last executing test programs:

2m24.898977465s ago: executing program 1 (id=666):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f0000000040), 0x4)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf58382ffe83fdd83}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x1402, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4c000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000001a80)=ANY=[], &(0x7f0000001b40)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d3c4, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2m22.610586172s ago: executing program 1 (id=667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)

2m22.519613111s ago: executing program 1 (id=668):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12585, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000600040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2m22.450551111s ago: executing program 1 (id=670):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x5, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000001001"], 0x20}, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0)

2m22.369329106s ago: executing program 1 (id=671):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m22.150838576s ago: executing program 1 (id=676):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)

2m6.731422237s ago: executing program 32 (id=676):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)

1m54.087598986s ago: executing program 0 (id=1020):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m54.027918649s ago: executing program 0 (id=1023):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10062)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0, 0x3}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r2, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48)

1m53.966604375s ago: executing program 2 (id=1024):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r2 = socket$kcm(0x11, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{}, 0x0, 0x0}, 0x20)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000059)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m53.795943246s ago: executing program 0 (id=1027):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020310000e0000002cbd7000fedbdf2505000600100000000a000000000000000000000000000000000000000000000103000000000000000200010000000000000007080000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0)

1m53.795667777s ago: executing program 0 (id=1028):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0xeff, 0x0, [@sadb_key={0x3, 0x9, 0x48, 0x0, "234c2741702c8b8371"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private=0x20}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x68}, 0x1, 0x7}, 0x0)

1m53.783226555s ago: executing program 2 (id=1029):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x31, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c)

1m53.736297426s ago: executing program 2 (id=1030):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m53.607705618s ago: executing program 2 (id=1032):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m53.548707695s ago: executing program 2 (id=1033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x0)

1m53.346052926s ago: executing program 0 (id=1034):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

1m53.268404427s ago: executing program 2 (id=1035):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44000)

1m53.207224117s ago: executing program 33 (id=1035):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44000)

1m52.97878209s ago: executing program 0 (id=1037):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

1m52.975872659s ago: executing program 34 (id=1037):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

3.987685222s ago: executing program 5 (id=2434):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', @multicast})

3.339481923s ago: executing program 5 (id=2436):
socket$key(0xf, 0x3, 0x2)
r0 = perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x80, 0x8, 0x3, 0x3, 0x6, 0x0, 0x5, 0x80800, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x12, 0x3ff, 0x3, 0x3, 0x7, 0x6, 0x3, 0x0, 0x2, 0x0, 0x8000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xab, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2000, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0xa)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x95, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x1d5cb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x0, 0x98, 0x0, 0x2, 0xfffff271, 0x8fe, 0x0, 0x0, 0x0, 0xe4ee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980))
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={0x0, 0x0, 0x10}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1012, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b545", 0x17}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001140))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

2.639631405s ago: executing program 5 (id=2442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x20)

2.539384528s ago: executing program 5 (id=2445):
perf_event_open(&(0x7f0000000040)={0x2, 0x97, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x8}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000380)=@getae={0x40, 0x1f, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0xa, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x20048000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000010000002004e24ac1e00010000000000000000030006003c200000020000fc34000010000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, 0x1403, 0x401, 0x70bd26, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008085}, 0x0)

1.519793841s ago: executing program 3 (id=2453):
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x44008001)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket(0x1d, 0x2, 0x6)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000)
close(0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xffffffffffffaae0}, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.329391664s ago: executing program 3 (id=2455):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000005}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeae)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r3}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0))

1.078643936s ago: executing program 3 (id=2460):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x1000, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4)

990.27568ms ago: executing program 4 (id=2462):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf7ff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100))

989.980164ms ago: executing program 3 (id=2463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x9, 0x0, 0xd56}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38)

760.688788ms ago: executing program 4 (id=2464):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="baa3", 0x2}], 0x1}, 0x400c000)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0)

715.252113ms ago: executing program 5 (id=2465):
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r1 = socket$kcm(0x2c, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)

714.943295ms ago: executing program 4 (id=2466):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xade}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)

123.047095ms ago: executing program 5 (id=2467):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r4, r4]}}], 0x18, 0x4000808}, 0x8000)

47.8532ms ago: executing program 3 (id=2468):
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6)

47.524411ms ago: executing program 4 (id=2469):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002980)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000002f40)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x40088d0)

47.194678ms ago: executing program 3 (id=2470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "2a8e27e2fa"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)

370.743µs ago: executing program 4 (id=2471):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

