][T11533]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  200.080838][T11533]  ? xfrm_state_lookup+0x45/0x1e0
[  200.080846][T11533]  xfrm_state_lookup+0x11e/0x1e0
[  200.080856][T11533]  ipcomp4_init_state+0x205/0xb20
[  200.080865][T11533]  ? __xfrm_init_state+0x7ef/0x13f0
[  200.080874][T11533]  __xfrm_init_state+0xa76/0x13f0
[  200.080882][T11533]  ? __xfrm_init_state+0x7ef/0x13f0
[  200.080892][T11533]  xfrm_add_sa+0x2f5b/0x4070
[  200.080901][T11533]  ? __pfx_xfrm_add_sa+0x10/0x10
[  200.080908][T11533]  ? apparmor_capable+0x137/0x1b0
[  200.080918][T11533]  ? __nla_parse+0x40/0x60
[  200.080929][T11533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  200.080937][T11533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  200.080953][T11533]  ? __pfx___mutex_trylock_common+0x10/0x10
[  200.080961][T11533]  ? rcu_is_watching+0x15/0xb0
[  200.080968][T11533]  ? trace_contention_end+0x39/0x120
[  200.080975][T11533]  ? __mutex_lock+0x335/0x1360
[  200.080986][T11533]  netlink_rcv_skb+0x208/0x470
[  200.080997][T11533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  200.081005][T11533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  200.081017][T11533]  ? netlink_deliver_tap+0x2e/0x1b0
[  200.081025][T11533]  ? netlink_deliver_tap+0x2e/0x1b0
[  200.081035][T11533]  xfrm_netlink_rcv+0x79/0x90
[  200.081042][T11533]  netlink_unicast+0x82f/0x9e0
[  200.081052][T11533]  ? __pfx_netlink_unicast+0x10/0x10
[  200.081061][T11533]  ? netlink_sendmsg+0x642/0xb30
[  200.081069][T11533]  ? skb_put+0x11b/0x210
[  200.081077][T11533]  netlink_sendmsg+0x805/0xb30
[  200.081093][T11533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.081103][T11533]  ? aa_sock_msg_perm+0xf1/0x1d0
[  200.081110][T11533]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  200.081118][T11533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.081127][T11533]  __sock_sendmsg+0x21c/0x270
[  200.081138][T11533]  ____sys_sendmsg+0x505/0x830
[  200.081147][T11533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.081156][T11533]  ? import_iovec+0x74/0xa0
[  200.081165][T11533]  ___sys_sendmsg+0x21f/0x2a0
[  200.081173][T11533]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.081189][T11533]  ? __fget_files+0x2a/0x420
[  200.081195][T11533]  ? __fget_files+0x3a0/0x420
[  200.081204][T11533]  __x64_sys_sendmsg+0x19b/0x260
[  200.081210][T11533]  ? clockevents_program_event+0x24d/0x360
[  200.081220][T11533]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  200.081232][T11533]  ? do_syscall_64+0xbe/0x3b0
[  200.081242][T11533]  do_syscall_64+0xfa/0x3b0
[  200.081251][T11533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.081258][T11533]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  200.081265][T11533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.081272][T11533] RIP: 0033:0x7f854918eba9
[  200.081279][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.081285][T11533] RSP: 002b:00007f854a0fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.081294][T11533] RAX: ffffffffffffffda RBX: 00007f85493d5fa0 RCX: 00007f854918eba9
[  200.081299][T11533] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f
[  200.081303][T11533] RBP: 00007f8549211e19 R08: 0000000000000000 R09: 0000000000000000
[  200.081308][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.081312][T11533] R13: 00007f85493d6038 R14: 00007f85493d5fa0 R15: 00007ffdd0f32368
[  200.081322][T11533]  </TASK>
[  200.081325][T11533] 
[  200.215496][T11533] Allocated by task 11154:
[  200.217106][T11533]  kasan_save_track+0x3e/0x80
[  200.218750][T11533]  __kasan_slab_alloc+0x6c/0x80
[  200.220527][T11533]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  200.222441][T11533]  xfrm_state_alloc+0x24/0x2f0
