last executing test programs:

2m8.583495981s ago: executing program 1 (id=135):
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)

2m8.495802557s ago: executing program 1 (id=138):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, &(0x7f0000000600)=ANY=[@ANYBLOB='u'])

2m8.446553585s ago: executing program 1 (id=142):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x15100, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x40)
socket$kcm(0x10, 0x2, 0x10)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x4000)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x8, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x6}]}}, 0x0, 0x26, 0x0, 0x1, 0x6}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001214010027bd7000ffdbdf25080043"], 0x40}, 0x1, 0x0, 0x0, 0x40084}, 0x4008804)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xfe, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xe93, 0x100000001}, 0x20, 0x4, 0x1, 0x2, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

2m7.757951808s ago: executing program 0 (id=157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000700"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m7.6064175s ago: executing program 0 (id=158):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
write$cgroup_int(r1, &(0x7f0000000600), 0x12)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2m7.550187084s ago: executing program 0 (id=159):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x98, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x4)

2m7.496038501s ago: executing program 1 (id=160):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000081401"], 0x20}}, 0xc800)

2m7.441288284s ago: executing program 0 (id=161):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb}, 0x94)

2m7.440847026s ago: executing program 1 (id=162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x7, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0xffffffffffffff3a}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0)

2m7.345574089s ago: executing program 0 (id=164):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})

2m7.344765886s ago: executing program 1 (id=166):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0xfe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)

2m7.269723028s ago: executing program 0 (id=167):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100, 0x2, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86ddfd356fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9c777b801f21fc42abd02c158f01a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m51.651964258s ago: executing program 32 (id=167):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100, 0x2, 0xfffffffe, 0x8, 0x5, 0xfffffffe, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86ddfd356fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9c777b801f21fc42abd02c158f01a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1m51.038088809s ago: executing program 33 (id=166):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0xfe)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x15)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)

57.483631799s ago: executing program 3 (id=655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)

57.382910544s ago: executing program 3 (id=656):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

57.320558443s ago: executing program 3 (id=657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

57.320201853s ago: executing program 3 (id=658):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

57.240831464s ago: executing program 3 (id=659):
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x7fffffffffffffff)

57.085238274s ago: executing program 3 (id=663):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7f76221378c185027e8695c9b07506ed46d4f8bb90883c08e85e058ece62cd797d2c01e6285c77430eec435ac9df6256e121859d8aea507ff8a9dd0694681649d44fbb937398edecbe06096df2e443af0c3f0950301e1128727ba88a063e88f90206dd5f099a1c333114b97e0e1b55106a9755e208651a8f281173d1ed31e62433a766a28c8496f00ad108672a1f6079c10588a7ffb658dd61a6efa4bfa379945659c0ebbeca3f56215413802975d89f0c0131c71169084851cddd8b367738f069955b2d3fcdeba878b6bec8240227ddb9fac4706eb62bc6540a91014cce6987ee604c5f398ae4fef3f501ebad02ba122d7769b603eaddb5f9b101f1b42a931ac50c27feb4b0c703d1b3f9e88eb", 0x1e5}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e6", 0x87}, {&(0x7f00000015c0)}, {&(0x7f0000001740)="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", 0x2f4}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0x2}]}}}], 0x40}, 0x0)

56.82226728s ago: executing program 34 (id=663):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b079dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7f76221378c185027e8695c9b07506ed46d4f8bb90883c08e85e058ece62cd797d2c01e6285c77430eec435ac9df6256e121859d8aea507ff8a9dd0694681649d44fbb937398edecbe06096df2e443af0c3f0950301e1128727ba88a063e88f90206dd5f099a1c333114b97e0e1b55106a9755e208651a8f281173d1ed31e62433a766a28c8496f00ad108672a1f6079c10588a7ffb658dd61a6efa4bfa379945659c0ebbeca3f56215413802975d89f0c0131c71169084851cddd8b367738f069955b2d3fcdeba878b6bec8240227ddb9fac4706eb62bc6540a91014cce6987ee604c5f398ae4fef3f501ebad02ba122d7769b603eaddb5f9b101f1b42a931ac50c27feb4b0c703d1b3f9e88eb", 0x1e5}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e6", 0x87}, {&(0x7f00000015c0)}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6c3f35d859fbc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696b80093da6a97d6c4a54eca89d4979f12acbf89bca0c8cc5f490737b09fd77b8b7fcfa7b94787f81cff59ae583b5309bdb82ff76ceaf739cd254b32cc8e289541b8921aa2aedac4bf6c91c2aab801c4594498ae1c0663d773af1d", 0x2f4}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0x2}]}}}], 0x40}, 0x0)

840.156308ms ago: executing program 5 (id=1312):
socket$kcm(0x29, 0xf, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

839.288393ms ago: executing program 5 (id=1314):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x42}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20)

758.043433ms ago: executing program 2 (id=1318):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x1, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r1, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0xdb, &(0x7f00000006c0), &(0x7f00000007c0)=""/219, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10)

667.124911ms ago: executing program 5 (id=1319):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x4, &(0x7f00000003c0), 0x4)

308.130783ms ago: executing program 5 (id=1321):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=@delsa={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in6=@remote, 0x4d4, 0x8, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x5}}]}, 0x34}}, 0x40)

306.894858ms ago: executing program 5 (id=1323):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2d, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0x3}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}], 0x10, 0x1000000}, 0x94)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20044841)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = socket$kcm(0x10, 0x2, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1b2968150001", @ANYRES16=r5, @ANYBLOB="33f38ed0"], 0xffdd)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r6, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0), 0x4)
openat$cgroup_ro(r1, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random})
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840)
socketpair(0x24, 0xa, 0x3ff, &(0x7f0000000600))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100), 0x1001)

239.704052ms ago: executing program 4 (id=1325):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x8000, 0x0, 0x9, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0)

229.011783ms ago: executing program 2 (id=1326):
mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0xfff0, 0x0)

169.10269ms ago: executing program 2 (id=1327):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10)

168.429503ms ago: executing program 4 (id=1328):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014200000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')

117.253747ms ago: executing program 2 (id=1329):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000002000000000000000000008500000023000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)

116.498346ms ago: executing program 4 (id=1330):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffd, 0x0, 0x4, 0x1}, {0x3, 0x0, 0x5, 0x2}], 0x10, 0x3}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r2, 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

59.837048ms ago: executing program 2 (id=1331):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0)

59.452497ms ago: executing program 4 (id=1332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

59.257601ms ago: executing program 2 (id=1333):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
close(0x3)

59.145642ms ago: executing program 4 (id=1334):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010027bd7000f6dbdfa6040002"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

17.547113ms ago: executing program 4 (id=1335):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')