0s ago: executing program 4 (id=2472):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a000000050001000600000014000780080006402000000008000840", @ANYRESOCT=r3], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x34, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40943' (ED25519) to the list of known hosts.
syzkaller login: [   56.497359][ T5786] cgroup: Unknown subsys name 'net'
[   56.625020][ T5786] cgroup: Unknown subsys name 'cpuset'
[   56.630876][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.401801][ T5786] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.803745][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.807543][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.811070][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.815190][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.818605][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.904842][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.908384][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.912274][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.916135][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.919212][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.933506][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.937305][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.940880][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.944559][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.947928][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.114807][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   65.234964][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.238523][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.242576][ T5848] bridge_slave_0: entered allmulticast mode
[   65.246790][ T5848] bridge_slave_0: entered promiscuous mode
[   65.273838][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.276924][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.280137][ T5848] bridge_slave_1: entered allmulticast mode
[   65.284432][ T5848] bridge_slave_1: entered promiscuous mode
[   65.332120][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.357879][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.369106][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.430652][ T5848] team0: Port device team_slave_0 added
[   65.444231][ T5848] team0: Port device team_slave_1 added
[   65.488525][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.491355][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.502135][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.510765][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.528111][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.531115][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.539968][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.642602][ T5848] hsr_slave_0: entered promiscuous mode
[   65.645777][ T5848] hsr_slave_1: entered promiscuous mode
[   65.648909][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.653141][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.656164][ T5854] bridge_slave_0: entered allmulticast mode
[   65.660099][ T5854] bridge_slave_0: entered promiscuous mode
[   65.679544][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.683007][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.685917][ T5854] bridge_slave_1: entered allmulticast mode
[   65.689916][ T5854] bridge_slave_1: entered promiscuous mode
[   65.770675][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.795353][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.798435][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.802468][ T5852] bridge_slave_0: entered allmulticast mode
[   65.806414][ T5852] bridge_slave_0: entered promiscuous mode
[   65.812736][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.816462][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.819448][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.822457][ T5852] bridge_slave_1: entered allmulticast mode
[   65.826429][ T5852] bridge_slave_1: entered promiscuous mode
[   65.908716][ T5854] team0: Port device team_slave_0 added
[   65.915038][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.920907][ T5854] team0: Port device team_slave_1 added
[   65.931588][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.010252][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.013008][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.024466][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.035995][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.038821][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.049525][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.056938][ T5852] team0: Port device team_slave_0 added
[   66.063142][ T5852] team0: Port device team_slave_1 added
[   66.118167][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.122656][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.132793][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.180957][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.183730][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.196019][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.217709][ T5854] hsr_slave_0: entered promiscuous mode
[   66.221459][ T5854] hsr_slave_1: entered promiscuous mode
[   66.224398][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   66.226819][ T5854] Cannot create hsr debugfs directory
[   66.331579][ T5852] hsr_slave_0: entered promiscuous mode
[   66.334052][ T5852] hsr_slave_1: entered promiscuous mode
[   66.336332][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   66.338495][ T5852] Cannot create hsr debugfs directory
[   66.361853][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.381720][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.404096][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.427820][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.590893][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.598124][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.607129][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.617082][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.686087][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.699895][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.706011][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.721851][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.755905][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.801213][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.814138][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.817017][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.840983][ T5239] Bluetooth: hci0: command tx timeout
[   66.851008][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.853595][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.875384][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.904809][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.918991][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.929369][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.931726][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.947562][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.950519][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.978185][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.999479][ T5239] Bluetooth: hci2: command tx timeout
[   67.001451][ T5239] Bluetooth: hci1: command tx timeout
[   67.013860][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.044039][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.046816][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.056633][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.059737][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.071695][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.111336][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.204475][ T5848] veth0_vlan: entered promiscuous mode
[   67.222074][ T5848] veth1_vlan: entered promiscuous mode
[   67.261232][ T5848] veth0_macvtap: entered promiscuous mode
[   67.265404][ T5848] veth1_macvtap: entered promiscuous mode
[   67.294512][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.313382][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.320703][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.333360][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.341236][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.344881][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.352539][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.356962][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.428986][ T5854] veth0_vlan: entered promiscuous mode
[   67.468747][ T5852] veth0_vlan: entered promiscuous mode
[   67.477170][ T5854] veth1_vlan: entered promiscuous mode
[   67.486614][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.495990][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.505981][ T5852] veth1_vlan: entered promiscuous mode
[   67.545710][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.553417][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.581412][ T5854] veth0_macvtap: entered promiscuous mode
[   67.593996][ T5854] veth1_macvtap: entered promiscuous mode
[   67.615015][ T5852] veth0_macvtap: entered promiscuous mode
[   67.624438][ T5852] veth1_macvtap: entered promiscuous mode
[   67.645523][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.648232][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.658748][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.667955][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.684729][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.705437][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.726403][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.731681][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.748365][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.762753][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.775710][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.804226][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.831699][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.910373][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.913759][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.981048][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.984292][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.007342][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.020743][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.073362][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.077388][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.325056][ T5922] Zero length message leads to an empty skb
[   68.469327][    C1] hrtimer: interrupt took 35892 ns
[   68.725825][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'.
[   68.746331][ T5932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'.
[   68.752795][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'.
[   68.808954][ T5939] syzkaller0: entered promiscuous mode
[   68.921446][ T5851] Bluetooth: hci0: command tx timeout
[   69.081516][ T5851] Bluetooth: hci1: command tx timeout
[   69.082570][ T5239] Bluetooth: hci2: command tx timeout
[   69.724243][ T5945] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.780084][ T5952] netlink: 'syz.2.14': attribute type 29 has an invalid length.
[   69.784732][ T5952] netlink: 'syz.2.14': attribute type 29 has an invalid length.
[   69.788178][ T5952] netlink: 'syz.2.14': attribute type 29 has an invalid length.
[   69.905653][ T5954] =======================================================
[   69.905653][ T5954] WARNING: The mand mount option has been deprecated and
[   69.905653][ T5954]          and is ignored by this kernel. Remove the mand
[   69.905653][ T5954]          option from the mount to silence this warning.
[   69.905653][ T5954] =======================================================
[   70.045603][ T5954] option changes via remount are deprecated (pid=5953 comm=syz.1.15)
[   70.514172][ T5971] netlink: 'syz.1.23': attribute type 29 has an invalid length.
[   70.609086][ T5980] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   70.999769][ T5239] Bluetooth: hci0: command tx timeout
[   71.160931][ T5239] Bluetooth: hci1: command tx timeout
[   71.160950][ T5851] Bluetooth: hci2: command tx timeout
[   72.524944][ T6039] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.52'.
[   72.642870][ T6045] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   72.727450][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.777805][ T6055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.59'.
[   72.787615][ T6055] netlink: 'syz.2.59': attribute type 13 has an invalid length.
[   72.797320][ T6055] netlink: 152 bytes leftover after parsing attributes in process `syz.2.59'.
[   72.801084][ T6055] : renamed from syz_tun (while UP)
[   72.815909][ T6055] : refused to change device tx_queue_len
[   72.829418][ T6055] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   72.925353][ T6067] netlink: 'syz.0.64': attribute type 11 has an invalid length.
[   72.927658][ T6067] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.64'.
[   73.016916][ T6073] netlink: 'syz.1.66': attribute type 11 has an invalid length.
[   73.021730][ T6073] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.66'.
[   73.083199][ T5851] Bluetooth: hci0: command tx timeout
[   73.177822][ T6070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.249442][ T5851] Bluetooth: hci2: command tx timeout
[   73.249470][ T5239] Bluetooth: hci1: command tx timeout
[   73.644733][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   73.715829][ T6110] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[   73.770391][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'.
[   73.876025][ T6114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.84'.
[   74.719051][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   74.927640][ T6135] netlink: 'syz.2.94': attribute type 10 has an invalid length.
[   74.935240][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.94'.
[   74.944593][ T6135] batadv0: entered promiscuous mode
[   74.947713][ T6135] batadv0: entered allmulticast mode
[   75.091407][ T6135] bridge0: port 3(batadv0) entered blocking state
[   75.099181][ T6135] bridge0: port 3(batadv0) entered disabled state
[   75.672136][ T6135] bridge0: port 3(batadv0) entered blocking state
[   75.675559][ T6135] bridge0: port 3(batadv0) entered forwarding state
[   75.937291][ T6165] veth1_macvtap: left promiscuous mode
[   75.960300][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   75.964280][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   75.980015][ T6165] veth1_macvtap: entered promiscuous mode
[   75.984072][ T6165] macsec0: entered promiscuous mode
[   75.997400][ T6165] macsec0: entered allmulticast mode
[   76.002978][ T6165] veth1_macvtap: entered allmulticast mode
[   76.230783][ T6177] syzkaller0: entered promiscuous mode
[   76.233145][ T6177] syzkaller0: entered allmulticast mode
[   76.455170][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.458053][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.553291][ T6189] netlink: 'syz.1.119': attribute type 5 has an invalid length.
[   76.556127][ T6189] netlink: 713 bytes leftover after parsing attributes in process `syz.1.119'.
[   76.561281][ T6189] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.119'.
[   76.564808][ T6189] netlink: 'syz.1.119': attribute type 5 has an invalid length.
[   76.567946][ T6189] netlink: 713 bytes leftover after parsing attributes in process `syz.1.119'.
[   77.125556][ T6205] delete_channel: no stack
[   77.135271][ T6205] delete_channel: no stack
[   77.370563][ T6217] netlink: 'syz.1.128': attribute type 21 has an invalid length.
[   77.373770][ T6217] netlink: 156 bytes leftover after parsing attributes in process `syz.1.128'.
[   77.932083][ T5239] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   78.145916][ T6234] netlink: 'syz.0.134': attribute type 21 has an invalid length.
[   78.153183][ T6234] netlink: 128 bytes leftover after parsing attributes in process `syz.0.134'.
[   78.159140][ T6234] netlink: 'syz.0.134': attribute type 5 has an invalid length.
[   78.168842][ T6234] netlink: 'syz.0.134': attribute type 6 has an invalid length.
[   78.175745][ T6234] netlink: 3 bytes leftover after parsing attributes in process `syz.0.134'.
[   78.185514][ T6237] openvswitch: netlink: IP tunnel dst address not specified
[   78.317626][ T6245] netlink: 'syz.0.136': attribute type 10 has an invalid length.