[  200.224227][T11533]  xfrm_add_sa+0x17d1/0x4070
[  200.225804][T11533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  200.227747][T11533]  netlink_rcv_skb+0x208/0x470
[  200.229642][T11533]  xfrm_netlink_rcv+0x79/0x90
[  200.231471][T11533]  netlink_unicast+0x82f/0x9e0
[  200.233150][T11533]  netlink_sendmsg+0x805/0xb30
[  200.234885][T11533]  __sock_sendmsg+0x21c/0x270
[  200.236585][T11533]  ____sys_sendmsg+0x505/0x830
[  200.238565][T11533]  ___sys_sendmsg+0x21f/0x2a0
[  200.240456][T11533]  __x64_sys_sendmsg+0x19b/0x260
[  200.242131][T11533]  do_syscall_64+0xfa/0x3b0
[  200.243768][T11533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.245978][T11533] 
[  200.246823][T11533] Freed by task 10:
[  200.248126][T11533]  kasan_save_track+0x3e/0x80
[  200.249725][T11533]  kasan_save_free_info+0x46/0x50
[  200.251414][T11533]  __kasan_slab_free+0x5b/0x80
[  200.253016][T11533]  kmem_cache_free+0x18f/0x400
[  200.254609][T11533]  xfrm_state_gc_task+0x52d/0x6b0
[  200.256349][T11533]  process_scheduled_works+0xae1/0x17b0
[  200.258209][T11533]  worker_thread+0x8a0/0xda0
[  200.259769][T11533]  kthread+0x711/0x8a0
[  200.261364][T11533]  ret_from_fork+0x3fc/0x770
[  200.262972][T11533]  ret_from_fork_asm+0x1a/0x30
[  200.264772][T11533] 
[  200.265673][T11533] The buggy address belongs to the object at ffff88803c797a80
[  200.265673][T11533]  which belongs to the cache xfrm_state of size 928
[  200.270451][T11533] The buggy address is located 322 bytes inside of
[  200.270451][T11533]  freed 928-byte region [ffff88803c797a80, ffff88803c797e20)
[  200.275089][T11533] 
[  200.275868][T11533] The buggy address belongs to the physical page:
[  200.277865][T11533] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c797600 pfn:0x3c794
[  200.281019][T11533] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  200.283690][T11533] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  200.286237][T11533] page_type: f5(slab)
[  200.287553][T11533] raw: 00fff00000000040 ffff88801e2713c0 dead000000000122 0000000000000000
[  200.290264][T11533] raw: ffff88803c797600 00000000800e0004 00000000f5000000 0000000000000000
[  200.292938][T11533] head: 00fff00000000040 ffff88801e2713c0 dead000000000122 0000000000000000
[  200.295738][T11533] head: ffff88803c797600 00000000800e0004 00000000f5000000 0000000000000000
[  200.298512][T11533] head: 00fff00000000002 ffffea0000f1e501 00000000ffffffff 00000000ffffffff
[  200.301206][T11533] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  200.304196][T11533] page dumped because: kasan: bad access detected
[  200.306647][T11533] page_owner tracks the page as allocated
[  200.308509][T11533] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5909, tgid 5908 (syz.2.3), ts 56802863120, free_ts 0
[  200.314521][T11533]  post_alloc_hook+0x240/0x2a0
[  200.316154][T11533]  get_page_from_freelist+0x21e4/0x22c0
[  200.317997][T11533]  __alloc_frozen_pages_noprof+0x181/0x370
[  200.320133][T11533]  alloc_pages_mpol+0x232/0x4a0
[  200.321817][T11533]  allocate_slab+0x8a/0x370
[  200.323574][T11533]  ___slab_alloc+0xbeb/0x1410
[  200.325188][T11533]  kmem_cache_alloc_noprof+0x283/0x3c0
[  200.327052][T11533]  xfrm_state_alloc+0x24/0x2f0
[  200.328869][T11533]  xfrm_add_sa+0x17d1/0x4070
[  200.330447][T11533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  200.332107][T11533]  netlink_rcv_skb+0x208/0x470
[  200.333810][T11533]  xfrm_netlink_rcv+0x79/0x90
[  200.335462][T11533]  netlink_unicast+0x82f/0x9e0
[  200.337056][T11533]  netlink_sendmsg+0x805/0xb30
[  200.338585][T11533]  __sock_sendmsg+0x21c/0x270
[  200.340041][T11533]  ____sys_sendmsg+0x505/0x830
[  200.341530][T11533] page_owner free stack trace missing