0s ago: executing program 5 (id=1336):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4)
socket(0x1d, 0x2, 0x6)
r4 = socket$kcm(0x2, 0x5, 0x84)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000cba10000e100000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2, &(0x7f00000002c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44814' (ED25519) to the list of known hosts.
syzkaller login: [   56.349611][ T5828] cgroup: Unknown subsys name 'net'
[   56.465302][ T5828] cgroup: Unknown subsys name 'cpuset'
[   56.469141][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.228028][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.120052][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.401327][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   69.457305][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.460004][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.462746][ T5879] bridge_slave_0: entered allmulticast mode
[   69.465469][ T5879] bridge_slave_0: entered promiscuous mode
[   69.469422][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.471863][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.474333][ T5879] bridge_slave_1: entered allmulticast mode
[   69.477012][ T5879] bridge_slave_1: entered promiscuous mode
[   69.500910][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.506869][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.527113][ T5879] team0: Port device team_slave_0 added
[   69.530354][ T5879] team0: Port device team_slave_1 added
[   69.550272][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.552608][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.560453][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.565459][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.567612][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.575640][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.604005][ T5879] hsr_slave_0: entered promiscuous mode
[   69.606340][ T5879] hsr_slave_1: entered promiscuous mode
[   69.703855][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.709417][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.714483][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.718813][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.738534][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.740841][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.743493][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.745718][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.778352][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.789700][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.793637][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.801877][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   69.808325][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.810589][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.818083][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.820329][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.924117][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.948339][ T5879] veth0_vlan: entered promiscuous mode
[   69.954441][ T5879] veth1_vlan: entered promiscuous mode
[   69.973126][ T5879] veth0_macvtap: entered promiscuous mode
[   69.977239][ T5879] veth1_macvtap: entered promiscuous mode
[   69.992473][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.999432][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.007518][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.010817][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.014093][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.017789][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.564938][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.704191][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.709194][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.723411][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.727792][ T5910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.731134][ T5910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.738104][ T5910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.741226][ T5912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.744883][ T5912] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.760246][ T5912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.764182][ T5912] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.775657][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.785803][ T5910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.843585][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.879676][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.888167][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.891891][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.896681][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.900323][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.180409][ T5911] chnl_net:caif_netlink_parms(): no params data found
[   71.275341][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.277388][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.294486][ T5908] chnl_net:caif_netlink_parms(): no params data found
[   71.351334][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   71.359460][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.363617][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.366555][ T5911] bridge_slave_0: entered allmulticast mode
[   71.370339][ T5911] bridge_slave_0: entered promiscuous mode
[   71.409218][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.412257][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.415239][ T5911] bridge_slave_1: entered allmulticast mode
[   71.419186][ T5911] bridge_slave_1: entered promiscuous mode
[   71.488676][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.493200][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.495867][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.498632][ T5908] bridge_slave_0: entered allmulticast mode
[   71.503358][ T5908] bridge_slave_0: entered promiscuous mode
[   71.514013][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.527884][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.530724][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.534731][ T5908] bridge_slave_1: entered allmulticast mode
[   71.538351][ T5908] bridge_slave_1: entered promiscuous mode
[   71.609400][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.613212][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.616040][ T5915] bridge_slave_0: entered allmulticast mode
[   71.619418][ T5915] bridge_slave_0: entered promiscuous mode
[   71.623983][ T5911] team0: Port device team_slave_0 added
[   71.628471][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.633617][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.637589][ T5911] team0: Port device team_slave_1 added
[   71.639684][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.642348][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.644783][ T5915] bridge_slave_1: entered allmulticast mode
[   71.647996][ T5915] bridge_slave_1: entered promiscuous mode
[   71.729787][ T5908] team0: Port device team_slave_0 added
[   71.732943][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.735581][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.745285][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.751052][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.754716][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.764705][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.771501][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.777435][ T5908] team0: Port device team_slave_1 added
[   71.806654][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.870015][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.872469][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.881192][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.888467][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.890991][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.900536][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.927669][ T5911] hsr_slave_0: entered promiscuous mode
[   71.930819][ T5911] hsr_slave_1: entered promiscuous mode
[   71.933870][ T5911] debugfs: 'hsr0' already exists in 'hsr'
[   71.935701][ T5911] Cannot create hsr debugfs directory
[   71.939276][ T5915] team0: Port device team_slave_0 added
[   71.975050][ T5915] team0: Port device team_slave_1 added
[   72.029996][ T5908] hsr_slave_0: entered promiscuous mode
[   72.033596][ T5908] hsr_slave_1: entered promiscuous mode
[   72.036301][ T5908] debugfs: 'hsr0' already exists in 'hsr'
[   72.038475][ T5908] Cannot create hsr debugfs directory
[   72.067167][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.069967][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.080349][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.103152][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.105972][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.116376][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.231060][ T5915] hsr_slave_0: entered promiscuous mode
[   72.236006][ T5915] hsr_slave_1: entered promiscuous mode
[   72.238152][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   72.239980][ T5915] Cannot create hsr debugfs directory
[   72.364302][ T5911] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.375966][ T5911] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.388210][ T5911] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.399772][ T5911] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.516970][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.536394][ T5911] 8021q: adding VLAN 0 to HW filter on device team0
[   72.546573][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.549403][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.564309][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.567183][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.724511][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.768193][ T5911] veth0_vlan: entered promiscuous mode
[   72.777393][ T5911] veth1_vlan: entered promiscuous mode
[   72.801194][ T5911] veth0_macvtap: entered promiscuous mode
[   72.808873][ T5911] veth1_macvtap: entered promiscuous mode
[   72.824315][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.837249][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.847975][ T5917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.854467][ T5917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.858869][ T5917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.864099][ T5917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.872810][ T5238] Bluetooth: hci1: command tx timeout
[   72.873781][ T5910] Bluetooth: hci0: command tx timeout
[   72.961978][ T5910] Bluetooth: hci2: command tx timeout
[   72.964897][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.967809][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.032409][   T13] bridge_slave_1: left allmulticast mode
[   73.034765][   T13] bridge_slave_1: left promiscuous mode
[   73.037358][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.044339][   T13] bridge_slave_0: left allmulticast mode
[   73.046616][   T13] bridge_slave_0: left promiscuous mode
[   73.049124][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.308468][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.315488][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.320387][   T13] bond0 (unregistering): Released all slaves
[   73.359110][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.368537][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.490080][   T13] hsr_slave_0: left promiscuous mode
[   73.522466][   T13] hsr_slave_1: left promiscuous mode
[   73.525228][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.533265][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.540862][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.551876][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.586484][   T13] veth1_macvtap: left promiscuous mode
[   73.589008][   T13] veth0_macvtap: left promiscuous mode
[   73.609955][   T13] veth1_vlan: left promiscuous mode
[   73.616112][   T13] veth0_vlan: left promiscuous mode
[   74.015431][   T13] team0 (unregistering): Port device team_slave_1 removed
[   74.036689][   T13] team0 (unregistering): Port device team_slave_0 removed