[   78.326352][ T6245] vlan0: entered allmulticast mode
[   78.328515][ T6245] veth0_vlan: entered allmulticast mode
[   78.341693][ T6247] netlink: 'syz.1.139': attribute type 6 has an invalid length.
[   78.347478][ T6245] team0: Port device vlan0 added
[   78.486315][ T6259] netlink: 'syz.1.145': attribute type 11 has an invalid length.
[   78.589498][ T6266] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   78.778965][ T6277] veth1_vlan: entered allmulticast mode
[   78.950317][ T6277] team0: Device veth1_vlan failed to register rx_handler
[   79.123871][ T6277] syz.1.154 (6277) used greatest stack depth: 18936 bytes left
[   79.348964][ T6300] pim6reg0: tun_chr_ioctl cmd 1074025681
[   79.538701][ T6315] __nla_validate_parse: 1 callbacks suppressed
[   79.538719][ T6315] netlink: 124 bytes leftover after parsing attributes in process `syz.1.171'.
[   79.547394][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'.
[   79.624813][ T6319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.173'.
[   79.633144][ T6319] dummy0: entered promiscuous mode
[   79.816048][ T6327] bond_slave_1: mtu less than device minimum
[   79.934329][ T6335] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   79.937885][ T6335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.173859][ T6345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.184'.
[   80.185843][ T6345] hsr_slave_0: left promiscuous mode
[   80.201513][ T6345] hsr_slave_1: left promiscuous mode
[   80.558937][ T6353] netlink: 1 bytes leftover after parsing attributes in process `syz.2.189'.
[   80.681776][ T6365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.718648][ T6368] syz.2.195 uses obsolete (PF_INET,SOCK_PACKET)
[   80.723418][ T6367] validate_nla: 3 callbacks suppressed
[   80.723452][ T6367] netlink: 'syz.1.191': attribute type 10 has an invalid length.
[   80.924714][    C1] Illegal XDP return value 16128 on prog  (id 65) dev bond_slave_1, expect packet loss!
[   81.045573][ T6378] C: renamed from team_slave_0 (while UP)
[   81.085074][ T6380] netlink: 'syz.0.201': attribute type 10 has an invalid length.
[   81.087634][ T6380] netlink: 55 bytes leftover after parsing attributes in process `syz.0.201'.
[   81.143822][ T6380] team0: Port device vlan0 removed
[   81.181125][ T6382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.202'.
[   81.461344][ T6395] netlink: 'syz.0.208': attribute type 2 has an invalid length.
[   81.927261][ T6405] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   81.935230][ T6405] netlink: 'syz.2.212': attribute type 4 has an invalid length.
[   81.938615][ T6405] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.212'.
[   81.945833][ T6405] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   81.951224][ T6405] netlink: 'syz.2.212': attribute type 4 has an invalid length.
[   81.954373][ T6405] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.212'.
[   82.075734][ T6409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.214'.
[   82.241939][ T6415] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   82.445203][ T6423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.466130][ T6454] netlink: 'syz.1.234': attribute type 19 has an invalid length.
[   83.509418][ T6456] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[   83.514212][ T6456] netlink: 'syz.1.236': attribute type 29 has an invalid length.
[   84.664335][ T6493] __nla_validate_parse: 2 callbacks suppressed
[   84.664398][ T6493] netlink: 830 bytes leftover after parsing attributes in process `syz.1.253'.
[   84.746221][ T6499] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.256'.
[   84.793355][ T6497] syzkaller0: entered promiscuous mode
[   84.795570][ T6497] syzkaller0: entered allmulticast mode
[   86.714831][ T1899] cfg80211: failed to load regulatory.db
[   87.066265][ T6527] netlink: 176 bytes leftover after parsing attributes in process `syz.0.269'.
[   87.138050][ T6535] netlink: 'syz.0.273': attribute type 11 has an invalid length.
[   90.802054][ T6564] netlink: 'syz.1.285': attribute type 10 has an invalid length.
[   90.804621][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.285'.
[   91.695919][ T6564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.702936][ T6566] netlink: 'syz.0.286': attribute type 12 has an invalid length.
[   91.706161][ T6566] netlink: 132 bytes leftover after parsing attributes in process `syz.0.286'.
[   91.764874][ T5239] Bluetooth: hci0: unexpected event 0x0f length: 151 > 4
[   91.811829][ T6573] xt_HMARK: spi-set and port-set can't be combined
[   91.847220][ T6575] netlink: 32 bytes leftover after parsing attributes in process `syz.1.290'.
[   92.007999][ T6595] netlink: 64 bytes leftover after parsing attributes in process `syz.2.301'.
[   92.042916][ T6599] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   95.218509][ T6624] netlink: 4868 bytes leftover after parsing attributes in process `syz.2.314'.
[   95.223337][ T6624] netlink: 4868 bytes leftover after parsing attributes in process `syz.2.314'.
[   95.227107][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'.
[   95.607592][ T6652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.465048][ T6677] netlink: 'syz.0.335': attribute type 13 has an invalid length.
[   96.474500][ T6677] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.335'.
[   96.632465][ T6684] netlink: 188 bytes leftover after parsing attributes in process `syz.0.338'.
[   96.828428][ T6689] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.340'.
[   97.070427][ T6694] netlink: 92 bytes leftover after parsing attributes in process `syz.0.342'.
[   97.388962][ T6700] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.345'.
[   99.049954][ T6741] netlink: 92 bytes leftover after parsing attributes in process `syz.2.363'.
[   99.371658][ T6751] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   99.756022][ T5239] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1
[  100.170857][ T6782] nbd: must specify an index to disconnect
[  100.401784][ T6791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.385'.
[  100.634986][ T6763] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  100.692237][ T6763] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  100.729256][ T6805] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[  100.735379][ T6805] netlink: 1 bytes leftover after parsing attributes in process `syz.2.391'.
[  101.919581][ T1226] wlan1: Trigger new scan to find an IBSS to join
[  104.365939][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'.
[  104.379891][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'.
[  104.382903][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'.
[  104.955109][ T6855] netlink: 'syz.2.404': attribute type 10 has an invalid length.
[  104.997917][ T6862] syzkaller0: entered promiscuous mode
[  105.003521][ T6862] syzkaller0: entered allmulticast mode
[  105.014300][ T6855] veth1_vlan: entered allmulticast mode
[  105.152812][ T6855] team0: Device veth1_vlan failed to register rx_handler
[  105.307536][ T6855] syz.2.404 (6855) used greatest stack depth: 18872 bytes left
[  105.395300][ T5239] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  105.498678][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[  106.392496][ T6884] : entered promiscuous mode
[  106.563430][ T6899] netlink: 'syz.0.422': attribute type 3 has an invalid length.
[  106.566398][ T6899] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[  106.839710][   T32] wlan1: Trigger new scan to find an IBSS to join
[  106.934088][ T6921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.093697][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'.
[  107.097340][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'.
[  107.106536][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'.
[  107.141930][ T6934] netlink: 'syz.1.439': attribute type 39 has an invalid length.
[  107.470164][ T6940] GPL: port 1(gretap0) entered blocking state
[  107.473331][ T6940] GPL: port 1(gretap0) entered disabled state
[  107.476323][ T6940] gretap0: entered allmulticast mode
[  107.484374][ T6940] gretap0: entered promiscuous mode
[  107.555899][ T6944] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  107.558830][ T6944] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  108.070903][ T6970] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[  108.194205][ T6978] netlink: 'syz.1.459': attribute type 9 has an invalid length.
[  108.199124][ T6978] netlink: 195776 bytes leftover after parsing attributes in process `syz.1.459'.
[  109.285712][ T7013] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  109.300356][ T7013] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.473'.
[  109.799718][ T1094] wlan1: Trigger new scan to find an IBSS to join
[  110.390856][ T7034] netlink: 'syz.2.480': attribute type 40 has an invalid length.
[  110.449375][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.544284][ T7044] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.485'.
[  110.646497][ T7048] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.487'.
[  110.770653][ T7056] netlink: 'syz.1.491': attribute type 12 has an invalid length.
[  110.773151][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.491'.
[  110.833231][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'.
[  110.932671][ T7062] netlink: 'syz.1.494': attribute type 25 has an invalid length.
[  111.074084][ T7073] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.499'.
[  111.077173][ T7073] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  111.082376][ T7073] openvswitch: netlink: Duplicate key (type 0).
[  111.348166][ T7092] IPv6: Can't replace route, no match found
[  111.355602][ T7092] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  111.458479][ T7095] netlink: 202232 bytes leftover after parsing attributes in process `syz.2.510'.
[  111.462252][ T7095] netlink: zone id is out of range
[  111.465379][ T7095] netlink: zone id is out of range
[  111.581387][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[  111.584450][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[  111.742653][ T7108] netlink: 'syz.0.516': attribute type 7 has an invalid length.
[  111.746045][ T7108] netlink: 'syz.0.516': attribute type 8 has an invalid length.
[  111.968303][ T7120] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.522'.
[  112.088494][ T7128] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  112.225052][ T7138] netlink: 'syz.2.531': attribute type 40 has an invalid length.
[  112.456966][ T7151] netlink: 492 bytes leftover after parsing attributes in process `syz.1.537'.
[  112.668999][ T7161] netlink: 'syz.2.541': attribute type 2 has an invalid length.
[  112.731371][ T7165] netlink: 'syz.2.541': attribute type 2 has an invalid length.
[  112.839800][   T26] wlan1: Trigger new scan to find an IBSS to join
[  113.870666][ T7177] netlink: 'syz.1.545': attribute type 39 has an invalid length.
[  114.178529][ T7207] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  115.406436][ T7255] syzkaller1: entered promiscuous mode
[  115.408628][ T7255] syzkaller1: entered allmulticast mode
[  115.800304][   T32] wlan1: Trigger new scan to find an IBSS to join
[  115.959271][ T7266] __nla_validate_parse: 6 callbacks suppressed
[  115.965363][ T7266] netlink: 92 bytes leftover after parsing attributes in process `syz.0.584'.
[  116.171133][ T7279] netlink: 830 bytes leftover after parsing attributes in process `syz.1.590'.
[  116.263484][ T7283] netlink: 10 bytes leftover after parsing attributes in process `syz.1.592'.
[  116.894163][   T32] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  117.005893][ T7314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.606'.
[  117.066383][ T7318] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  117.595069][ T7357] netlink: 16370 bytes leftover after parsing attributes in process `syz.2.626'.
[  117.667951][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[  117.815746][ T7366] netlink: 830 bytes leftover after parsing attributes in process `syz.1.630'.
[  118.097031][ T7385] netlink: 14 bytes leftover after parsing attributes in process `syz.2.639'.
[  118.632592][ T7398] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  118.807979][ T7401] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.645'.
[  122.376936][ T7464] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.341927][ T7484] netlink: 'syz.0.685': attribute type 21 has an invalid length.
[  123.344567][ T7484] netlink: 168 bytes leftover after parsing attributes in process `syz.0.685'.
[  123.972650][ T7498] netlink: 'syz.0.692': attribute type 1 has an invalid length.
[  123.975160][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'.
[  124.023551][ T7502] netlink: 14 bytes leftover after parsing attributes in process `syz.2.694'.
[  124.703521][ T7529] netlink: 'syz.2.706': attribute type 29 has an invalid length.
[  124.753581][ T7529] netlink: 'syz.2.706': attribute type 29 has an invalid length.
[  124.766386][ T7529] netlink: 'syz.2.706': attribute type 29 has an invalid length.
[  124.801491][ T7529] netlink: 'syz.2.706': attribute type 29 has an invalid length.
[  125.282040][ T7546] netlink: 80 bytes leftover after parsing attributes in process `syz.0.714'.
[  125.363854][ T7544] netlink: 'syz.2.713': attribute type 4 has an invalid length.
[  125.370607][ T7544] netlink: 'syz.2.713': attribute type 11 has an invalid length.
[  125.379848][ T7544] netlink: 'syz.2.713': attribute type 1 has an invalid length.
[  125.382448][ T7544] netlink: 'syz.2.713': attribute type 6 has an invalid length.
[  125.389827][ T7544] netlink: 197860 bytes leftover after parsing attributes in process `syz.2.713'.
[  125.710088][ T7559] netlink: 164 bytes leftover after parsing attributes in process `syz.0.721'.
[  125.715904][ T7559] netlink: 164 bytes leftover after parsing attributes in process `syz.0.721'.
[  125.803402][ T7563] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.722'.
[  127.200460][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.739'.
[  127.637115][ T7619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.745'.
[  129.260054][ T7662] validate_nla: 3 callbacks suppressed
[  129.260067][ T7662] netlink: 'syz.0.765': attribute type 13 has an invalid length.
[  129.299067][ T7662] gretap0: refused to change device tx_queue_len
[  129.308831][ T7662] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  129.403579][ T7665] netlink: 'syz.2.766': attribute type 4 has an invalid length.
[  129.408140][ T7665] __nla_validate_parse: 1 callbacks suppressed
[  129.408198][ T7665] netlink: 152 bytes leftover after parsing attributes in process `syz.2.766'.
[  129.684362][ T7665] netlink: 6 bytes leftover after parsing attributes in process `syz.2.766'.
[  129.687608][ T7665] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  131.037225][ T7697] syzkaller0: entered promiscuous mode
[  131.040031][ T7697] syzkaller0: entered allmulticast mode
[  131.230284][ T7704] netlink: 176 bytes leftover after parsing attributes in process `syz.0.782'.
[  131.904310][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'.
[  132.979140][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'.
[  132.989634][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'.
[  133.307088][ T7734] netlink: 348 bytes leftover after parsing attributes in process `syz.2.791'.
[  134.239292][ T7733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.791'.
[  134.599875][ T7748] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  134.728639][ T7755] netlink: 'syz.0.801': attribute type 13 has an invalid length.
[  134.740404][ T7755] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.801'.
[  137.315782][ T7811] syzkaller0: entered promiscuous mode
[  137.318066][ T7811] syzkaller0: entered allmulticast mode
[  137.884478][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  137.887045][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  138.244990][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.253349][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.266718][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.284356][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.289860][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.945947][ T7819] chnl_net:caif_netlink_parms(): no params data found
[  139.207329][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.210695][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.213976][ T7819] bridge_slave_0: entered allmulticast mode