[  200.343196][T11533] 
[  200.343961][T11533] Memory state around the buggy address:
[  200.345706][T11533]  ffff88803c797a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.348291][T11533]  ffff88803c797b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.350820][T11533] >ffff88803c797b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.353324][T11533]                                            ^
[  200.355251][T11533]  ffff88803c797c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.358169][T11533]  ffff88803c797c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.360886][T11533] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  200.383422][T11533] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  200.385748][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.2.2380 Not tainted syzkaller #0 PREEMPT(full) 
[  200.388899][T11533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.392252][T11533] Call Trace:
[  200.393390][T11533]  <TASK>
[  200.394352][T11533]  dump_stack_lvl+0x99/0x250
[  200.395921][T11533]  ? __asan_memcpy+0x40/0x70
[  200.397454][T11533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.399231][T11533]  ? __pfx__printk+0x10/0x10
[  200.400746][T11533]  vpanic+0x281/0x750
[  200.402176][T11533]  ? irqentry_enter+0x3d/0x60
[  200.404143][T11533]  ? __pfx_vpanic+0x10/0x10
[  200.406017][T11533]  ? preempt_schedule_common+0x83/0xd0
[  200.407823][T11533]  ? preempt_schedule+0xae/0xc0
[  200.409498][T11533]  ? __pfx_preempt_schedule+0x10/0x10
[  200.411304][T11533]  panic+0xb9/0xc0
[  200.412713][T11533]  ? __pfx_panic+0x10/0x10
[  200.414199][T11533]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  200.415993][T11533]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  200.417721][T11533]  check_panic_on_warn+0x89/0xb0
[  200.419340][T11533]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  200.421034][T11533]  end_report+0x78/0x160
[  200.422398][T11533]  kasan_report+0x129/0x150
[  200.423840][T11533]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  200.425520][T11533]  __xfrm_state_lookup+0x6ad/0x8d0
[  200.427214][T11533]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  200.429014][T11533]  ? xfrm_state_lookup+0x45/0x1e0
[  200.430697][T11533]  xfrm_state_lookup+0x11e/0x1e0
[  200.432470][T11533]  ipcomp4_init_state+0x205/0xb20
[  200.434546][T11533]  ? __xfrm_init_state+0x7ef/0x13f0
[  200.436719][T11533]  __xfrm_init_state+0xa76/0x13f0
[  200.438500][T11533]  ? __xfrm_init_state+0x7ef/0x13f0
[  200.440141][T11533]  xfrm_add_sa+0x2f5b/0x4070
[  200.441652][T11533]  ? __pfx_xfrm_add_sa+0x10/0x10
[  200.443447][T11533]  ? apparmor_capable+0x137/0x1b0
[  200.445130][T11533]  ? __nla_parse+0x40/0x60
[  200.447024][T11533]  xfrm_user_rcv_msg+0x7a3/0xab0
[  200.449157][T11533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  200.450985][T11533]  ? __pfx___mutex_trylock_common+0x10/0x10
[  200.452887][T11533]  ? rcu_is_watching+0x15/0xb0
[  200.454434][T11533]  ? trace_contention_end+0x39/0x120
[  200.456182][T11533]  ? __mutex_lock+0x335/0x1360
[  200.457759][T11533]  netlink_rcv_skb+0x208/0x470
[  200.459470][T11533]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  200.461281][T11533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  200.463311][T11533]  ? netlink_deliver_tap+0x2e/0x1b0
[  200.465105][T11533]  ? netlink_deliver_tap+0x2e/0x1b0
[  200.466980][T11533]  xfrm_netlink_rcv+0x79/0x90
[  200.468470][T11533]  netlink_unicast+0x82f/0x9e0
[  200.470031][T11533]  ? __pfx_netlink_unicast+0x10/0x10
[  200.471714][T11533]  ? netlink_sendmsg+0x642/0xb30
[  200.473559][T11533]  ? skb_put+0x11b/0x210
[  200.475114][T11533]  netlink_sendmsg+0x805/0xb30