[   74.567009][ T5908] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.597725][ T5908] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.648586][ T5908] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.665900][ T5908] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.736039][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.745606][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.750955][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.762317][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.954156][ T5910] Bluetooth: hci0: command tx timeout
[   74.956411][ T5910] Bluetooth: hci1: command tx timeout
[   74.995413][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.024858][ T5908] 8021q: adding VLAN 0 to HW filter on device team0
[   75.032942][ T5910] Bluetooth: hci2: command tx timeout
[   75.047059][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.049952][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.056625][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.059439][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.120123][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.154226][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   75.168326][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.170988][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.183053][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.185696][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.307520][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.339103][ T5908] veth0_vlan: entered promiscuous mode
[   75.346442][ T5908] veth1_vlan: entered promiscuous mode
[   75.382679][ T5908] veth0_macvtap: entered promiscuous mode
[   75.387293][ T5908] veth1_macvtap: entered promiscuous mode
[   75.394817][  T792] cfg80211: failed to load regulatory.db
[   75.407756][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.423663][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.434952][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.446996][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.457098][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.466435][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.479368][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.560304][ T5915] veth0_vlan: entered promiscuous mode
[   75.580500][ T5915] veth1_vlan: entered promiscuous mode
[   75.597341][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.605073][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.630922][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.635174][ T5915] veth0_macvtap: entered promiscuous mode
[   75.638313][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.647022][ T5915] veth1_macvtap: entered promiscuous mode
[   75.692225][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.707814][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.732833][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.761868][ T5917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.765719][ T5917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.770101][ T5917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.872268][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.875587][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.936068][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.939119][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.071168][ T6008] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.646084][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.051817][ T5910] Bluetooth: hci1: command tx timeout
[   77.054016][ T5910] Bluetooth: hci0: command tx timeout
[   77.129776][ T5238] Bluetooth: hci2: command tx timeout
[   77.205391][    C0] hrtimer: interrupt took 53854 ns
[   77.606671][ T6046] netlink: 'syz.0.40': attribute type 10 has an invalid length.
[   77.624709][ T6046] batman_adv: batadv0: Adding interface: netdevsim0
[   77.627700][ T6046] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.644242][ T6046] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   78.745335][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   78.748880][ T6063] netlink: 312 bytes leftover after parsing attributes in process `syz.2.46'.
[   78.920890][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1209100556 wd_nsec: 1209100800
[   79.099767][ T6064] netlink: 'syz.0.45': attribute type 10 has an invalid length.
[   79.142099][ T5238] Bluetooth: hci0: command tx timeout
[   79.145123][ T5238] Bluetooth: hci1: command tx timeout
[   79.213008][ T5910] Bluetooth: hci2: command tx timeout
[   79.348608][ T6064] bond0: (slave bond_slave_0): Releasing backup interface
[   79.468050][ T6050] syz.1.41 (6050) used greatest stack depth: 19368 bytes left
[   79.784938][ T6081] netlink: 'syz.1.52': attribute type 9 has an invalid length.
[   79.798194][ T6081] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.52'.
[   79.862354][ T6084] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET)
[   80.675446][ T6101] netlink: 360 bytes leftover after parsing attributes in process `syz.1.60'.
[   80.839851][ T6111] vcan0 speed is unknown, defaulting to 1000
[   80.850204][ T6111] vcan0 speed is unknown, defaulting to 1000
[   80.854530][ T6111] vcan0 speed is unknown, defaulting to 1000
[   80.969785][ T6111] infiniband syz1: set active
[   80.972923][  T791] vcan0 speed is unknown, defaulting to 1000
[   80.975564][ T6111] infiniband syz1: added vcan0
[   81.026515][ T6111] RDS/IB: syz1: added
[   81.029256][ T6111] smc: adding ib device syz1 with port count 1
[   81.032827][ T6111] smc:    ib device syz1 port 1 has pnetid 
[   81.037465][  T791] vcan0 speed is unknown, defaulting to 1000
[   81.045938][ T6111] vcan0 speed is unknown, defaulting to 1000
[   81.377227][ T6111] vcan0 speed is unknown, defaulting to 1000
[   81.782474][ T6111] vcan0 speed is unknown, defaulting to 1000
[   81.939175][ T6149] netlink: 180 bytes leftover after parsing attributes in process `syz.2.82'.
[   81.990337][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'.
[   82.529424][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'.
[   82.541066][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'.
[   82.696428][ T6186] Zero length message leads to an empty skb
[   83.082187][ T6193] netlink: 'syz.1.95': attribute type 6 has an invalid length.
[   83.087403][ T6193] netlink: 164 bytes leftover after parsing attributes in process `syz.1.95'.
[   83.214158][ T6200] sctp: [Deprecated]: syz.0.97 (pid 6200) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.214158][ T6200] Use struct sctp_sack_info instead
[   83.605581][ T6206] =======================================================
[   83.605581][ T6206] WARNING: The mand mount option has been deprecated and
[   83.605581][ T6206]          and is ignored by this kernel. Remove the mand
[   83.605581][ T6206]          option from the mount to silence this warning.
[   83.605581][ T6206] =======================================================
[   83.827992][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'.
[   83.851021][ T6209] netlink: 'syz.2.102': attribute type 1 has an invalid length.
[   83.855353][ T6209] netlink: 'syz.2.102': attribute type 2 has an invalid length.
[   84.695943][ T6230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.570845][ T6263] syzkaller0: entered promiscuous mode
[   85.575800][ T6263] syzkaller0: entered allmulticast mode
[   85.989851][ T6272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.994015][ T6272] IPv6: NLM_F_CREATE should be set when creating new route
[   85.997118][ T6272] IPv6: NLM_F_CREATE should be set when creating new route
[   86.000148][ T6272] IPv6: NLM_F_CREATE should be set when creating new route
[   87.081741][ T6276] syz.1.131 (6276) used obsolete PPPIOCDETACH ioctl
[   87.214731][ T6283] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   87.292747][ T6293] netlink: 'syz.0.139': attribute type 1 has an invalid length.
[   87.295305][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'.
[   87.298633][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'.
[   87.303670][ T6292] cgroup2: Unknown parameter 'u'
[   87.445991][ T6304] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.142'.
[   88.382808][ T6345] netlink: 'syz.1.162': attribute type 1 has an invalid length.
[   88.979535][ T6361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.168'.
[  104.184487][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  104.187603][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  104.190264][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  104.193942][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  104.196755][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  104.246496][ T6376] vcan0 speed is unknown, defaulting to 1000
[  104.440605][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  104.444423][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  104.447879][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  104.451798][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  104.456837][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  104.487994][ T6379] vcan0 speed is unknown, defaulting to 1000
[  104.687043][ T6376] chnl_net:caif_netlink_parms(): no params data found
[  106.231867][ T5910] Bluetooth: hci3: command tx timeout
[  106.473657][ T5910] Bluetooth: hci4: command tx timeout
[  108.311905][ T5910] Bluetooth: hci3: command tx timeout
[  108.551928][ T5910] Bluetooth: hci4: command tx timeout
[  110.130158][ T6379] chnl_net:caif_netlink_parms(): no params data found
[  110.392087][ T5910] Bluetooth: hci3: command tx timeout
[  110.450554][ T6406] netlink: 'syz.2.176': attribute type 2 has an invalid length.
[  110.517087][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.520014][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.526629][ T6376] bridge_slave_0: entered allmulticast mode
[  110.530444][ T6376] bridge_slave_0: entered promiscuous mode
[  110.535343][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.538228][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.541248][ T6379] bridge_slave_0: entered allmulticast mode
[  110.546463][ T6379] bridge_slave_0: entered promiscuous mode
[  110.550576][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.553655][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.556549][ T6376] bridge_slave_1: entered allmulticast mode
[  110.560469][ T6376] bridge_slave_1: entered promiscuous mode
[  110.564818][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.567681][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.570696][ T6379] bridge_slave_1: entered allmulticast mode
[  110.575613][ T6379] bridge_slave_1: entered promiscuous mode
[  110.632439][ T5910] Bluetooth: hci4: command tx timeout
[  110.635147][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.660934][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.666035][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.709012][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.723435][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.749122][ T6376] team0: Port device team_slave_0 added
[  110.763369][ T6376] team0: Port device team_slave_1 added
[  110.806385][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.823321][ T6379] team0: Port device team_slave_0 added
[  110.842588][ T6379] team0: Port device team_slave_1 added
[  110.846855][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.849302][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.866076][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.903541][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.916935][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.919724][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.934088][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.991252][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.997476][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.008776][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.041418][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.043716][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.054205][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.067426][   T12] batman_adv: batadv0: Removing interface: netdevsim0
[  111.071158][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.077736][ T6412] netlink: 'syz.2.179': attribute type 10 has an invalid length.
[  111.098831][ T6376] hsr_slave_0: entered promiscuous mode
[  111.104480][ T6376] hsr_slave_1: entered promiscuous mode
[  111.135927][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.154574][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.171242][ T6412] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  111.291296][ T6379] hsr_slave_0: entered promiscuous mode