[  139.218275][ T7819] bridge_slave_0: entered promiscuous mode
[  139.228010][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.231391][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.234421][ T7819] bridge_slave_1: entered allmulticast mode
[  139.238849][ T7819] bridge_slave_1: entered promiscuous mode
[  139.297288][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.304130][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.358589][ T7819] team0: Port device team_slave_0 added
[  139.363672][ T7819] team0: Port device team_slave_1 added
[  139.392488][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.395605][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.405205][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.410403][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.413179][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.421947][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.462001][ T7819] hsr_slave_0: entered promiscuous mode
[  139.464530][ T7819] hsr_slave_1: entered promiscuous mode
[  139.467288][ T7819] debugfs: 'hsr0' already exists in 'hsr'
[  139.469801][ T7819] Cannot create hsr debugfs directory
[  139.594952][ T7819] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  139.602208][ T7819] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  139.608533][ T7819] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  139.614113][ T7819] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  139.638650][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.641332][ T7819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.643930][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.646336][ T7819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.691698][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.704816][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.708187][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.718301][ T7819] 8021q: adding VLAN 0 to HW filter on device team0
[  139.724810][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.727520][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.740645][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.744439][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.877336][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.910202][ T7819] veth0_vlan: entered promiscuous mode
[  139.916096][ T7819] veth1_vlan: entered promiscuous mode
[  139.936379][ T7819] veth0_macvtap: entered promiscuous mode
[  139.953050][ T7819] veth1_macvtap: entered promiscuous mode
[  139.982061][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.996029][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.007475][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.015375][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.038494][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.047520][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.117978][ T7870] netlink: 'syz.2.843': attribute type 32 has an invalid length.
[  140.170095][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.172842][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.204415][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.207590][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.227622][ T7873] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.232019][ T7873] syzkaller0: entered promiscuous mode
[  140.320395][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.828'.
[  140.332740][ T7875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.828'.
[  140.354305][ T7880] netlink: 'syz.2.846': attribute type 21 has an invalid length.
[  140.357922][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.828'.
[  140.363161][ T5239] Bluetooth: hci0: command tx timeout
[  141.547653][ T7910] netlink: 'syz.2.859': attribute type 21 has an invalid length.
[  141.651590][ T7920] netlink: 'syz.0.863': attribute type 1 has an invalid length.
[  141.846150][ T7931] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.868'.
[  142.439885][ T5239] Bluetooth: hci0: command tx timeout
[  142.735171][ T7975] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  142.975769][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'.
[  143.290929][ T7995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.294835][ T7995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.764338][ T8004] netlink: 22 bytes leftover after parsing attributes in process `syz.0.900'.
[  144.058712][ T8016] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.906'.
[  144.364660][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.913'.
[  144.368689][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.913'.
[  144.519603][ T5239] Bluetooth: hci0: command tx timeout
[  144.674012][ T8052] netlink: 'syz.0.923': attribute type 2 has an invalid length.
[  144.677018][ T8052] netlink: 164 bytes leftover after parsing attributes in process `syz.0.923'.
[  144.940426][ T8067] netlink: 'syz.0.930': attribute type 1 has an invalid length.
[  145.097902][ T8073] tap0: tun_chr_ioctl cmd 21731
[  145.128190][ T8073] tap0: tun_chr_ioctl cmd 2147767521
[  145.530525][ T8100] netlink: 'syz.0.946': attribute type 9 has an invalid length.
[  145.555195][ T8100] __nla_validate_parse: 1 callbacks suppressed
[  145.555210][ T8100] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.946'.
[  145.804308][ T8114] netlink: 'syz.0.953': attribute type 6 has an invalid length.
[  145.874085][ T8116] netlink: 277 bytes leftover after parsing attributes in process `syz.2.951'.
[  145.933747][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'.
[  146.602257][ T5239] Bluetooth: hci0: command tx timeout
[  146.973251][ T1226] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  147.086510][ T8122] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.955'.
[  147.133014][ T8124] netlink: 'syz.2.956': attribute type 4 has an invalid length.
[  147.136256][ T8124] netlink: 'syz.2.956': attribute type 3 has an invalid length.
[  147.139182][ T8124] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.956'.
[  147.429036][ T8139] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.963'.
[  147.432318][ T8140] openvswitch: netlink: Multiple metadata blocks provided
[  147.496949][ T8145] netlink: 92 bytes leftover after parsing attributes in process `syz.0.966'.
[  147.533967][ T8145] netlink: 92 bytes leftover after parsing attributes in process `syz.0.966'.
[  147.843589][ T8153] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.868036][ T8153] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.697716][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'.
[  148.808444][ T8175] netlink: 'syz.0.978': attribute type 2 has an invalid length.
[  148.814066][ T8175] netlink: 119 bytes leftover after parsing attributes in process `syz.0.978'.
[  148.909043][ T8181] netlink: 'syz.0.980': attribute type 3 has an invalid length.
[  148.915677][ T8181] netlink: 'syz.0.980': attribute type 1 has an invalid length.
[  150.062117][ T8236] netlink: 'syz.2.1005': attribute type 10 has an invalid length.
[  150.585953][ T8268] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  150.649927][ T8274] netlink: 'syz.3.1025': attribute type 5 has an invalid length.
[  150.652467][ T8274] netlink: 'syz.3.1025': attribute type 5 has an invalid length.
[  152.048401][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.052822][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.056426][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.062322][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.065842][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.243175][ T8344] chnl_net:caif_netlink_parms(): no params data found
[  152.326446][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.329671][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.332663][ T8344] bridge_slave_0: entered allmulticast mode
[  152.336612][ T8344] bridge_slave_0: entered promiscuous mode
[  152.342532][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.345477][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.348415][ T8344] bridge_slave_1: entered allmulticast mode
[  152.353167][ T8344] bridge_slave_1: entered promiscuous mode
[  152.384542][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.391655][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.425455][ T8344] team0: Port device team_slave_0 added
[  152.431060][ T8344] team0: Port device team_slave_1 added
[  152.463917][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.467101][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.477117][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.482248][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.484538][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.493490][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.526078][ T8344] hsr_slave_0: entered promiscuous mode
[  152.528463][ T8344] hsr_slave_1: entered promiscuous mode
[  152.534970][ T8344] debugfs: 'hsr0' already exists in 'hsr'
[  152.536903][ T8344] Cannot create hsr debugfs directory
[  152.655275][ T8344] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  152.661243][ T8344] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  152.666020][ T8344] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  152.671412][ T8344] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  152.733677][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.746420][ T8344] 8021q: adding VLAN 0 to HW filter on device team0
[  152.752396][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.754690][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.770819][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.773118][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.787676][ T8344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  152.791672][ T8344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  152.941766][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.151612][ T8344] veth0_vlan: entered promiscuous mode
[  153.162000][ T8344] veth1_vlan: entered promiscuous mode
[  153.184813][ T8344] veth0_macvtap: entered promiscuous mode
[  153.189932][ T8344] veth1_macvtap: entered promiscuous mode
[  153.201495][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.208588][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.218662][ T5678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.224044][ T5678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.227523][ T5678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.234485][ T5678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.291042][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.293914][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.316033][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.318975][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.013288][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.017443][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.022023][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.028522][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.035213][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.120699][ T5851] Bluetooth: hci1: command tx timeout
[  154.283859][ T8400] __nla_validate_parse: 3 callbacks suppressed
[  154.283875][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1051'.
[  154.419091][ T8405] netlink: 'syz.5.1053': attribute type 1 has an invalid length.
[  154.426326][ T8405] netlink: 'syz.5.1053': attribute type 2 has an invalid length.
[  154.513442][ T8383] chnl_net:caif_netlink_parms(): no params data found
[  154.530959][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'.
[  156.119896][ T5851] Bluetooth: hci2: command tx timeout
[  156.199532][ T5851] Bluetooth: hci1: command tx timeout
[  157.744223][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.747263][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.756326][ T8383] bridge_slave_0: entered allmulticast mode
[  157.759803][ T8383] bridge_slave_0: entered promiscuous mode
[  157.773223][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.776426][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.779165][ T8383] bridge_slave_1: entered allmulticast mode
[  157.792181][ T8383] bridge_slave_1: entered promiscuous mode
[  157.883597][ T8383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.903448][ T8383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.993826][ T8383] team0: Port device team_slave_0 added
[  157.998632][ T8383] team0: Port device team_slave_1 added
[  158.062523][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.065362][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.074790][ T8383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.080966][ T8383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.084448][ T8383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.096921][ T8383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.154700][ T8383] hsr_slave_0: entered promiscuous mode
[  158.157929][ T8383] hsr_slave_1: entered promiscuous mode
[  158.162651][ T8383] debugfs: 'hsr0' already exists in 'hsr'
[  158.164904][ T8383] Cannot create hsr debugfs directory
[  158.222523][ T5851] Bluetooth: hci2: command tx timeout
[  158.290922][ T5851] Bluetooth: hci1: command tx timeout
[  158.402572][ T8383] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.416231][ T8383] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  158.434971][ T8383] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  158.448314][ T8383] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  158.486956][ T8383] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.490011][ T8383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.493157][ T8383] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.495576][ T8383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.614615][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.726731][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.731684][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.767282][ T8383] 8021q: adding VLAN 0 to HW filter on device team0
[  158.786527][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.789600][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.825926][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.828892][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.954109][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1071'.
[  158.968339][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1071'.
[  158.972181][ T8455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1071'.
[  159.196847][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.456714][ T8383] veth0_vlan: entered promiscuous mode
[  159.468733][ T8383] veth1_vlan: entered promiscuous mode
[  159.515264][ T8383] veth0_macvtap: entered promiscuous mode
[  159.524725][ T8383] veth1_macvtap: entered promiscuous mode
[  159.542489][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.553892][ T8383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.574223][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.577161][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.584282][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.587384][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.162453][ T3618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.165518][ T3618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.240548][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.246334][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.300584][ T5851] Bluetooth: hci2: command tx timeout
[  160.356160][ T8484] netlink: 'syz.3.1079': attribute type 21 has an invalid length.
[  160.362847][ T8484] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1079'.
[  160.389776][ T5239] Bluetooth: hci1: command tx timeout
[  160.938652][ T8484] netlink: 'syz.3.1079': attribute type 4 has an invalid length.
[  160.942713][ T8484] netlink: 'syz.3.1079': attribute type 5 has an invalid length.
[  160.945879][ T8484] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1079'.
[  161.061399][ T8492] netlink: 'syz.5.1081': attribute type 3 has an invalid length.
[  162.015043][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1255550130 wd_nsec: 1255550075
[  162.032909][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'.
[  162.359780][ T5239] Bluetooth: hci2: command tx timeout
[  163.462490][ T8547] netlink: 'syz.5.1106': attribute type 10 has an invalid length.
[  163.465890][ T8547] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1106'.
[  163.534646][ T8548] netlink: 'syz.4.1103': attribute type 10 has an invalid length.