[  200.476799][T11533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.478476][T11533]  ? aa_sock_msg_perm+0xf1/0x1d0
[  200.480051][T11533]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  200.481861][T11533]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.483556][T11533]  __sock_sendmsg+0x21c/0x270
[  200.485377][T11533]  ____sys_sendmsg+0x505/0x830
[  200.487159][T11533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.488922][T11533]  ? import_iovec+0x74/0xa0
[  200.490448][T11533]  ___sys_sendmsg+0x21f/0x2a0
[  200.492334][T11533]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.494071][T11533]  ? __fget_files+0x2a/0x420
[  200.495572][T11533]  ? __fget_files+0x3a0/0x420
[  200.497125][T11533]  __x64_sys_sendmsg+0x19b/0x260
[  200.498959][T11533]  ? clockevents_program_event+0x24d/0x360
[  200.500911][T11533]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  200.502916][T11533]  ? do_syscall_64+0xbe/0x3b0
[  200.504544][T11533]  do_syscall_64+0xfa/0x3b0
[  200.506086][T11533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.508492][T11533]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  200.511114][T11533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.513534][T11533] RIP: 0033:0x7f854918eba9
[  200.515348][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.521380][T11533] RSP: 002b:00007f854a0fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.524063][T11533] RAX: ffffffffffffffda RBX: 00007f85493d5fa0 RCX: 00007f854918eba9
[  200.526538][T11533] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f
[  200.529021][T11533] RBP: 00007f8549211e19 R08: 0000000000000000 R09: 0000000000000000
[  200.531548][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.534353][T11533] R13: 00007f85493d6038 R14: 00007f85493d5fa0 R15: 00007ffdd0f32368
[  200.536920][T11533]  </TASK>
[  200.538632][T11533] Kernel Offset: disabled
[  200.540063][T11533] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:14:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffe8ff1462cb10 RDX=0000000000000000
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=ffffffff8172c195 RSP=ffffc9000259f478
R8 =0000000000000002 R9 =0000000000000000 R10=ffffc9000259f638 R11=ffffffff81ac3930
R12=0000000000000002 R13=ffffffff8e139ea0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5bb8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555893cd500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ea21ff8 CR3=0000000028202000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8174859b ffffffff8133c57e
XMM02=ffffffff81c939bc ffffffff8133c57e XMM03=ffffffff81c939bc ffffffff81c3e915
XMM04=00007f375050d100 00007f374f9a7460 XMM05=00007f374f9a7478 00007f374f9a74c0
XMM06=00007f374f9a74b8 00007f374f9a74b0 XMM07=00007f374f9a74a8 00007f374f9a74a0
XMM08=0000000000000000 00007f374f812ee7 XMM09=0000000000000000 00007f374f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000129c RDI=000000000000129d RBP=00000000000003f8 RSP=ffffc90002a0e930
R8 =ffff8880216a8237 R9 =1ffff110042d5046 R10=dffffc0000000000 R11=ffffffff854f09f0
R12=dffffc0000000000 R13=ffffffff99af9905 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0a6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f854a0fa6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3230fff8 CR3=000000010c9b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f85493a7498 00007f85493a7470 XMM03=00007f85493a74a8 00007f85493a74a0
XMM04=00007f8549f0d100 00007f85493a7460 XMM05=00007f85493a7478 00007f85493a74c0
XMM06=00007f85493a74b8 00007f85493a74b0 XMM07=00007f85493a74a8 00007f85493a74a0
XMM08=0000000000000000 00007f8549212ee7 XMM09=0000000000000000 00007f8549212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