[  111.293989][ T6379] hsr_slave_1: entered promiscuous mode
[  111.296752][ T6379] debugfs: 'hsr0' already exists in 'hsr'
[  111.299495][ T6379] Cannot create hsr debugfs directory
[  111.366216][ T6414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.180'.
[  111.370158][ T6414] unsupported nlmsg_type 40
[  111.380125][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'.
[  111.383172][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[  111.437333][   T12] bridge_slave_1: left allmulticast mode
[  111.439416][   T12] bridge_slave_1: left promiscuous mode
[  111.441350][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.446159][   T12] bridge_slave_0: left allmulticast mode
[  111.447923][   T12] bridge_slave_0: left promiscuous mode
[  111.449804][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.666274][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.672894][   T12] bond0 (unregistering): Released all slaves
[  111.928699][ T6376] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  111.957793][ T6376] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  112.007016][ T6376] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  112.015871][ T6376] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  112.154961][ T6379] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.177948][ T6379] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.188102][ T6379] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.194817][ T6379] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.301246][   T12] hsr_slave_0: left promiscuous mode
[  112.305828][   T12] hsr_slave_1: left promiscuous mode
[  112.310976][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.313926][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.317624][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.320203][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.339610][   T12] veth1_macvtap: left promiscuous mode
[  112.344778][   T12] veth0_macvtap: left promiscuous mode
[  112.348819][   T12] veth1_vlan: left promiscuous mode
[  112.352178][   T12] veth0_vlan: left promiscuous mode
[  112.481856][ T5910] Bluetooth: hci3: command tx timeout
[  112.666051][   T12] team0 (unregistering): Port device team_slave_1 removed
[  112.704495][   T12] team0 (unregistering): Port device team_slave_0 removed
[  112.722027][ T5910] Bluetooth: hci4: command tx timeout
[  113.028069][   T26] smc: removing ib device syz1
[  113.055003][   T47] vcan0 speed is unknown, defaulting to 1000
[  113.057859][   T47] syz1: Port: 1 Link DOWN
[  113.144258][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.194270][ T6449] netlink: 'syz.2.185': attribute type 7 has an invalid length.
[  113.197215][ T6449] netlink: 64 bytes leftover after parsing attributes in process `syz.2.185'.
[  113.223254][ T6376] 8021q: adding VLAN 0 to HW filter on device team0
[  113.284071][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.286375][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.322845][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.325151][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.335464][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.430072][ T6379] 8021q: adding VLAN 0 to HW filter on device team0
[  113.482065][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.484855][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.491433][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.494115][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.532668][ T6379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  113.536136][ T6379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.668702][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'.
[  113.740224][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.816510][ T6376] veth0_vlan: entered promiscuous mode
[  113.848729][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.854377][ T6376] veth1_vlan: entered promiscuous mode
[  113.949619][ T6376] veth0_macvtap: entered promiscuous mode
[  113.969544][ T6376] veth1_macvtap: entered promiscuous mode
[  114.023101][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.049148][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.070760][ T6482] netlink: 10 bytes leftover after parsing attributes in process `syz.2.190'.
[  114.114878][ T5891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.134847][ T5891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.143956][ T5891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.159149][ T5891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.346399][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.349034][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.418244][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.420751][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.425108][ T6379] veth0_vlan: entered promiscuous mode
[  114.447953][ T6379] veth1_vlan: entered promiscuous mode
[  114.502828][ T6379] veth0_macvtap: entered promiscuous mode
[  114.519564][ T6379] veth1_macvtap: entered promiscuous mode
[  114.578149][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.621436][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.643622][ T6431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.661460][ T5917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.696285][ T5917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.723174][ T5917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.823290][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.836204][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.938591][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.948930][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.153647][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'.
[  115.422278][ T6534] netlink: 'syz.4.208': attribute type 10 has an invalid length.
[  115.683421][ T6542] netlink: 'syz.2.210': attribute type 6 has an invalid length.
[  115.687051][ T6542] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.210'.
[  116.176537][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[  116.310470][ T6549] netlink: 'syz.2.213': attribute type 10 has an invalid length.
[  116.318108][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'.
[  116.347875][ T6549] dummy0: entered promiscuous mode
[  116.361008][ T6549] bridge0: port 3(dummy0) entered blocking state
[  116.364850][ T6549] bridge0: port 3(dummy0) entered disabled state
[  116.369207][ T6549] dummy0: entered allmulticast mode
[  116.430524][ T6549] bridge0: port 3(dummy0) entered blocking state
[  116.434020][ T6549] bridge0: port 3(dummy0) entered forwarding state
[  116.705791][ T6575] sctp: [Deprecated]: syz.4.224 (pid 6575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.705791][ T6575] Use struct sctp_sack_info instead
[  117.177656][ T5910] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  117.462577][ T6596] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  117.685440][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[  117.789967][ T6608] netlink: 260 bytes leftover after parsing attributes in process `syz.3.238'.
[  117.801150][ T6608] netlink: 'syz.3.238': attribute type 1 has an invalid length.
[  118.107882][ T6614] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.240'.
[  118.151325][ T6620] Driver unsupported XDP return value 0 on prog  (id 80) dev N/A, expect packet loss!
[  118.386524][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'.
[  118.798836][ T6612] delete_channel: no stack
[  119.192495][ T5238] Bluetooth: hci4: command tx timeout
[  119.596044][ T6646] netlink: 'syz.3.255': attribute type 2 has an invalid length.
[  119.658664][ T6653] netlink: 'syz.2.258': attribute type 3 has an invalid length.
[  119.668072][ T5238] Bluetooth: hci3: Dropping invalid advertising data
[  119.671263][ T5238] Bluetooth: hci3: Malformed LE Event: 0x02
[  119.810555][ T6660] netlink: 'syz.3.261': attribute type 6 has an invalid length.
[  119.819165][ T6660] netlink: 140 bytes leftover after parsing attributes in process `syz.3.261'.
[  119.941983][ T6665] netlink: 'syz.3.263': attribute type 21 has an invalid length.
[  119.945224][ T6665] netlink: 'syz.3.263': attribute type 20 has an invalid length.
[  120.252434][ T6682] dummy0: left allmulticast mode
[  120.254707][ T6682] bridge0: port 3(dummy0) entered disabled state
[  120.384597][ T6682] bridge_slave_1: left allmulticast mode
[  120.390722][ T6682] bridge_slave_1: left promiscuous mode
[  120.407296][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.465456][ T6682] bridge_slave_0: left allmulticast mode
[  120.470633][ T6682] bridge_slave_0: left promiscuous mode
[  120.475187][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.608260][ T6693] netlink: 'syz.3.273': attribute type 1 has an invalid length.
[  120.727178][ T6697] netlink: 'syz.3.275': attribute type 10 has an invalid length.
[  120.748037][ T6697] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  120.765466][ T6699] netlink: 'syz.4.276': attribute type 19 has an invalid length.
[  120.768517][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.276'.
[  120.881443][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.277'.
[  120.884937][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.4.277'.
[  120.964481][ T6701] veth1_macvtap: left promiscuous mode
[  121.348810][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.283'.
[  121.670940][ T6713] wg2: entered allmulticast mode
[  121.680965][ T6718] wg2: entered promiscuous mode
[  121.982085][ T6734] netlink: 'syz.4.289': attribute type 1 has an invalid length.
[  123.164980][ T6748] netlink: 'syz.2.294': attribute type 16 has an invalid length.
[  123.168597][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.294'.
[  123.594796][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  123.598529][ T6759] netlink: 56 bytes leftover after parsing attributes in process `syz.2.298'.
[  125.268583][ T6784] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.309'.
[  127.414887][ T6798] netlink: 'syz.3.313': attribute type 21 has an invalid length.
[  127.417676][ T6798] netlink: 'syz.3.313': attribute type 6 has an invalid length.
[  127.434843][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.313'.
[  128.300792][ T6837] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  128.539538][ T6852] netlink: 'syz.4.326': attribute type 21 has an invalid length.
[  128.582016][ T6852] netlink: 168 bytes leftover after parsing attributes in process `syz.4.326'.
[  128.708976][ T6860] netlink: 'syz.3.327': attribute type 10 has an invalid length.
[  128.713410][ T6860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'.
[  128.718033][ T6860] ipvlan1: entered promiscuous mode
[  128.720140][ T6860] ipvlan1: entered allmulticast mode
[  128.731989][ T6860] veth0_vlan: entered allmulticast mode
[  128.736559][ T6860] bridge0: port 3(ipvlan1) entered blocking state
[  128.745074][ T6860] bridge0: port 3(ipvlan1) entered disabled state
[  128.750345][ T6860] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  129.876766][ T6880] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  129.956018][ T6881] syzkaller0: entered promiscuous mode
[  129.958769][ T6881] syzkaller0: entered allmulticast mode
[  130.347099][ T6902] netlink: 56429 bytes leftover after parsing attributes in process `syz.2.347'.
[  130.397940][ T6904] lo speed is unknown, defaulting to 1000
[  130.402447][ T6904] lo speed is unknown, defaulting to 1000
[  130.426647][ T6904] lo speed is unknown, defaulting to 1000
[  130.512101][ T6904] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  130.594533][ T6904] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  130.817242][ T6904] lo speed is unknown, defaulting to 1000
[  130.858677][ T6904] lo speed is unknown, defaulting to 1000
[  130.877347][ T6904] lo speed is unknown, defaulting to 1000
[  130.905593][ T6904] lo speed is unknown, defaulting to 1000
[  132.718828][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.720965][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.613149][ T6918] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  133.835142][ T6932] netlink: 'syz.4.361': attribute type 3 has an invalid length.
[  133.886006][ T6932] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.361'.
[  134.039058][ T6936] netlink: 'syz.2.362': attribute type 10 has an invalid length.
[  134.074565][ T6936] netlink: 168 bytes leftover after parsing attributes in process `syz.2.362'.
[  134.285915][ T6939] @: renamed from bond_slave_0 (while UP)