[  163.576995][ T8548] bridge0: port 3(macsec0) entered blocking state
[  163.581125][ T8548] bridge0: port 3(macsec0) entered disabled state
[  163.588575][ T8548] macsec0: entered allmulticast mode
[  163.600040][ T8548] veth1_macvtap: entered allmulticast mode
[  163.648404][ T8548] macsec0: entered promiscuous mode
[  163.698116][ T8548] bridge0: port 3(macsec0) entered blocking state
[  163.702416][ T8548] bridge0: port 3(macsec0) entered forwarding state
[  164.852244][ T8563] netlink: 'syz.4.1111': attribute type 10 has an invalid length.
[  164.863829][ T8563] 8021q: adding VLAN 0 to HW filter on device team0
[  164.868029][ T8563] bond0: (slave team0): Enslaving as an active interface with an up link
[  165.839505][ T8571] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1115'.
[  166.138241][ T8588] netlink: zone id is out of range
[  166.140760][ T8588] netlink: zone id is out of range
[  166.168026][ T8588] netlink: set zone limit has 4 unknown bytes
[  166.197725][ T8584] netlink: del zone limit has 4 unknown bytes
[  166.726868][ T8602] netlink: 'syz.3.1128': attribute type 3 has an invalid length.
[  166.751155][ T8602] netlink: 'syz.3.1128': attribute type 1 has an invalid length.
[  166.762774][ T8602] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1128'.
[  166.818543][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1131'.
[  166.831586][ T8608] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1131'.
[  166.836807][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1131'.
[  166.902277][ T8615] netlink: 'syz.4.1134': attribute type 21 has an invalid length.
[  166.905369][ T8615] netlink: 14565 bytes leftover after parsing attributes in process `syz.4.1134'.
[  167.050256][ T8626] openvswitch: netlink: IP tunnel dst address not specified
[  167.066811][ T8628] netlink: 'syz.5.1139': attribute type 23 has an invalid length.
[  167.722119][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1144'.
[  168.923316][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1150'.
[  168.927386][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1150'.
[  169.355744][ T5239] Bluetooth: hci0: adv larger than maximum supported
[  169.355799][ T5239] Bluetooth: hci0: Unknown advertising packet type: 0x18
[  169.360372][ T5239] Bluetooth: hci0: Malformed LE Event: 0x0d
[  169.552160][ T8680] netlink: 'syz.4.1163': attribute type 4 has an invalid length.
[  169.914608][ T8698] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1171'.
[  169.944206][ T8700] netlink: 'syz.5.1172': attribute type 11 has an invalid length.
[  170.091379][ T8699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.395519][ T8716] netlink: 'syz.5.1179': attribute type 29 has an invalid length.
[  170.404607][ T8716] netlink: 'syz.5.1179': attribute type 29 has an invalid length.
[  170.411592][ T8716] netlink: 'syz.5.1179': attribute type 29 has an invalid length.
[  171.297576][ T8751] __nla_validate_parse: 4 callbacks suppressed
[  171.297590][ T8751] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.1196'.
[  172.016177][ T8770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.092185][ T8821] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1230'.
[  173.226141][ T8830] netlink: 2451 bytes leftover after parsing attributes in process `syz.3.1234'.
[  173.375172][ T8843] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1241'.
[  173.583045][ T8860] netlink: 'syz.5.1249': attribute type 2 has an invalid length.
[  173.751136][ T8865] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1250'.
[  173.756036][ T8865] bond_slave_0: entered promiscuous mode
[  173.759473][ T8865] bond_slave_1: entered promiscuous mode
[  173.762951][ T8865] team_slave_0: entered promiscuous mode
[  173.766826][ T8865] team_slave_1: entered promiscuous mode
[  173.778124][ T8873] xt_HMARK: spi-set and port-set can't be combined
[  174.419053][ T8914] netlink: 'syz.4.1275': attribute type 21 has an invalid length.
[  174.468140][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1273'.
[  174.780208][ T8931] netlink: 'syz.4.1283': attribute type 10 has an invalid length.
[  174.783786][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.796408][ T8931] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.815192][ T8931] batadv_slave_0: entered promiscuous mode
[  174.817777][ T8931] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  175.766041][ T8953] netlink: 'syz.3.1293': attribute type 29 has an invalid length.
[  175.781713][ T8953] netlink: 'syz.3.1293': attribute type 29 has an invalid length.
[  175.809033][ T8953] netlink: 'syz.3.1293': attribute type 29 has an invalid length.
[  175.878247][ T8957] netlink: 'syz.3.1293': attribute type 29 has an invalid length.
[  178.000511][ T1226] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  179.234605][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'.
[  179.238195][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'.
[  179.338649][ T8995] team_slave_0: left promiscuous mode
[  179.352961][ T8995] team0: Port device team_slave_0 removed
[  179.361264][ T8995] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  179.736635][ T9005] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.1314'.
[  179.767172][ T9005] netlink: 104088 bytes leftover after parsing attributes in process `syz.5.1314'.
[  179.804164][ T9005] netlink: 24032 bytes leftover after parsing attributes in process `syz.5.1314'.
[  180.491369][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1319'.
[  180.659840][ T9024] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.783216][ T9035] netlink: 'syz.5.1328': attribute type 2 has an invalid length.
[  182.323445][ T9080] netlink: 'syz.4.1348': attribute type 27 has an invalid length.
[  182.326619][ T9080] netlink: 'syz.4.1348': attribute type 1 has an invalid length.
[  182.330854][ T9080] bridge0: port 1(bridge_slave_0) entered learning state
[  183.238851][ T9106] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1358'.
[  183.663089][ T9121] sctp: [Deprecated]: syz.5.1364 (pid 9121) Use of int in maxseg socket option.
[  183.663089][ T9121] Use struct sctp_assoc_value instead
[  183.702096][ T9123] netlink: 'syz.4.1366': attribute type 5 has an invalid length.
[  183.917725][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1368'.
[  184.629152][ T9150] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1378'.
[  184.738956][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'.
[  185.074902][ T9182] netlink: 'syz.4.1391': attribute type 21 has an invalid length.
[  185.078395][ T9182] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1391'.
[  185.083483][ T9182] netlink: 'syz.4.1391': attribute type 4 has an invalid length.
[  185.347215][ T9199] netlink: 'syz.4.1396': attribute type 10 has an invalid length.
[  185.610464][ T9199] team0: Device ipvlan1 failed to register rx_handler
[  185.678604][ T9208] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1399'.
[  185.863151][ T9217] ref_ctr_offset mismatch. inode: 0x437 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  186.175147][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1410'.
[  186.387400][ T9241] netlink: 'syz.3.1414': attribute type 1 has an invalid length.
[  187.056243][ T9264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1424'.
[  188.200715][ T5239] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  188.203877][ T5239] Bluetooth: hci0: Injecting HCI hardware error event
[  188.206546][ T5239] Bluetooth: hci0: hardware error 0x00
[  188.355879][ T9317] netlink: 'syz.5.1450': attribute type 4 has an invalid length.
[  188.358823][ T9317] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1450'.
[  188.457132][ T9323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'.
[  188.461698][ T9323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'.
[  188.465221][ T9323] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1453'.
[  188.535819][ T9333] net veth1_virt_wifi : renamed from virt_wifi0
[  188.766126][ T9339] netlink: 'syz.3.1460': attribute type 29 has an invalid length.
[  188.776354][ T9339] netlink: 'syz.3.1460': attribute type 29 has an invalid length.
[  188.832275][ T9344] netlink: 'syz.4.1462': attribute type 3 has an invalid length.
[  189.151490][ T5678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.038752][ T9367] syzkaller0: tun_chr_ioctl cmd 2147767520
[  190.061520][ T5678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.069988][   T13] syzkaller0: tun_net_xmit 76
[  190.076233][   T13] syzkaller0: tun_net_xmit 48
[  190.091729][   T47] syzkaller0: tun_net_xmit 76
[  190.173430][ T5678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.180765][   T95] syzkaller0: tun_net_xmit 76
[  190.283209][ T5239] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  191.403538][ T9379] netlink: 'syz.4.1474': attribute type 4 has an invalid length.
[  191.407175][ T9379] __nla_validate_parse: 1 callbacks suppressed
[  191.407189][ T9379] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1474'.
[  191.427946][ T5678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.538280][ T9388] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1478'.
[  191.638965][ T5678] bridge_slave_1: left allmulticast mode
[  191.647086][ T5678] bridge_slave_1: left promiscuous mode
[  191.651099][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.669088][ T5678] bridge_slave_0: left allmulticast mode
[  191.675596][ T5678] bridge_slave_0: left promiscuous mode
[  191.682081][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.038982][ T9412] netlink: 'syz.4.1486': attribute type 10 has an invalid length.
[  192.083351][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.091011][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.096043][ T5678] bond0 (unregistering): Released all slaves
[  192.114284][ T9405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1485'.
[  192.127564][ T9409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1485'.
[  192.139263][ T9412] macvlan0: entered allmulticast mode
[  192.195859][ T9412] veth1_vlan: entered allmulticast mode
[  192.270129][ T9412] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  192.285003][ T9410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1485'.
[  192.424645][ T9420] cgroup: Unknown subsys name '0x0000000000000000'
[  192.615256][ T5678] hsr_slave_0: left promiscuous mode
[  192.628081][ T5678] hsr_slave_1: left promiscuous mode
[  192.632786][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.634930][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.640298][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.650703][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.693649][ T5678] veth1_macvtap: left promiscuous mode
[  192.696094][ T5678] veth0_macvtap: left promiscuous mode
[  192.698194][ T5678] veth0_vlan: left promiscuous mode
[  192.794147][ T9437] netlink: 'syz.5.1493': attribute type 4 has an invalid length.
[  192.797442][ T9437] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1493'.
[  193.046594][ T9449] netlink: 'syz.5.1498': attribute type 21 has an invalid length.
[  193.049538][ T9449] IPv6: NLM_F_CREATE should be specified when creating new route
[  193.053098][ T9449] IPv6: Can't replace route, no match found
[  193.094814][ T9450] netlink: 'syz.4.1495': attribute type 1 has an invalid length.
[  193.707204][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  193.751962][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  194.186508][ T9461] netlink: 'syz.4.1502': attribute type 46 has an invalid length.
[  194.219183][ T9461] netlink: 'syz.4.1502': attribute type 19 has an invalid length.
[  194.229781][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'.
[  194.299013][ T9468] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  194.316060][ T9468] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  194.664063][ T9484] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.1510'.
[  194.932416][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'.
[  195.460575][ T9522] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1523'.
[  195.464756][ T9522] bond_slave_0: entered promiscuous mode
[  195.467931][ T9522] bond_slave_1: entered promiscuous mode
[  195.587978][ T5239] Bluetooth: hci1: Malformed LE Event: 0x1b
[  196.866442][ T9563] __nla_validate_parse: 2 callbacks suppressed
[  196.866453][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1537'.
[  196.873976][ T9563] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1537'.
[  196.975574][ T9569] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1540'.
[  197.076922][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1543'.
[  197.199079][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1545'.
[  197.249577][ T9587] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1548'.
[  197.462917][ T9597] netlink: 'syz.5.1552': attribute type 9 has an invalid length.
[  197.466208][ T9597] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.1552'.
[  198.196351][ T9623] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1564'.
[  198.288067][ T9631] netlink: 'syz.5.1565': attribute type 29 has an invalid length.
[  198.300527][ T9631] netlink: 'syz.5.1565': attribute type 29 has an invalid length.
[  198.495669][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1570'.
[  199.964069][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  199.968361][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  200.646483][ T9644] netlink: 'syz.3.1573': attribute type 1 has an invalid length.
[  200.906972][ T9658] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1576'.
[  204.583217][ T9696] netlink: 'syz.3.1588': attribute type 10 has an invalid length.
[  204.727277][ T9696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.769351][ T9696] batadv0: entered promiscuous mode
[  204.854369][ T9696] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  205.258553][ T9728] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1603'.
[  205.767549][ T9761] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  206.224253][ T9787] netlink: 'syz.4.1626': attribute type 5 has an invalid length.
[  206.348274][ T9799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1632'.
[  206.479587][ T5239] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  206.479860][ T5239] Bluetooth: hci1: connection err: -111
[  206.665092][ T9817] netlink: 'syz.4.1640': attribute type 13 has an invalid length.
[  206.668446][ T9817] netlink: 'syz.4.1640': attribute type 58 has an invalid length.
[  206.673219][ T9817] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1640'.
[  206.947822][ T9827] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1645'.
[  207.090991][ T9838] netlink: 'syz.3.1647': attribute type 3 has an invalid length.
[  207.099264][ T9838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1647'.
[  209.185561][ T9848] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1651'.
[  209.454238][ T9865] netlink: 'syz.3.1656': attribute type 1 has an invalid length.
[  209.518663][ T9868] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1657'.
[  209.811567][ T5678] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.897960][ T5678] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.966510][ T5678] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.974344][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1663'.
[  210.042240][ T5678] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.058338][ T5239] Bluetooth: hci2: Malformed LE Event: 0x0b
[  210.282226][ T5678] bridge0: port 3(batadv0) entered disabled state
[  210.296715][ T5678] bridge_slave_1: left allmulticast mode
[  210.299017][ T5678] bridge_slave_1: left promiscuous mode
[  210.301824][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.308236][ T5678] bridge_slave_0: left allmulticast mode
[  210.320291][ T5678] bridge_slave_0: left promiscuous mode
[  210.322394][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.336172][ T5678] gretap0: left allmulticast mode
[  210.337889][ T5678] gretap0: left promiscuous mode
[  210.346130][ T5678] GPL: port 1(gretap0) entered disabled state
[  210.537650][ T9901] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  210.851672][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'.
[  211.275060][ T5678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.285360][ T5678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.292743][ T5678] bond0 (unregistering): Released all slaves
[  211.435134][ T5678] : left promiscuous mode
[  211.845892][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1686'.
[  211.851980][ T9952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1686'.
[  211.856311][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'.
[  211.862558][ T5678] hsr_slave_0: left promiscuous mode
[  211.879546][ T5678] hsr_slave_1: left promiscuous mode
[  211.882391][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.887322][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.900556][ T5678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.903533][ T5678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.917835][ T5678] veth1_macvtap: left allmulticast mode
[  211.926398][ T5678] veth1_macvtap: left promiscuous mode
[  211.928182][ T5678] veth0_macvtap: left promiscuous mode
[  211.937941][ T5678] veth0_vlan: left promiscuous mode
[  212.163399][ T9968] netlink: 'syz.4.1693': attribute type 10 has an invalid length.
[  212.985723][ T5678] team0 (unregistering): Port device team_slave_1 removed
[  213.027583][ T5678] team0 (unregistering): Port device team_slave_0 removed
[  213.385835][ T9968] bridge0: port 4(netdevsim0) entered blocking state
[  213.388793][ T9968] bridge0: port 4(netdevsim0) entered disabled state
[  213.394269][ T9968] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  213.400472][ T9968] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  213.515111][ T9980] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1695'.
[  213.634638][ T9993] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1701'.
[  213.646423][ T9993] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1701'.
[  213.650067][ T9993] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1701'.
[  213.884788][T10013] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1707'.
[  214.157947][T10024] netlink: 'syz.5.1710': attribute type 9 has an invalid length.
[  214.165486][T10024] netlink: 204732 bytes leftover after parsing attributes in process `syz.5.1710'.
[  214.508303][T10052] veth1_to_bond: entered allmulticast mode
[  214.559784][T10054] netlink: 'syz.5.1723': attribute type 10 has an invalid length.
[  214.565459][T10054] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.570245][T10054] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.590376][T10054] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.593750][T10054] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.597695][T10054] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.601138][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.628658][T10054] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  215.244783][T10078] netlink: 'syz.4.1734': attribute type 1 has an invalid length.
[  216.588886][T10140] netlink: 'syz.4.1761': attribute type 29 has an invalid length.
[  216.597021][T10140] netlink: 'syz.4.1761': attribute type 29 has an invalid length.
[  216.603906][T10140] __nla_validate_parse: 3 callbacks suppressed
[  216.603919][T10140] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1761'.
[  216.610448][T10140] unsupported nla_type 58
[  217.477939][T10142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.499673][T10142] syz.4.1762 (10142) used greatest stack depth: 17784 bytes left
[  217.889149][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1782'.
[  218.034304][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.175800][T10218] netlink: 'syz.5.1796': attribute type 1 has an invalid length.
[  218.178224][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1796'.
[  218.181460][T10218] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.220374][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1799'.
[  218.698570][T10231] netlink: 'syz.5.1803': attribute type 10 has an invalid length.
[  218.917884][T10239] netlink: 'syz.4.1806': attribute type 10 has an invalid length.
[  219.104917][T10241] can: request_module (can-proto-0) failed.
[  219.323836][T10239] team_slave_1: left promiscuous mode
[  219.327100][T10240] netdevsim netdevsim4 : renamed from netdevsim0
[  219.417673][T10251] openvswitch: netlink: Port 808482864 exceeds max allowable 65535
[  219.474755][T10255] netlink: 'syz.4.1811': attribute type 10 has an invalid length.
[  219.478510][T10255] netdevsim netdevsim4 : left allmulticast mode
[  219.481321][T10255] netdevsim netdevsim4 : left promiscuous mode
[  219.483903][T10255] bridge0: port 4() entered disabled state
[  219.488447][T10255] batman_adv: batadv0: Adding interface: 
[  219.491878][T10255] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.508095][T10255] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  219.535548][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1813'.
[  219.539083][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1813'.
[  220.946665][T10282] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1822'.
[  221.246099][T10292] cgroup: Unknown subsys name 'uid'
[  221.484551][T10302] pim6reg1: entered promiscuous mode
[  221.486331][T10302] pim6reg1: entered allmulticast mode
[  221.664972][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'.
[  221.667771][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'.
[  221.913722][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'.
[  223.450878][T10375] syzkaller0: entered promiscuous mode
[  223.456493][T10375] syzkaller0: entered allmulticast mode
[  223.756759][T10377] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1866'.
[  224.961845][T10388] netlink: 'syz.3.1871': attribute type 25 has an invalid length.
[  225.133697][T10408] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1878'.
[  225.362308][T10436] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1888'.
[  225.372739][T10436] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1888'.
[  225.894141][T10489] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  225.896657][T10489] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  226.151212][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'.
[  226.164968][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'.
[  228.212167][T10539] netlink: 'syz.3.1929': attribute type 23 has an invalid length.
[  228.391245][T10550] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1931'.
[  228.471425][T10562] netlink: 'syz.5.1940': attribute type 10 has an invalid length.
[  228.486151][T10562] batman_adv: batadv0: Adding interface: team0
[  228.488576][T10562] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.500308][T10562] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  228.748627][T10573] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1946'.
[  229.025871][T10589] netlink: 'syz.5.1953': attribute type 29 has an invalid length.
[  229.511435][T10597] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  229.514179][T10597] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  229.611185][T10606] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1961'.
[  229.754142][T10618] netlink: 'syz.5.1967': attribute type 20 has an invalid length.
[  229.757508][T10618] IPv6: NLM_F_CREATE should be specified when creating new route
[  229.761228][T10618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  229.764221][T10618] IPv6: NLM_F_CREATE should be set when creating new route
[  229.861009][T10630] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1973'.
[  229.865521][T10630] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1973'.
[  231.007057][T10655] netlink: set zone limit has 4 unknown bytes
[  231.013060][T10655] netlink: del zone limit has 4 unknown bytes
[  231.059025][T10658] rdma_rxe: rxe_newlink: failed to add wlan0
[  231.450719][T10697] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2003'.
[  231.527910][T10699] netlink: 'syz.3.2004': attribute type 3 has an invalid length.
[  231.533822][T10699] netlink: 'syz.3.2004': attribute type 1 has an invalid length.
[  231.537050][T10699] netlink: 191264 bytes leftover after parsing attributes in process `syz.3.2004'.
[  231.677153][T10705] netlink: 948 bytes leftover after parsing attributes in process `syz.3.2007'.
[  234.936948][T10733] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2019'.
[  234.943319][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2019'.
[  234.946338][T10733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2019'.
[  235.023200][T10740] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2022'.
[  235.450526][T10759] netlink: 'syz.5.2030': attribute type 1 has an invalid length.
[  236.171676][T10766] netlink: 'syz.4.2031': attribute type 2 has an invalid length.
[  236.337143][T10772] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2036'.
[  236.340780][T10775] netlink: 'syz.3.2037': attribute type 29 has an invalid length.
[  236.345460][T10775] netlink: 'syz.3.2037': attribute type 29 has an invalid length.
[  236.352811][T10775] netlink: 'syz.3.2037': attribute type 29 has an invalid length.
[  236.358244][T10775] netlink: 'syz.3.2037': attribute type 29 has an invalid length.
[  236.433516][T10782] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2040'.
[  236.592162][T10798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2049'.
[  236.677998][T10803] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2047'.
[  236.753556][T10799] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2047'.
[  236.773234][T10800] netlink: 'syz.5.2046': attribute type 27 has an invalid length.
[  236.778164][T10800] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2046'.
[  237.156990][T10820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  237.168660][T10820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  238.513833][T10877] netlink: 'syz.4.2083': attribute type 3 has an invalid length.
[  238.516870][T10877] netlink: 'syz.4.2083': attribute type 2 has an invalid length.
[  239.563249][T10921] netlink: 'syz.4.2103': attribute type 29 has an invalid length.
[  239.568474][T10921] netlink: 'syz.4.2103': attribute type 29 has an invalid length.
[  239.674227][T10928] IPv6: Can't replace route, no match found
[  240.951110][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.008696][T10945] __nla_validate_parse: 12 callbacks suppressed
[  241.008713][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'.
[  241.090180][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.116562][T10947] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  241.121130][T10949] ]X: renamed from veth0_vlan (while UP)
[  241.174096][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.248694][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.474621][T10970] netlink: 'syz.5.2120': attribute type 11 has an invalid length.
[  241.477521][T10970] netlink: 'syz.5.2120': attribute type 11 has an invalid length.
[  241.641407][   T12] bridge_slave_1: left allmulticast mode
[  241.643733][   T12] bridge_slave_1: left promiscuous mode
[  241.646360][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.665202][   T12] bridge_slave_0: left allmulticast mode
[  241.667007][   T12] bridge_slave_0: left promiscuous mode
[  241.672399][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.699080][ T5239] Bluetooth: hci1: unexpected cc 0x1004 length: 12 > 11
[  242.002928][T10985] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2124'.
[  242.140293][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.148694][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.153785][   T12] bond0 (unregistering): Released all slaves
[  242.513934][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2133'.
[  242.807667][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.811241][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.871508][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.874549][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.900963][   T12] veth1_macvtap: left promiscuous mode
[  242.907641][   T12] veth0_macvtap: left promiscuous mode
[  243.218116][   T12] team0 (unregistering): Port device team_slave_1 removed
[  243.251858][   T12] team0 (unregistering): Port device C removed
[  244.338961][T11089] netlink: 'syz.3.2158': attribute type 3 has an invalid length.
[  244.361388][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2159'.
[  244.734513][T11111] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2164'.
[  244.877083][T11115] netlink: 'syz.3.2165': attribute type 39 has an invalid length.
[  244.887784][T11115] veth0_macvtap: left promiscuous mode
[  245.213333][T11126] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2169'.
[  245.216433][T11126] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  245.219549][T11126] openvswitch: netlink: Message has 6324 unknown bytes.
[  245.721580][ T5239] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  245.725081][ T5239] Bluetooth: hci1: Injecting HCI hardware error event
[  245.727749][ T5239] Bluetooth: hci1: hardware error 0x00
[  246.250374][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2202'.
[  246.254060][T11197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2202'.
[  247.471879][T11234] netlink: 'syz.3.2221': attribute type 29 has an invalid length.
[  247.476355][T11234] netlink: 'syz.3.2221': attribute type 29 has an invalid length.
[  247.481479][T11234] netlink: 'syz.3.2221': attribute type 29 has an invalid length.
[  247.485307][T11234] netlink: 'syz.3.2221': attribute type 29 has an invalid length.
[  247.799840][ T5239] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  248.631904][T11278] netlink: 'syz.4.2239': attribute type 10 has an invalid length.
[  248.688875][T11278] veth1_macvtap (unregistering): left allmulticast mode
[  248.697500][T11278] bridge0: port 3(macsec0) entered disabled state
[  248.712761][T11278] macsec0 (unregistering): left allmulticast mode
[  248.715027][T11278] macsec0 (unregistering): left promiscuous mode
[  248.717415][T11278] bridge0: port 3(macsec0) entered disabled state
[  248.776123][T11284] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2241'.
[  248.779208][T11286] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2243'.
[  248.961315][T11297] netlink: 'syz.4.2248': attribute type 2 has an invalid length.
[  248.982742][T11297] netlink: 'syz.4.2248': attribute type 8 has an invalid length.
[  248.986130][T11297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2248'.
[  249.024551][T11305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'.
[  249.052306][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2248'.
[  249.055792][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2248'.
[  249.240155][T11319] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2255'.
[  249.468202][T11332] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2259'.
[  249.770920][T11338] openvswitch: netlink: IP tunnel dst address not specified
[  251.368432][T11395] __nla_validate_parse: 1 callbacks suppressed
[  251.368454][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'.
[  253.097811][T11435] netlink: 'syz.5.2306': attribute type 21 has an invalid length.
[  253.186321][T11439] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2308'.
[  253.495098][T11450] netlink: 'syz.5.2313': attribute type 1 has an invalid length.
[  253.498264][T11450] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.2313'.
[  253.689883][T11463] netlink: 'syz.5.2318': attribute type 2 has an invalid length.
[  253.706989][T11463] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2318'.
[  255.348564][T11542] netlink: 'syz.3.2346': attribute type 29 has an invalid length.
[  255.352072][T11542] netlink: 'syz.3.2346': attribute type 29 has an invalid length.
[  255.514699][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2349'.
[  256.554329][T11594] netlink: 'syz.4.2363': attribute type 9 has an invalid length.
[  256.557249][T11594] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.2363'.
[  256.611193][T11596] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  260.235759][T11731] netlink: 'syz.4.2424': attribute type 10 has an invalid length.
[  260.238741][T11731] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2424'.
[  260.346205][T11740] netlink: 'syz.5.2427': attribute type 1 has an invalid length.
[  260.633016][T11756] bond0: entered promiscuous mode
[  260.635496][T11756] bond_slave_0: entered promiscuous mode
[  260.638764][T11756] bond_slave_1: entered promiscuous mode
[  260.647099][T11756] bridge0: entered promiscuous mode
[  260.650262][T11756] bond0: entered allmulticast mode
[  260.652755][T11756] bond_slave_0: entered allmulticast mode
[  260.655434][T11756] bond_slave_1: entered allmulticast mode
[  260.658052][T11756] bridge0: entered allmulticast mode