[  134.371020][ T6945] netlink: 'syz.3.364': attribute type 21 has an invalid length.
[  134.376989][ T6945] netlink: 128 bytes leftover after parsing attributes in process `syz.3.364'.
[  135.183659][ T6945] netlink: 'syz.3.364': attribute type 4 has an invalid length.
[  135.498287][ T5238] Bluetooth: hci1: Malformed LE Event: 0x1d
[  135.651439][ T6967] netlink: 'syz.2.373': attribute type 58 has an invalid length.
[  135.657979][ T6967] netlink: 144 bytes leftover after parsing attributes in process `syz.2.373'.
[  135.709103][ T6970] netlink: 76 bytes leftover after parsing attributes in process `syz.2.377'.
[  136.033817][ T5866] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.839390][ T7017] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.398'.
[  136.844666][ T7017] netlink: 'syz.2.398': attribute type 2 has an invalid length.
[  136.847948][ T7017] netlink: 62135 bytes leftover after parsing attributes in process `syz.2.398'.
[  139.610207][ T7047] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.412'.
[  139.616500][ T7047] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.412'.
[  139.632724][ T7046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.411'.
[  139.636641][ T7046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.411'.
[  140.066941][ T7054] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.074395][ T7054] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.289004][ T7070] netlink: 'syz.4.421': attribute type 29 has an invalid length.
[  140.294901][ T7070] netlink: 'syz.4.421': attribute type 29 has an invalid length.
[  140.482863][ T7083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.425'.
[  140.489288][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.3.425'.
[  140.494781][ T7083] netlink: 6 bytes leftover after parsing attributes in process `syz.3.425'.
[  140.498287][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'.
[  140.502146][ T7083] netlink: 128092 bytes leftover after parsing attributes in process `syz.3.425'.
[  140.620355][ T7090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.430'.
[  140.679304][ T7054] syz.2.415 (7054) used greatest stack depth: 16696 bytes left
[  141.905173][ T7115] netlink: 'syz.2.441': attribute type 3 has an invalid length.
[  142.518225][ T7148] netlink: 'syz.2.455': attribute type 2 has an invalid length.
[  144.868334][ T7186] syz.3.471: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  144.918716][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.3.471 Not tainted syzkaller #0 PREEMPT(full) 
[  144.918738][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.918750][ T7186] Call Trace:
[  144.918757][ T7186]  <TASK>
[  144.918766][ T7186]  dump_stack_lvl+0x189/0x250
[  144.918803][ T7186]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.918823][ T7186]  ? __pfx__printk+0x10/0x10
[  144.918843][ T7186]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.918861][ T7186]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.918879][ T7186]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  144.918899][ T7186]  warn_alloc+0x214/0x310
[  144.918915][ T7186]  ? stack_depot_save_flags+0x40/0x860
[  144.918940][ T7186]  ? __pfx_warn_alloc+0x10/0x10
[  144.918957][ T7186]  ? kasan_save_track+0x4f/0x80
[  144.918979][ T7186]  ? xskq_create+0x56/0x170
[  144.918992][ T7186]  ? xsk_init_queue+0xb0/0x110
[  144.919004][ T7186]  ? xsk_setsockopt+0x57b/0x8d0
[  144.919023][ T7186]  ? do_sock_setsockopt+0x17c/0x1b0
[  144.919039][ T7186]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  144.919055][ T7186]  ? do_syscall_64+0xfa/0x3b0
[  144.919071][ T7186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.919092][ T7186]  __vmalloc_node_range_noprof+0x125/0x12f0
[  144.919135][ T7186]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.919163][ T7186]  ? __kasan_kmalloc+0x93/0xb0
[  144.919185][ T7186]  vmalloc_user_noprof+0xad/0xf0
[  144.919207][ T7186]  ? xskq_create+0xbf/0x170
[  144.919222][ T7186]  xskq_create+0xbf/0x170
[  144.919239][ T7186]  xsk_init_queue+0xb0/0x110
[  144.919279][ T7186]  xsk_setsockopt+0x57b/0x8d0
[  144.919306][ T7186]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.919330][ T7186]  ? __pfx_aa_sk_perm+0x10/0x10
[  144.919347][ T7186]  ? __fget_files+0x2a/0x420
[  144.919358][ T7186]  ? aa_sock_opt_perm+0xff/0x1b0
[  144.919376][ T7186]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  144.919396][ T7186]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.919420][ T7186]  do_sock_setsockopt+0x17c/0x1b0
[  144.919441][ T7186]  __x64_sys_setsockopt+0x13f/0x1b0
[  144.919464][ T7186]  do_syscall_64+0xfa/0x3b0
[  144.919481][ T7186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.919496][ T7186]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  144.919524][ T7186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.919541][ T7186] RIP: 0033:0x7f28dcd8eba9
[  144.919557][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.919572][ T7186] RSP: 002b:00007f28ddb79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.919590][ T7186] RAX: ffffffffffffffda RBX: 00007f28dcfd5fa0 RCX: 00007f28dcd8eba9
[  144.919601][ T7186] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  144.919611][ T7186] RBP: 00007f28dce11e19 R08: 0000000000000004 R09: 0000000000000000
[  144.919620][ T7186] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  144.919629][ T7186] R13: 00007f28dcfd6038 R14: 00007f28dcfd5fa0 R15: 00007ffc80ccf498
[  144.919652][ T7186]  </TASK>
[  144.920021][ T7186] Mem-Info:
[  145.060219][ T7194] lo: entered allmulticast mode
[  145.063852][ T7186] active_anon:5649 inactive_anon:0 isolated_anon:0
[  145.063852][ T7186]  active_file:13696 inactive_file:38293 isolated_file:0
[  145.063852][ T7186]  unevictable:1768 dirty:314 writeback:0
[  145.063852][ T7186]  slab_reclaimable:10008 slab_unreclaimable:56389
[  145.063852][ T7186]  mapped:18137 shmem:2447 pagetables:1060
[  145.063852][ T7186]  sec_pagetables:0 bounce:0
[  145.063852][ T7186]  kernel_misc_reclaimable:0
[  145.063852][ T7186]  free:284497 free_pcp:15178 free_cma:0
[  145.079915][ T7186] Node 0 active_anon:13356kB inactive_anon:0kB active_file:48264kB inactive_file:9256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:66800kB dirty:1216kB writeback:0kB shmem:5120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6864kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  145.088691][ T7194] lo: entered promiscuous mode
[  145.090917][ T7186] Node 1 active_anon:9240kB inactive_anon:0kB active_file:6520kB inactive_file:143916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5816kB dirty:40kB writeback:0kB shmem:4668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5200kB pagetables:1512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  145.093871][ T7194] lo: left allmulticast mode
[  145.113152][ T7186] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.127940][ T7186] lowmem_reserve[]: 0 811 811 811 811
[  145.135014][ T7186] Node 0 DMA32 free:297168kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13356kB inactive_anon:0kB active_file:48264kB inactive_file:9256kB unevictable:3536kB writepending:1216kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:21068kB local_pcp:6460kB free_cma:0kB
[  145.149816][ T7186] lowmem_reserve[]: 0 0 0 0 0
[  145.153103][ T7186] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  145.167676][ T7186] lowmem_reserve[]: 0 0 854 854 854
[  145.182839][ T7186] Node 1 Normal free:366968kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9240kB inactive_anon:0kB active_file:6520kB inactive_file:143916kB unevictable:3536kB writepending:40kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39032kB local_pcp:16140kB free_cma:0kB
[  145.205317][ T7186] lowmem_reserve[]: 0 0 0 0 0
[  145.208970][ T7186] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  145.217128][ T7196] __nla_validate_parse: 3 callbacks suppressed
[  145.217142][ T7196] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.476'.
[  145.223016][ T7186] Node 0 DMA32: 2*4kB (UM) 279*8kB (ME) 343*16kB (UME) 503*32kB (UME) 255*64kB (UM) 164*128kB (UM) 16*256kB (UM) 9*512kB (UME) 14*1024kB (UME) 4*2048kB (UM) 50*4096kB (M) = 297168kB
[  145.235579][ T7186] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  145.243474][ T7186] Node 1 Normal: 662*4kB (UME) 720*8kB (UME) 1040*16kB (UME) 404*32kB (UME) 238*64kB (UME) 125*128kB (UME) 68*256kB (UME) 29*512kB (UME) 13*1024kB (UME) 3*2048kB (M) 60*4096kB (M) = 366680kB
[  145.257699][ T7196] netlink: 5 bytes leftover after parsing attributes in process `syz.2.476'.
[  145.284614][ T7186] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  145.287890][ T7186] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  145.305834][ T7186] 54436 total pagecache pages
[  145.309491][ T7186] 0 pages in swap cache
[  145.312643][ T7186] Free swap  = 124996kB
[  145.314365][ T7186] Total swap = 124996kB
[  145.316416][ T7186] 786301 pages RAM
[  145.317797][ T7186] 0 pages HighMem/MovableOnly
[  145.320588][ T7186] 241347 pages reserved
[  145.332340][ T7186] 0 pages cma reserved
[  146.669562][ T7267] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.507'.
[  149.514005][ T7320] syzkaller0: entered promiscuous mode
[  149.516214][ T7320] syzkaller0: entered allmulticast mode
[  150.889912][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'.
[  150.894048][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'.
[  151.231813][ T7352] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  151.568731][ T7373] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[  151.571168][ T7373] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.552'.
[  151.615044][ T7377] netlink: 'syz.2.554': attribute type 160 has an invalid length.
[  151.657107][ T7382] netlink: 14 bytes leftover after parsing attributes in process `syz.2.557'.
[  151.660333][ T7383] : renamed from veth0_to_bond (while UP)
[  151.660411][ T7382] openvswitch: netlink: Message has 4 unknown bytes.
[  151.794449][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.562'.
[  151.916317][ T7401] 0: renamed from bond_slave_1 (while UP)
[  151.943934][ T7405] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.568'.
[  152.188313][ T7413] netlink: 64 bytes leftover after parsing attributes in process `syz.2.572'.
[  152.769837][ T7437] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.581'.
[  153.076108][ T7448] netlink: 'syz.2.586': attribute type 2 has an invalid length.
[  153.078835][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.2.586'.
[  153.523583][ T7457] lo speed is unknown, defaulting to 1000
[  154.154412][ T7478] netlink: 'syz.4.598': attribute type 3 has an invalid length.
[  154.158590][ T7478] netlink: 'syz.4.598': attribute type 6 has an invalid length.
[  154.162666][ T7478] netlink: 'syz.4.598': attribute type 8 has an invalid length.
[  154.166256][ T7478] netlink: 'syz.4.598': attribute type 10 has an invalid length.
[  154.170946][ T7478] netlink: 'syz.4.598': attribute type 11 has an invalid length.
[  154.173933][ T7478] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.598'.
[  156.035919][ T7549] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  156.040008][ T7549] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  156.153858][ T7555] siw: device registration error -23
[  156.310994][ T7560] __nla_validate_parse: 4 callbacks suppressed
[  156.311010][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'.
[  156.344950][ T7560] : entered promiscuous mode
[  156.526436][ T7567] tap0: tun_chr_ioctl cmd 2148553947
[  157.561160][ T7585] netlink: 'syz.3.645': attribute type 10 has an invalid length.
[  158.299150][ T7580] lo speed is unknown, defaulting to 1000
[  158.978830][ T5866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.084267][ T5866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.106933][ T5910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.110819][ T5910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.114985][ T5910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.118226][ T5910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.133704][ T5910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.160922][ T5866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.173481][ T7638] netlink: 14 bytes leftover after parsing attributes in process `syz.2.669'.
[  159.255364][ T7638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.262128][ T7638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.267813][ T7638] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  159.273782][ T7638] bond0 (unregistering): Released all slaves
[  159.377219][ T5866] bond0: (slave netdevsim0): Releasing backup interface
[  159.381492][ T5866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.391320][ T7641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'.
[  159.396018][ T7641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'.
[  159.399290][ T7633] lo speed is unknown, defaulting to 1000
[  159.549951][ T7649] netlink: 'syz.2.673': attribute type 5 has an invalid length.
[  159.737902][ T5866] bridge_slave_1: left allmulticast mode
[  159.741221][ T5866] bridge_slave_1: left promiscuous mode
[  159.744598][ T7647] netlink: 'syz.4.671': attribute type 9 has an invalid length.
[  159.747048][ T7647] netlink: 211924 bytes leftover after parsing attributes in process `syz.4.671'.
[  159.757025][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.786882][ T5866] bridge_slave_0: left allmulticast mode
[  159.789243][ T5866] bridge_slave_0: left promiscuous mode
[  159.803707][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.915821][ T7661] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.675'.
[  159.923432][ T7661] netlink: 'syz.4.675': attribute type 4 has an invalid length.
[  160.051402][ T7666] netlink: 'syz.4.675': attribute type 10 has an invalid length.
[  160.272946][ T5866] bond0 (unregistering): (slave 5@): Releasing backup interface
[  160.278400][ T5866] bond0 (unregistering): (slave 0): Releasing backup interface
[  160.283456][ T5866] bond0 (unregistering): Released all slaves
[  160.322770][ T7666] team0: Port device dummy0 added
[  160.329292][ T7633] chnl_net:caif_netlink_parms(): no params data found
[  160.551466][ T7669] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  160.608536][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'.
[  160.661961][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[  160.679904][ T7633] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.685239][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.701296][ T7633] bridge_slave_0: entered allmulticast mode
[  160.704703][ T7633] bridge_slave_0: entered promiscuous mode
[  160.795693][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.798000][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.800286][ T7633] bridge_slave_1: entered allmulticast mode
[  160.803438][ T7633] bridge_slave_1: entered promiscuous mode
[  160.841699][ T5866] hsr_slave_0: left promiscuous mode
[  160.843772][ T5866] hsr_slave_1: left promiscuous mode
[  160.845807][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.848116][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.850854][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.854214][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.875899][ T5866] veth1_macvtap: left promiscuous mode
[  160.877820][ T5866] veth0_macvtap: left promiscuous mode
[  160.880104][ T5866] veth1_vlan: left promiscuous mode
[  160.889556][ T5866] veth0_vlan: left promiscuous mode
[  161.191887][ T5910] Bluetooth: hci0: command tx timeout
[  163.271771][ T5910] Bluetooth: hci0: command tx timeout
[  164.239943][ T5866] team0 (unregistering): Port device team_slave_1 removed
[  164.270127][ T5866] team0 (unregistering): Port device team_slave_0 removed
[  164.524574][ T7633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.531410][   T47] lo speed is unknown, defaulting to 1000
[  164.534693][ T7693] : renamed from team_slave_1 (while UP)
[  164.536398][   T47] infiniband syz2: ib_query_port failed (-19)
[  164.542390][ T7633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.634928][ T7633] team0: Port device team_slave_0 added
[  164.639607][ T7633] team0: Port device team_slave_1 added
[  164.643915][ T7695] syzkaller0: entered promiscuous mode
[  164.645669][ T7695] syzkaller0: entered allmulticast mode
[  164.719316][ T7633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.721789][ T7633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.737439][ T7633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.742309][ T7633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.744909][ T7633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.754782][ T7633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.804125][ T7633] hsr_slave_0: entered promiscuous mode
[  164.806563][ T7633] hsr_slave_1: entered promiscuous mode
[  165.167902][ T7633] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  165.195227][ T7633] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  165.211046][ T7633] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  165.225597][ T7633] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  165.353545][ T5238] Bluetooth: hci0: command tx timeout
[  165.358971][ T7633] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.383829][ T7633] 8021q: adding VLAN 0 to HW filter on device team0
[  165.405854][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.408064][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.416691][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.419021][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.460539][ T7633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.550583][ T7755] netlink: 2 bytes leftover after parsing attributes in process `syz.4.700'.
[  165.695007][ T5910] Bluetooth: hci1: adv larger than maximum supported
[  165.698053][ T7633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.894774][ T7633] veth0_vlan: entered promiscuous mode
[  165.900395][ T7633] veth1_vlan: entered promiscuous mode
[  165.949378][ T7633] veth0_macvtap: entered promiscuous mode
[  165.954635][ T7633] veth1_macvtap: entered promiscuous mode
[  165.972101][ T7633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.980292][ T7633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.989625][ T5917] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.996628][ T5917] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.999356][ T5917] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.023806][ T5917] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.067060][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.070370][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.106013][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.109326][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.131469][ T7794] netlink: 'syz.2.713': attribute type 29 has an invalid length.
[  166.136410][ T7794] netlink: 'syz.2.713': attribute type 29 has an invalid length.
[  166.140966][ T7794] netlink: 'syz.2.713': attribute type 29 has an invalid length.
[  166.157427][ T7794] netlink: 'syz.2.713': attribute type 29 has an invalid length.
[  166.163013][ T7796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.666'.
[  166.329454][ T7810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.718'.
[  166.380217][ T7814] C: renamed from team_slave_0 (while UP)
[  166.401102][ T7814] netlink: 'syz.4.722': attribute type 3 has an invalid length.
[  166.407970][ T7814] netlink: 152 bytes leftover after parsing attributes in process `syz.4.722'.
[  166.585798][ T7828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.727'.
[  166.852274][ T7840] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.732'.
[  166.856451][ T7839] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.732'.
[  166.860353][ T7840] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.732'.
[  166.920928][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'.
[  166.924548][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'.
[  167.147544][ T7859] netlink: 'syz.4.740': attribute type 21 has an invalid length.
[  167.299643][ T7872] netlink: 'syz.4.747': attribute type 41 has an invalid length.
[  167.445490][ T5910] Bluetooth: hci0: command tx timeout
[  167.466860][ T7882] netlink: 'syz.2.751': attribute type 10 has an invalid length.
[  167.535212][ T7882] team0: Port device geneve1 added
[  167.970975][ T7903] netlink: 'syz.2.761': attribute type 23 has an invalid length.
[  168.307651][ T7911] netlink: 'syz.4.763': attribute type 1 has an invalid length.
[  168.335603][ T7911] openvswitch: netlink: Key type 10768 is out of range max 32
[  171.220156][ T7930] __nla_validate_parse: 9 callbacks suppressed
[  171.220170][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.771'.
[  171.383886][ T7940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.776'.
[  171.386627][ T7940] netlink: 35 bytes leftover after parsing attributes in process `syz.5.776'.
[  171.389331][ T7940] netlink: 35 bytes leftover after parsing attributes in process `syz.5.776'.
[  171.425559][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'.
[  171.429078][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'.
[  171.437378][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.2.775'.
[  171.629576][ T7952] tap0: tun_chr_ioctl cmd 1074025672
[  171.631446][ T7952] tap0: ignored: set checksum enabled
[  171.829751][ T7974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.791'.
[  171.832674][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'.
[  171.961187][ T7984] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.796'.
[  172.658403][ T8010] netlink: 'syz.5.806': attribute type 10 has an invalid length.
[  173.356964][ T8006] delete_channel: no stack
[  173.916137][ T8050] netlink: 'syz.2.825': attribute type 10 has an invalid length.
[  175.910049][ T8125] netlink: 'syz.4.855': attribute type 2 has an invalid length.
[  176.160466][ T8139] netlink: zone id is out of range
[  176.166531][ T8139] netlink: zone id is out of range
[  176.168370][ T8139] netlink: zone id is out of range
[  176.170059][ T8139] netlink: zone id is out of range
[  176.187036][ T8139] netlink: zone id is out of range
[  176.188757][ T8139] netlink: zone id is out of range
[  176.190356][ T8139] netlink: zone id is out of range
[  176.194042][ T8139] netlink: zone id is out of range
[  176.195698][ T8139] netlink: zone id is out of range
[  176.197570][ T8139] netlink: zone id is out of range
[  177.341712][ T8169] netlink: 'syz.5.875': attribute type 21 has an invalid length.
[  177.344554][ T8169] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.350039][ T8169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.352406][ T8169] IPv6: NLM_F_CREATE should be set when creating new route
[  177.354773][ T8169] IPv6: NLM_F_CREATE should be set when creating new route
[  177.357271][ T8169] IPv6: NLM_F_CREATE should be set when creating new route
[  177.525702][ T8183] __nla_validate_parse: 11 callbacks suppressed
[  177.525714][ T8183] netlink: 52 bytes leftover after parsing attributes in process `syz.5.880'.
[  177.786844][ T8190] netlink: 'syz.2.882': attribute type 29 has an invalid length.
[  177.869247][ T8201] unsupported nla_type 52263
[  179.425261][ T5910] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  180.549031][ T8297] netlink: 112 bytes leftover after parsing attributes in process `syz.2.922'.
[  180.726630][ T8307] xt_time: invalid argument - start or stop time greater than 23:59:59
[  181.245913][ T8320] netlink: 'syz.5.931': attribute type 12 has an invalid length.
[  181.248678][ T8320] netlink: 132 bytes leftover after parsing attributes in process `syz.5.931'.
[  181.479704][ T8341] sit0: entered allmulticast mode
[  181.517544][ T5910] Bluetooth: hci0: command tx timeout
[  182.437100][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.944'.
[  182.790273][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'.
[  182.799251][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'.
[  182.960559][ T5910] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11
[  183.310683][ T8373] netlink: 'syz.5.953': attribute type 10 has an invalid length.
[  183.347554][ T8373] netlink: 2 bytes leftover after parsing attributes in process `syz.5.953'.
[  183.354344][ T8373] bond0: entered promiscuous mode
[  183.358806][ T8373] bond_slave_0: entered promiscuous mode
[  183.369746][ T8373] bond_slave_1: entered promiscuous mode
[  183.390359][ T8373] bridge0: port 3(bond0) entered blocking state
[  183.404162][ T8373] bridge0: port 3(bond0) entered disabled state
[  183.421139][ T8373] bond0: entered allmulticast mode
[  183.430573][ T8373] bond_slave_0: entered allmulticast mode
[  183.438096][ T8373] bond_slave_1: entered allmulticast mode
[  183.478586][ T8373] bridge0: port 3(bond0) entered blocking state
[  183.481128][ T8373] bridge0: port 3(bond0) entered forwarding state
[  183.521137][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'.
[  184.373541][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'.
[  184.376237][ T8409] netlink: 6 bytes leftover after parsing attributes in process `syz.2.969'.