[  260.869808][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  260.872120][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  261.746824][T11769] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2436'.
[  261.834843][ T5239] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  262.068581][T11780] vcan0 speed is unknown, defaulting to 1000
[  262.081298][T11780] vcan0 speed is unknown, defaulting to 1000
[  262.095499][T11780] vcan0 speed is unknown, defaulting to 1000
[  262.421861][T11787] netlink: 'syz.3.2447': attribute type 39 has an invalid length.
[  262.890510][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2449'.
[  262.909475][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2449'.
[  263.023845][T11780] infiniband syz1: set active
[  263.027218][   T24] vcan0 speed is unknown, defaulting to 1000
[  263.032154][T11780] infiniband syz1: added vcan0
[  263.035464][T11780] syz1: rxe_create_cq: returned err = -12
[  263.037745][T11780] infiniband syz1: Couldn't create ib_mad CQ
[  263.040964][T11780] infiniband syz1: Couldn't open port 1
[  263.112917][T11780] RDS/IB: syz1: added
[  263.114943][T11780] smc: adding ib device syz1 with port count 1
[  263.124226][T11780] smc:    ib device syz1 port 1 has pnetid 
[  263.128105][   T24] vcan0 speed is unknown, defaulting to 1000
[  263.137612][T11780] vcan0 speed is unknown, defaulting to 1000
[  263.176327][T11801] netlink: 'syz.3.2453': attribute type 21 has an invalid length.
[  263.182324][T11801] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2453'.
[  263.186439][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'.
[  263.359038][T11780] vcan0 speed is unknown, defaulting to 1000
[  263.603488][T11780] vcan0 speed is unknown, defaulting to 1000
[  264.634668][T11847] ==================================================================
[  264.638038][T11847] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  264.641420][T11847] Read of size 1 at addr ffff8880391e0330 by task syz.5.2474/11847
[  264.646092][T11847] 
[  264.647154][T11847] CPU: 1 UID: 0 PID: 11847 Comm: syz.5.2474 Not tainted syzkaller #0 PREEMPT(full) 
[  264.647174][T11847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.647185][T11847] Call Trace:
[  264.647194][T11847]  <TASK>
[  264.647201][T11847]  dump_stack_lvl+0x189/0x250
[  264.647236][T11847]  ? __virt_addr_valid+0x1c8/0x5c0
[  264.647255][T11847]  ? rcu_is_watching+0x15/0xb0
[  264.647273][T11847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.647290][T11847]  ? rcu_is_watching+0x15/0xb0
[  264.647304][T11847]  ? lock_release+0x4b/0x3e0
[  264.647325][T11847]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  264.647350][T11847]  ? __virt_addr_valid+0x1c8/0x5c0
[  264.647368][T11847]  ? __virt_addr_valid+0x4a5/0x5c0
[  264.647387][T11847]  print_report+0xca/0x240
[  264.647402][T11847]  ? __xfrm_state_insert+0x8af/0x1450
[  264.647420][T11847]  kasan_report+0x118/0x150
[  264.647445][T11847]  ? __xfrm_state_insert+0x8af/0x1450
[  264.647467][T11847]  __xfrm_state_insert+0x8af/0x1450
[  264.647495][T11847]  ? xfrm_state_insert+0x44/0x60
[  264.647515][T11847]  xfrm_state_insert+0x54/0x60
[  264.647535][T11847]  ipcomp6_init_state+0x655/0x900
[  264.647558][T11847]  __xfrm_init_state+0xa76/0x13f0
[  264.647579][T11847]  ? __xfrm_init_state+0x7ef/0x13f0
[  264.647602][T11847]  xfrm_add_sa+0x2f5b/0x4070
[  264.647625][T11847]  ? __pfx_xfrm_add_sa+0x10/0x10
[  264.647644][T11847]  ? apparmor_capable+0x137/0x1b0
[  264.647665][T11847]  ? __nla_parse+0x40/0x60
[  264.647683][T11847]  xfrm_user_rcv_msg+0x7a3/0xab0
[  264.647705][T11847]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  264.647737][T11847]  ? __pfx___mutex_trylock_common+0x10/0x10
[  264.647754][T11847]  ? rcu_is_watching+0x15/0xb0
[  264.647799][T11847]  ? trace_contention_end+0x39/0x120
[  264.647816][T11847]  ? __mutex_lock+0x335/0x1350
[  264.647836][T11847]  netlink_rcv_skb+0x208/0x470
[  264.647856][T11847]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  264.647876][T11847]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  264.647896][T11847]  ? netlink_deliver_tap+0x2e/0x1b0
[  264.647912][T11847]  ? netlink_deliver_tap+0x2e/0x1b0
[  264.647929][T11847]  xfrm_netlink_rcv+0x79/0x90
[  264.647950][T11847]  netlink_unicast+0x82f/0x9e0
[  264.647967][T11847]  ? __pfx_netlink_unicast+0x10/0x10
[  264.647981][T11847]  ? netlink_sendmsg+0x642/0xb30
[  264.647995][T11847]  ? skb_put+0x11b/0x210
[  264.648013][T11847]  netlink_sendmsg+0x805/0xb30
[  264.648033][T11847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.648050][T11847]  ? aa_sock_msg_perm+0xf1/0x1d0
[  264.648066][T11847]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  264.648083][T11847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.648100][T11847]  __sock_sendmsg+0x21c/0x270
[  264.648123][T11847]  ____sys_sendmsg+0x505/0x830
[  264.648143][T11847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.648163][T11847]  ? import_iovec+0x74/0xa0
[  264.648184][T11847]  ___sys_sendmsg+0x21f/0x2a0
[  264.648203][T11847]  ? __pfx____sys_sendmsg+0x10/0x10
[  264.648230][T11847]  ? __fget_files+0x2a/0x420
[  264.648245][T11847]  ? __fget_files+0x3a0/0x420
[  264.648261][T11847]  __x64_sys_sendmsg+0x19b/0x260
[  264.648280][T11847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  264.648301][T11847]  ? rcu_is_watching+0x15/0xb0
[  264.648316][T11847]  ? do_syscall_64+0xbe/0x3b0
[  264.648335][T11847]  do_syscall_64+0xfa/0x3b0
[  264.648350][T11847]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.648365][T11847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.648380][T11847]  ? exc_page_fault+0x9f/0xf0
[  264.648395][T11847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.648409][T11847] RIP: 0033:0x7f6f21b8eba9
[  264.648424][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.648438][T11847] RSP: 002b:00007f6f22a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.648455][T11847] RAX: ffffffffffffffda RBX: 00007f6f21dd5fa0 RCX: 00007f6f21b8eba9
[  264.648466][T11847] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000003
[  264.648476][T11847] RBP: 00007f6f21c11e19 R08: 0000000000000000 R09: 0000000000000000
[  264.648494][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.648504][T11847] R13: 00007f6f21dd6038 R14: 00007f6f21dd5fa0 R15: 00007ffc7871c308
[  264.648519][T11847]  </TASK>
[  264.648526][T11847] 
[  264.811864][T11847] Allocated by task 10253:
[  264.813348][T11847]  kasan_save_track+0x3e/0x80
[  264.814931][T11847]  __kasan_slab_alloc+0x6c/0x80
[  264.816540][T11847]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  264.818290][T11847]  xfrm_state_alloc+0x24/0x2f0
[  264.820001][T11847]  __find_acq_core+0x8a7/0x1c00
[  264.821803][T11847]  xfrm_find_acq+0x78/0xa0
[  264.823280][T11847]  xfrm_alloc_userspi+0x6b3/0xc90
[  264.825000][T11847]  xfrm_user_rcv_msg+0x7a3/0xab0
[  264.826605][T11847]  netlink_rcv_skb+0x208/0x470
[  264.828188][T11847]  xfrm_netlink_rcv+0x79/0x90
[  264.829824][T11847]  netlink_unicast+0x82f/0x9e0
[  264.831476][T11847]  netlink_sendmsg+0x805/0xb30
[  264.833085][T11847]  __sock_sendmsg+0x21c/0x270
[  264.834685][T11847]  ____sys_sendmsg+0x505/0x830
[  264.836352][T11847]  ___sys_sendmsg+0x21f/0x2a0
[  264.837929][T11847]  __x64_sys_sendmsg+0x19b/0x260
[  264.839592][T11847]  do_syscall_64+0xfa/0x3b0
[  264.841072][T11847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.842950][T11847] 
[  264.843695][T11847] Freed by task 9:
[  264.844890][T11847]  kasan_save_track+0x3e/0x80
[  264.846368][T11847]  kasan_save_free_info+0x46/0x50
[  264.847947][T11847]  __kasan_slab_free+0x5b/0x80
[  264.849851][T11847]  kmem_cache_free+0x18f/0x400
[  264.851554][T11847]  xfrm_state_gc_task+0x52d/0x6b0
[  264.853306][T11847]  process_scheduled_works+0xae1/0x17b0
[  264.855392][T11847]  worker_thread+0x8a0/0xda0
[  264.857079][T11847]  kthread+0x711/0x8a0
[  264.858492][T11847]  ret_from_fork+0x439/0x7d0
[  264.860313][T11847]  ret_from_fork_asm+0x1a/0x30
[  264.862029][T11847] 
[  264.862894][T11847] The buggy address belongs to the object at ffff8880391e0000
[  264.862894][T11847]  which belongs to the cache xfrm_state of size 928
[  264.867377][T11847] The buggy address is located 816 bytes inside of
[  264.867377][T11847]  freed 928-byte region [ffff8880391e0000, ffff8880391e03a0)
[  264.871770][T11847] 
[  264.872581][T11847] The buggy address belongs to the physical page:
[  264.874854][T11847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880391e0000 pfn:0x391e0
[  264.878351][T11847] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  264.881079][T11847] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  264.883579][T11847] page_type: f5(slab)
[  264.884895][T11847] raw: 00fff00000000040 ffff888104fe93c0 dead000000000122 0000000000000000
[  264.887575][T11847] raw: ffff8880391e0000 00000000800e000c 00000000f5000000 0000000000000000
[  264.890258][T11847] head: 00fff00000000040 ffff888104fe93c0 dead000000000122 0000000000000000
[  264.893343][T11847] head: ffff8880391e0000 00000000800e000c 00000000f5000000 0000000000000000
[  264.895928][T11847] head: 00fff00000000002 ffffea0000e47801 00000000ffffffff 00000000ffffffff
[  264.899116][T11847] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  264.902031][T11847] page dumped because: kasan: bad access detected
[  264.904531][T11847] page_owner tracks the page as allocated
[  264.906837][T11847] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5992, tgid 5991 (syz.2.33), ts 71034635614, free_ts 71011499280
[  264.913049][T11847]  post_alloc_hook+0x240/0x2a0
[  264.914538][T11847]  get_page_from_freelist+0x21e4/0x22c0
[  264.916280][T11847]  __alloc_frozen_pages_noprof+0x181/0x370
[  264.918106][T11847]  alloc_pages_mpol+0x232/0x4a0
[  264.919612][T11847]  allocate_slab+0x8a/0x370
[  264.921030][T11847]  ___slab_alloc+0xbeb/0x1420
[  264.922490][T11847]  kmem_cache_alloc_noprof+0x283/0x3c0
[  264.924222][T11847]  xfrm_state_alloc+0x24/0x2f0
[  264.925712][T11847]  xfrm_add_sa+0x17d1/0x4070
[  264.927186][T11847]  xfrm_user_rcv_msg+0x7a3/0xab0
[  264.928754][T11847]  netlink_rcv_skb+0x208/0x470
[  264.930273][T11847]  xfrm_netlink_rcv+0x79/0x90
[  264.931783][T11847]  netlink_unicast+0x82f/0x9e0
[  264.933253][T11847]  netlink_sendmsg+0x805/0xb30
[  264.934766][T11847]  __sock_sendmsg+0x21c/0x270
[  264.936561][T11847]  ____sys_sendmsg+0x505/0x830
[  264.938093][T11847] page last free pid 5298 tgid 5298 stack trace:
[  264.940052][T11847]  __free_frozen_pages+0xbc4/0xd30
[  264.941653][T11847]  __slab_free+0x303/0x3c0
[  264.943053][T11847]  qlist_free_all+0x97/0x140
[  264.944516][T11847]  kasan_quarantine_reduce+0x148/0x160
[  264.946221][T11847]  __kasan_slab_alloc+0x22/0x80
[  264.947762][T11847]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  264.949473][T11847]  getname_flags+0xb8/0x540
[  264.950981][T11847]  do_sys_openat2+0xbc/0x1c0
[  264.952865][T11847]  __x64_sys_openat+0x138/0x170
[  264.954833][T11847]  do_syscall_64+0xfa/0x3b0
[  264.956662][T11847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.959044][T11847] 
[  264.960023][T11847] Memory state around the buggy address:
[  264.962310][T11847]  ffff8880391e0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.965526][T11847]  ffff8880391e0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.968648][T11847] >ffff8880391e0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.971899][T11847]                                      ^
[  264.974233][T11847]  ffff8880391e0380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  264.977443][T11847]  ffff8880391e0400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  264.980637][T11847] ==================================================================
[  264.984126][T11847] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  264.987005][T11847] CPU: 1 UID: 0 PID: 11847 Comm: syz.5.2474 Not tainted syzkaller #0 PREEMPT(full) 
[  264.990813][T11847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  264.994783][T11847] Call Trace:
[  264.996139][T11847]  <TASK>
[  264.997362][T11847]  dump_stack_lvl+0x99/0x250
[  264.999384][T11847]  ? __asan_memcpy+0x40/0x70
[  265.001281][T11847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.003504][T11847]  ? __pfx__printk+0x10/0x10
[  265.005592][T11847]  vpanic+0x281/0x750
[  265.007221][T11847]  ? __pfx_vpanic+0x10/0x10
[  265.009040][T11847]  ? irqentry_exit+0x74/0x90
[  265.010904][T11847]  panic+0xb9/0xc0
[  265.012417][T11847]  ? __pfx_panic+0x10/0x10
[  265.014266][T11847]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  265.016544][T11847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.018915][T11847]  ? is_module_address+0x17/0xf0
[  265.020935][T11847]  ? __xfrm_state_insert+0x8af/0x1450
[  265.023114][T11847]  check_panic_on_warn+0x89/0xb0
[  265.025268][T11847]  ? __xfrm_state_insert+0x8af/0x1450
[  265.027379][T11847]  end_report+0x78/0x160
[  265.029010][T11847]  kasan_report+0x129/0x150
[  265.030819][T11847]  ? __xfrm_state_insert+0x8af/0x1450
[  265.033021][T11847]  __xfrm_state_insert+0x8af/0x1450
[  265.035099][T11847]  ? xfrm_state_insert+0x44/0x60
[  265.037045][T11847]  xfrm_state_insert+0x54/0x60
[  265.038945][T11847]  ipcomp6_init_state+0x655/0x900
[  265.041008][T11847]  __xfrm_init_state+0xa76/0x13f0
[  265.043057][T11847]  ? __xfrm_init_state+0x7ef/0x13f0
[  265.045137][T11847]  xfrm_add_sa+0x2f5b/0x4070
[  265.047011][T11847]  ? __pfx_xfrm_add_sa+0x10/0x10
[  265.049007][T11847]  ? apparmor_capable+0x137/0x1b0
[  265.051065][T11847]  ? __nla_parse+0x40/0x60
[  265.052828][T11847]  xfrm_user_rcv_msg+0x7a3/0xab0
[  265.054825][T11847]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  265.057028][T11847]  ? __pfx___mutex_trylock_common+0x10/0x10
[  265.059433][T11847]  ? rcu_is_watching+0x15/0xb0
[  265.061093][T11847]  ? trace_contention_end+0x39/0x120
[  265.063072][T11847]  ? __mutex_lock+0x335/0x1350
[  265.065016][T11847]  netlink_rcv_skb+0x208/0x470
[  265.066955][T11847]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  265.069135][T11847]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  265.071268][T11847]  ? netlink_deliver_tap+0x2e/0x1b0
[  265.073347][T11847]  ? netlink_deliver_tap+0x2e/0x1b0
[  265.075416][T11847]  xfrm_netlink_rcv+0x79/0x90
[  265.077280][T11847]  netlink_unicast+0x82f/0x9e0
[  265.079350][T11847]  ? __pfx_netlink_unicast+0x10/0x10
[  265.081478][T11847]  ? netlink_sendmsg+0x642/0xb30
[  265.083483][T11847]  ? skb_put+0x11b/0x210
[  265.085376][T11847]  netlink_sendmsg+0x805/0xb30
[  265.087307][T11847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.089377][T11847]  ? aa_sock_msg_perm+0xf1/0x1d0
[  265.091385][T11847]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  265.093507][T11847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.095641][T11847]  __sock_sendmsg+0x21c/0x270
[  265.097526][T11847]  ____sys_sendmsg+0x505/0x830
[  265.099485][T11847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.101604][T11847]  ? import_iovec+0x74/0xa0
[  265.103358][T11847]  ___sys_sendmsg+0x21f/0x2a0
[  265.105273][T11847]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.107376][T11847]  ? __fget_files+0x2a/0x420
[  265.109226][T11847]  ? __fget_files+0x3a0/0x420
[  265.111045][T11847]  __x64_sys_sendmsg+0x19b/0x260
[  265.113017][T11847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  265.115210][T11847]  ? rcu_is_watching+0x15/0xb0
[  265.117133][T11847]  ? do_syscall_64+0xbe/0x3b0
[  265.119041][T11847]  do_syscall_64+0xfa/0x3b0
[  265.120913][T11847]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.123013][T11847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.125469][T11847]  ? exc_page_fault+0x9f/0xf0
[  265.127360][T11847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.129700][T11847] RIP: 0033:0x7f6f21b8eba9
[  265.131518][T11847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.138782][T11847] RSP: 002b:00007f6f22a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.142132][T11847] RAX: ffffffffffffffda RBX: 00007f6f21dd5fa0 RCX: 00007f6f21b8eba9
[  265.145108][T11847] RDX: 0000000000008000 RSI: 00002000000035c0 RDI: 0000000000000003
[  265.148475][T11847] RBP: 00007f6f21c11e19 R08: 0000000000000000 R09: 0000000000000000
[  265.151533][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.154671][T11847] R13: 00007f6f21dd6038 R14: 00007f6f21dd5fa0 R15: 00007ffc7871c308
[  265.157831][T11847]  </TASK>
[  265.159704][T11847] Kernel Offset: disabled
[  265.161497][T11847] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:25:28  Registers:
info registers vcpu 0