[  185.350682][ T8435] netlink: 'syz.4.980': attribute type 21 has an invalid length.
[  186.243574][ T8435] netlink: 'syz.4.980': attribute type 1 has an invalid length.
[  186.246718][ T8435] netlink: 132 bytes leftover after parsing attributes in process `syz.4.980'.
[  189.306201][ T8488] netlink: 'syz.4.1003': attribute type 3 has an invalid length.
[  189.309756][ T8488] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1003'.
[  189.357827][ T8488] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1003'.
[  189.424671][ T8488] team0: Port device dummy0 removed
[  189.506022][ T8503] net_ratelimit: 76 callbacks suppressed
[  189.506060][ T8503] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  190.665555][ T8526] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.1019'.
[  191.563804][ T8550] netlink: 'syz.4.1028': attribute type 4 has an invalid length.
[  191.665207][ T8557] netlink: 'syz.2.1032': attribute type 1 has an invalid length.
[  191.668136][ T8557] netlink: 'syz.2.1032': attribute type 4 has an invalid length.
[  191.670643][ T8557] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1032'.
[  191.675779][ T8557] netlink: 'syz.2.1032': attribute type 1 has an invalid length.
[  191.678390][ T8557] netlink: 'syz.2.1032': attribute type 4 has an invalid length.
[  191.680917][ T8557] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1032'.
[  191.954973][   T33] audit: type=1107 audit(1757866372.336:2): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':8=5MHCIT2x'!{x5	E&'
[  192.259497][ T8575] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.1040'.
[  192.358290][ T8583] Dead loop on virtual device ip6_vti0, fix it urgently!
[  192.474575][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.206140][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1054'.
[  193.211386][ T8609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1054'.
[  193.218114][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1054'.
[  193.370577][ T8610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.436221][ T8595] delete_channel: no stack
[  194.316953][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.320098][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.422421][ T5917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.557300][ T5917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.618676][ T8633] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1062'.
[  194.726357][ T5917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.815359][ T5917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.966988][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'.
[  195.034253][ T5917] bridge_slave_1: left allmulticast mode
[  195.036745][ T5917] bridge_slave_1: left promiscuous mode
[  195.040217][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.056824][ T5917] bridge_slave_0: left allmulticast mode
[  195.059267][ T5917] bridge_slave_0: left promiscuous mode
[  195.065820][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.088355][ T8648] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1069'.
[  195.156208][ T8651] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1069'.
[  195.176722][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1069'.
[  195.843685][ T5238] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  196.100231][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.114802][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.121178][ T5917] bond0 (unregistering): Released all slaves
[  196.422701][ T5910] Bluetooth: hci1: command 0x0406 tx timeout
[  196.759169][ T8693] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  196.772137][ T8693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.018888][ T5917] hsr_slave_0: left promiscuous mode
[  197.050259][ T5917] hsr_slave_1: left promiscuous mode
[  197.054383][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.057311][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.095019][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.097921][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.168609][ T5917] veth1_macvtap: left promiscuous mode
[  197.196060][ T5917] veth0_macvtap: left promiscuous mode
[  197.198478][ T5917] veth1_vlan: left promiscuous mode
[  197.200613][ T5917] veth0_vlan: left promiscuous mode
[  197.940366][ T5917] team0 (unregistering): Port device team_slave_1 removed
[  197.977314][ T5917] team0 (unregistering): Port device team_slave_0 removed
[  198.424544][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.559752][ T8741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.644344][ T8746] netlink: 'syz.4.1102': attribute type 10 has an invalid length.
[  198.647257][ T8746] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1102'.
[  198.683537][ T8746] team0: entered promiscuous mode
[  198.685191][ T8746] C: entered promiscuous mode
[  198.692174][ T8746] : entered promiscuous mode
[  198.694404][ T8746] bridge0: port 3(team0) entered blocking state
[  198.699120][ T8746] bridge0: port 3(team0) entered disabled state
[  198.722868][ T8746] team0: entered allmulticast mode
[  198.727663][ T8746] C: entered allmulticast mode
[  198.741164][ T8746] : entered allmulticast mode
[  198.749560][ T8746] bridge0: port 3(team0) entered blocking state
[  198.752130][ T8746] bridge0: port 3(team0) entered forwarding state
[  199.004294][ T8756] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1106'.
[  200.174419][ T8790] netlink: 'syz.4.1114': attribute type 6 has an invalid length.
[  200.177830][ T8790] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1114'.
[  200.684098][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'.
[  201.210899][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  201.311242][ T8820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1126'.
[  201.476583][ T8833] netlink: 'syz.5.1132': attribute type 21 has an invalid length.
[  201.479403][ T8833] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1132'.
[  201.721841][ T5910] Bluetooth: hci0: ISO packet for unknown connection handle 0
[  201.724875][ T5910] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  202.587317][ T8878] C: renamed from team_slave_0 (while UP)
[  202.593110][ T8878] netlink: 'syz.5.1152': attribute type 3 has an invalid length.
[  202.596302][ T8878] netlink: 'syz.5.1152': attribute type 1 has an invalid length.
[  202.600215][ T8878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  204.037963][ T8915] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1166'.
[  204.147646][ T8921] netlink: 'syz.4.1169': attribute type 2 has an invalid length.
[  205.085719][ T8925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1170'.
[  205.119806][ T8927] netlink: 'syz.5.1171': attribute type 3 has an invalid length.
[  205.143209][ T8927] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1171'.
[  205.151282][ T8929] veth1_macvtap: left promiscuous mode
[  205.155084][ T8929] macsec0: entered promiscuous mode
[  205.994273][ T8969] netlink: 5844 bytes leftover after parsing attributes in process `syz.4.1189'.
[  206.398591][ T8996] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1199'.
[  206.799046][ T9013] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1207'.
[  207.563307][ T9042] netlink: 'syz.4.1220': attribute type 3 has an invalid length.
[  207.565935][ T9042] netlink: 'syz.4.1220': attribute type 1 has an invalid length.
[  207.568384][ T9042] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1220'.
[  207.956905][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.961066][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.964792][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.968364][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.971804][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.975013][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.978550][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.982154][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.985716][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  207.989350][ T9055] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  208.199196][ T9065] netlink: 'syz.5.1231': attribute type 4 has an invalid length.
[  208.450905][ T9069] pim6reg1: entered promiscuous mode
[  208.453707][ T9069] pim6reg1: entered allmulticast mode
[  209.338991][ T9082] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1238'.
[  209.939301][ T9110] netlink: 'syz.2.1250': attribute type 10 has an invalid length.
[  209.988999][ T9114] netlink: 'syz.5.1252': attribute type 7 has an invalid length.
[  210.766038][ T9147] netlink: 'syz.2.1261': attribute type 21 has an invalid length.
[  210.768601][ T9147] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1261'.
[  210.958175][ T9158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1264'.
[  210.967881][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1264'.
[  210.978107][ T9157] syzkaller0: tun_chr_ioctl cmd 1074025677
[  210.990879][ T9157] syzkaller0: linktype set to 768
[  211.354498][ T9186] netlink: 'syz.5.1275': attribute type 2 has an invalid length.
[  211.730904][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'.
[  211.835417][ T9206] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1283'.
[  212.053452][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1285'.
[  212.849970][ T9234] netlink: 'syz.4.1293': attribute type 29 has an invalid length.
[  212.864635][ T9234] netlink: 'syz.4.1293': attribute type 29 has an invalid length.
[  212.876028][ T9234] netlink: 'syz.4.1293': attribute type 29 has an invalid length.
[  214.867761][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1311'.
[  214.975329][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'.
[  215.844898][ T9333] ==================================================================
[  215.848128][ T9333] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  215.851209][ T9333] Read of size 2 at addr ffff888032adee42 by task syz.5.1336/9333
[  215.854481][ T9333] 
[  215.855701][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.5.1336 Not tainted syzkaller #0 PREEMPT(full) 
[  215.855715][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  215.855722][ T9333] Call Trace:
[  215.855728][ T9333]  <TASK>
[  215.855734][ T9333]  dump_stack_lvl+0x189/0x250
[  215.855750][ T9333]  ? __kasan_check_byte+0x12/0x40
[  215.855765][ T9333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.855775][ T9333]  ? lock_release+0x4b/0x3e0
[  215.855793][ T9333]  ? __virt_addr_valid+0x4a5/0x5c0
[  215.855805][ T9333]  print_report+0xca/0x240
[  215.855814][ T9333]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  215.855824][ T9333]  kasan_report+0x118/0x150
[  215.855835][ T9333]  ? seqcount_lockdep_reader_access+0x17d/0x1c0
[  215.855846][ T9333]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  215.855859][ T9333]  __xfrm_state_lookup+0x6ad/0x8d0
[  215.855871][ T9333]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  215.855883][ T9333]  xfrm_state_add+0x27d/0xc40
[  215.855895][ T9333]  xfrm_add_sa+0x35a1/0x4070
[  215.855909][ T9333]  ? __pfx_xfrm_add_sa+0x10/0x10
[  215.855920][ T9333]  ? __pfx_xfrm_add_sa+0x10/0x10
[  215.855958][ T9333]  xfrm_user_rcv_msg+0x7a3/0xab0
[  215.855972][ T9333]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  215.855993][ T9333]  ? __pfx___mutex_trylock_common+0x10/0x10
[  215.856004][ T9333]  ? rcu_is_watching+0x15/0xb0
[  215.856014][ T9333]  ? trace_contention_end+0x39/0x120
[  215.856023][ T9333]  ? __mutex_lock+0x335/0x1350
[  215.856034][ T9333]  netlink_rcv_skb+0x208/0x470
[  215.856044][ T9333]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  215.856057][ T9333]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  215.856070][ T9333]  xfrm_netlink_rcv+0x79/0x90
[  215.856082][ T9333]  netlink_unicast+0x82f/0x9e0
[  215.856091][ T9333]  ? __pfx_netlink_unicast+0x10/0x10
[  215.856099][ T9333]  ? netlink_sendmsg+0x642/0xb30
[  215.856108][ T9333]  ? skb_put+0x11b/0x210
[  215.856119][ T9333]  netlink_sendmsg+0x805/0xb30
[  215.856129][ T9333]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.856138][ T9333]  ? aa_sock_msg_perm+0xf1/0x1d0
[  215.856148][ T9333]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  215.856157][ T9333]  ? __pfx_netlink_sendmsg+0x10/0x10
[  215.856166][ T9333]  __sock_sendmsg+0x21c/0x270
[  215.856179][ T9333]  ____sys_sendmsg+0x505/0x830
[  215.856191][ T9333]  ? __pfx_____sys_sendmsg+0x10/0x10
[  215.856205][ T9333]  ? import_iovec+0x74/0xa0
[  215.856217][ T9333]  ___sys_sendmsg+0x21f/0x2a0
[  215.856228][ T9333]  ? __pfx____sys_sendmsg+0x10/0x10
[  215.856245][ T9333]  ? __fget_files+0x2a/0x420
[  215.856253][ T9333]  ? __fget_files+0x3a0/0x420
[  215.856261][ T9333]  __x64_sys_sendmsg+0x19b/0x260
[  215.856271][ T9333]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  215.856286][ T9333]  do_syscall_64+0xfa/0x3b0
[  215.856296][ T9333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.856305][ T9333]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  215.856314][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.856322][ T9333] RIP: 0033:0x7f739538eba9
[  215.856332][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.856340][ T9333] RSP: 002b:00007f739612e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  215.856350][ T9333] RAX: ffffffffffffffda RBX: 00007f73955d5fa0 RCX: 00007f739538eba9
[  215.856358][ T9333] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007
[  215.856363][ T9333] RBP: 00007f7395411e19 R08: 0000000000000000 R09: 0000000000000000
[  215.856369][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  215.856374][ T9333] R13: 00007f73955d6038 R14: 00007f73955d5fa0 R15: 00007ffc57f63578
[  215.856383][ T9333]  </TASK>
[  215.856387][ T9333] 
[  215.977468][ T9333] Allocated by task 9200:
[  215.979005][ T9333]  kasan_save_track+0x3e/0x80
[  215.980662][ T9333]  __kasan_slab_alloc+0x6c/0x80
[  215.982366][ T9333]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  215.984283][ T9333]  xfrm_state_alloc+0x24/0x2f0
[  215.985945][ T9333]  __find_acq_core+0x8a7/0x1c00
[  215.987640][ T9333]  xfrm_find_acq+0x78/0xa0
[  215.989100][ T9333]  xfrm_alloc_userspi+0x6b3/0xc90
[  215.990851][ T9333]  xfrm_user_rcv_msg+0x7a3/0xab0
[  215.992640][ T9333]  netlink_rcv_skb+0x208/0x470
[  215.994264][ T9333]  xfrm_netlink_rcv+0x79/0x90
[  215.995892][ T9333]  netlink_unicast+0x82f/0x9e0
[  215.997577][ T9333]  netlink_sendmsg+0x805/0xb30
[  215.999255][ T9333]  __sock_sendmsg+0x21c/0x270
[  216.000945][ T9333]  ____sys_sendmsg+0x505/0x830
[  216.002613][ T9333]  ___sys_sendmsg+0x21f/0x2a0
[  216.004301][ T9333]  __x64_sys_sendmsg+0x19b/0x260
[  216.006066][ T9333]  do_syscall_64+0xfa/0x3b0
[  216.007685][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.009781][ T9333] 
[  216.010615][ T9333] Freed by task 792:
[  216.012031][ T9333]  kasan_save_track+0x3e/0x80
[  216.013720][ T9333]  kasan_save_free_info+0x46/0x50
[  216.015553][ T9333]  __kasan_slab_free+0x5b/0x80
[  216.017275][ T9333]  kmem_cache_free+0x18f/0x400
[  216.018966][ T9333]  xfrm_state_gc_task+0x52d/0x6b0
[  216.020764][ T9333]  process_scheduled_works+0xae1/0x17b0
[  216.022749][ T9333]  worker_thread+0x8a0/0xda0
[  216.024410][ T9333]  kthread+0x711/0x8a0
[  216.025854][ T9333]  ret_from_fork+0x439/0x7d0
[  216.027502][ T9333]  ret_from_fork_asm+0x1a/0x30
[  216.029217][ T9333] 
[  216.030086][ T9333] The buggy address belongs to the object at ffff888032aded00
[  216.030086][ T9333]  which belongs to the cache xfrm_state of size 928
[  216.034907][ T9333] The buggy address is located 322 bytes inside of
[  216.034907][ T9333]  freed 928-byte region [ffff888032aded00, ffff888032adf0a0)
[  216.039710][ T9333] 
[  216.040605][ T9333] The buggy address belongs to the physical page:
[  216.042885][ T9333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032aded00 pfn:0x32adc
[  216.046439][ T9333] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  216.049421][ T9333] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  216.052093][ T9333] page_type: f5(slab)
[  216.053537][ T9333] raw: 00fff00000000040 ffff88801cbbe3c0 dead000000000122 0000000000000000
[  216.056238][ T9333] raw: ffff888032aded00 00000000800e0008 00000000f5000000 0000000000000000
[  216.058864][ T9333] head: 00fff00000000040 ffff88801cbbe3c0 dead000000000122 0000000000000000
[  216.061537][ T9333] head: ffff888032aded00 00000000800e0008 00000000f5000000 0000000000000000
[  216.064208][ T9333] head: 00fff00000000002 ffffea0000cab701 00000000ffffffff 00000000ffffffff
[  216.066909][ T9333] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  216.069940][ T9333] page dumped because: kasan: bad access detected
[  216.071885][ T9333] page_owner tracks the page as allocated
[  216.073681][ T9333] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6027, tgid 6024 (syz.2.33), ts 76603565776, free_ts 76543863256
[  216.079481][ T9333]  post_alloc_hook+0x240/0x2a0
[  216.080998][ T9333]  get_page_from_freelist+0x21e4/0x22c0
[  216.082696][ T9333]  __alloc_frozen_pages_noprof+0x181/0x370
[  216.084517][ T9333]  alloc_pages_mpol+0x232/0x4a0
[  216.086059][ T9333]  allocate_slab+0x8a/0x370
[  216.087470][ T9333]  ___slab_alloc+0xbeb/0x1420
[  216.088982][ T9333]  kmem_cache_alloc_noprof+0x283/0x3c0
[  216.090673][ T9333]  xfrm_state_alloc+0x24/0x2f0
[  216.092184][ T9333]  xfrm_add_sa+0x17d1/0x4070
[  216.093582][ T9333]  xfrm_user_rcv_msg+0x7a3/0xab0
[  216.095443][ T9333]  netlink_rcv_skb+0x208/0x470
[  216.097104][ T9333]  xfrm_netlink_rcv+0x79/0x90
[  216.098856][ T9333]  netlink_unicast+0x82f/0x9e0
[  216.100589][ T9333]  netlink_sendmsg+0x805/0xb30
[  216.102426][ T9333]  __sock_sendmsg+0x21c/0x270
[  216.104192][ T9333]  ____sys_sendmsg+0x505/0x830
[  216.105904][ T9333] page last free pid 5828 tgid 5828 stack trace:
[  216.107855][ T9333]  __free_frozen_pages+0xbc4/0xd30
[  216.109469][ T9333]  __slab_free+0x303/0x3c0
[  216.110939][ T9333]  qlist_free_all+0x97/0x140
[  216.112425][ T9333]  kasan_quarantine_reduce+0x148/0x160
[  216.114128][ T9333]  __kasan_slab_alloc+0x22/0x80
[  216.115677][ T9333]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  216.117519][ T9333]  __alloc_skb+0x112/0x2d0
[  216.118933][ T9333]  tcp_stream_alloc_skb+0x3d/0x340
[  216.120530][ T9333]  tcp_sendmsg_locked+0xf38/0x5620
[  216.122112][ T9333]  tcp_sendmsg+0x2f/0x50
[  216.123431][ T9333]  __sock_sendmsg+0x19c/0x270
[  216.124903][ T9333]  sock_write_iter+0x258/0x330
[  216.126424][ T9333]  vfs_write+0x5c9/0xb30
[  216.127745][ T9333]  ksys_write+0x145/0x250
[  216.129113][ T9333]  do_syscall_64+0xfa/0x3b0
[  216.130536][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.132366][ T9333] 
[  216.133124][ T9333] Memory state around the buggy address:
[  216.134873][ T9333]  ffff888032aded00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.137520][ T9333]  ffff888032aded80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.140106][ T9333] >ffff888032adee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.142713][ T9333]                                            ^
[  216.144762][ T9333]  ffff888032adee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.147528][ T9333]  ffff888032adef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  216.150520][ T9333] ==================================================================
[  216.153974][ T9333] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  216.156504][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: syz.5.1336 Not tainted syzkaller #0 PREEMPT(full) 
[  216.159367][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.162514][ T9333] Call Trace:
[  216.163577][ T9333]  <TASK>
[  216.164511][ T9333]  dump_stack_lvl+0x99/0x250
[  216.165963][ T9333]  ? __asan_memcpy+0x40/0x70
[  216.167462][ T9333]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.169107][ T9333]  ? __pfx__printk+0x10/0x10
[  216.170489][ T9333]  vpanic+0x281/0x750
[  216.172026][ T9333]  ? __pfx_vpanic+0x10/0x10
[  216.173857][ T9333]  ? irqentry_exit+0x74/0x90
[  216.175740][ T9333]  panic+0xb9/0xc0
[  216.177293][ T9333]  ? __pfx_panic+0x10/0x10
[  216.179105][ T9333]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  216.181512][ T9333]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  216.183842][ T9333]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  216.185977][ T9333]  check_panic_on_warn+0x89/0xb0
[  216.187999][ T9333]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  216.190126][ T9333]  end_report+0x78/0x160
[  216.191727][ T9333]  kasan_report+0x129/0x150
[  216.193515][ T9333]  ? seqcount_lockdep_reader_access+0x17d/0x1c0
[  216.196025][ T9333]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  216.198168][ T9333]  __xfrm_state_lookup+0x6ad/0x8d0
[  216.200260][ T9333]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  216.202519][ T9333]  xfrm_state_add+0x27d/0xc40
[  216.204417][ T9333]  xfrm_add_sa+0x35a1/0x4070
[  216.205951][ T9333]  ? __pfx_xfrm_add_sa+0x10/0x10
[  216.207932][ T9333]  ? __pfx_xfrm_add_sa+0x10/0x10
[  216.209927][ T9333]  xfrm_user_rcv_msg+0x7a3/0xab0
[  216.211605][ T9333]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  216.213709][ T9333]  ? __pfx___mutex_trylock_common+0x10/0x10
[  216.216086][ T9333]  ? rcu_is_watching+0x15/0xb0
[  216.217680][ T9333]  ? trace_contention_end+0x39/0x120
[  216.219328][ T9333]  ? __mutex_lock+0x335/0x1350
[  216.220827][ T9333]  netlink_rcv_skb+0x208/0x470
[  216.222319][ T9333]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  216.224219][ T9333]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  216.226361][ T9333]  xfrm_netlink_rcv+0x79/0x90
[  216.228185][ T9333]  netlink_unicast+0x82f/0x9e0
[  216.229678][ T9333]  ? __pfx_netlink_unicast+0x10/0x10
[  216.231454][ T9333]  ? netlink_sendmsg+0x642/0xb30
[  216.233000][ T9333]  ? skb_put+0x11b/0x210
[  216.234318][ T9333]  netlink_sendmsg+0x805/0xb30
[  216.235927][ T9333]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.237574][ T9333]  ? aa_sock_msg_perm+0xf1/0x1d0
[  216.239135][ T9333]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  216.240802][ T9333]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.242447][ T9333]  __sock_sendmsg+0x21c/0x270
[  216.244041][ T9333]  ____sys_sendmsg+0x505/0x830
[  216.245593][ T9333]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.247294][ T9333]  ? import_iovec+0x74/0xa0
[  216.248721][ T9333]  ___sys_sendmsg+0x21f/0x2a0
[  216.250213][ T9333]  ? __pfx____sys_sendmsg+0x10/0x10
[  216.252306][ T9333]  ? __fget_files+0x2a/0x420
[  216.254161][ T9333]  ? __fget_files+0x3a0/0x420
[  216.255686][ T9333]  __x64_sys_sendmsg+0x19b/0x260
[  216.257623][ T9333]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  216.259811][ T9333]  do_syscall_64+0xfa/0x3b0
[  216.261661][ T9333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.264036][ T9333]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  216.266507][ T9333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.268873][ T9333] RIP: 0033:0x7f739538eba9
[  216.270690][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.277627][ T9333] RSP: 002b:00007f739612e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.280962][ T9333] RAX: ffffffffffffffda RBX: 00007f73955d5fa0 RCX: 00007f739538eba9
[  216.283384][ T9333] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007
[  216.286556][ T9333] RBP: 00007f7395411e19 R08: 0000000000000000 R09: 0000000000000000
[  216.289699][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.292841][ T9333] R13: 00007f73955d6038 R14: 00007f73955d5fa0 R15: 00007ffc57f63578
[  216.296017][ T9333]  </TASK>
[  216.297833][ T9333] Kernel Offset: disabled
[  216.299205][ T9333] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:13:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001ca4 RDI=0000000000001ca5 RBP=00000000000003f8 RSP=ffffc90002cde9d0
R8 =ffff888106628237 R9 =1ffff11020cc5046 R10=dffffc0000000000 R11=ffffffff854f9f00
R12=dffffc0000000000 R13=ffffffff99b02908 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9f7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f739612e6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a2847 CR3=00000000210ee000 CR4=000006f0
DR0=0000200000000300 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7395412e53
XMM06=0000000000000000 00007f7395412e4d XMM07=0000000000000000 00007f7395412e61
XMM08=0000000000000000 00007f7395412ee7 XMM09=0000000000000000 00007f7395412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=6cc01692baa59700 RBX=ffffffff819695f8 RCX=6cc01692baa59700 RDX=0000000000000001
RSI=ffffffff8d9ba186 RDI=ffffffff8be33e00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a830 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f739612dfc8 CR3=000000010921c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f90961a7498 00007f90961a7470 XMM03=00007f90961a74a8 00007f90961a74a0
XMM04=00007f9096d0d100 00007f90961a7460 XMM05=00007f90961a7478 00007f90961a74c0
XMM06=00007f90961a74b8 00007f90961a74b0 XMM07=00007f90961a74a8 00007f90961a74a0
XMM08=993944b9c532a4cd d5571bbe5c71aeac XMM09=0000000000000000 00007f9096012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