CPU#0
RAX=926a41ac83b49e00 RBX=ffffffff819695f8 RCX=926a41ac83b49e00 RDX=0000000000000001
RSI=ffffffff8d9ba186 RDI=ffffffff8be33e00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d0a12 CR3=000000004767e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f6f2290d100 00007f6f21da7460 XMM05=00007f6f21da7478 00007f6f21da74c0
XMM06=00007f6f21da74b8 00007f6f21da74b0 XMM07=00007f6f21da74a8 00007f6f21da74a0
XMM08=0000000000000000 00007f6f21c12ee7 XMM09=0000000000000000 00007f6f21c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001523 RDI=0000000000001524 RBP=00000000000003f8 RSP=ffffc90007fa69f0
R8 =ffff888106ef0237 R9 =1ffff11020dde046 R10=dffffc0000000000 R11=ffffffff854f9f00
R12=dffffc0000000000 R13=ffffffff99b02917 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9f7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6f22a706c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000004767e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6f21da7498 00007f6f21da7470 XMM03=00007f6f21da74a8 00007f6f21da74a0
XMM04=00007f6f2290d100 00007f6f21da7460 XMM05=00007f6f21da7478 00007f6f21da74c0
XMM06=00007f6f21da74b8 00007f6f21da74b0 XMM07=00007f6f21da74a8 00007f6f21da74a0
XMM08=0000000000000000 00007f6f21c12ee7 XMM09=0000000000000000 00007f6f21c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
