last executing test programs:

19.907368339s ago: executing program 0 (id=3371):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)

19.860423121s ago: executing program 0 (id=3374):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000040)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r0)

19.81009875s ago: executing program 0 (id=3375):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x28, 0x1, 0x28, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x8000, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00'}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

19.361185049s ago: executing program 1 (id=3387):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80a6fecbfb090204b1602f6e3540080003", 0x1b}], 0x1, 0x0, 0x0, 0x39c}, 0x40)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000076"], 0xfe33)

19.311189207s ago: executing program 1 (id=3389):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

18.939034259s ago: executing program 0 (id=3399):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x2000, 0x20001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000000"], 0x10)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

18.434043901s ago: executing program 1 (id=3402):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x3}, 0x8980}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000300), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

18.328331967s ago: executing program 1 (id=3404):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000000)=r0, 0x4)

18.231199035s ago: executing program 1 (id=3405):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(r1)
getpid()
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xffff, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x8, 0x4, 0x6}, 0x48}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c080}, 0x40000)

18.041031611s ago: executing program 0 (id=3406):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x0)

17.789379474s ago: executing program 1 (id=3407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x1}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

17.788866751s ago: executing program 0 (id=3408):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

17.554206422s ago: executing program 32 (id=3407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x1}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

17.508766813s ago: executing program 33 (id=3408):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})

6.32953868s ago: executing program 2 (id=3483):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

6.280704578s ago: executing program 2 (id=3486):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0xe95a, 0x4, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6.199616841s ago: executing program 2 (id=3487):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x1000003, 0x0, 0x3}, 0x10}, 0x94)
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000015c0)=""/246, 0xf6}], 0x1}, 0x40000101)

6.199102765s ago: executing program 2 (id=3489):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x26)
mkdir(0x0, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="2ca1542b", 0x4}], 0x1}, 0x40000000)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000240)=""/11, 0x9, 0x0, 0x2d, 0x0, &(0x7f0000000280)="46dd93d7664b1e9ef768b98547d6f370ef25cce57ed07b689648aa2cfb778ed954f5e95c4cffc54212f3109b77", 0x0, 0x1, 0x0, 0x4}, 0x50)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

5.188199246s ago: executing program 2 (id=3495):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

4.927535103s ago: executing program 2 (id=3501):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd9c}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.00057974s ago: executing program 3 (id=3530):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$sock(r0, 0x0, 0x80)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x4}, 0x80c8, 0x0, 0x0, 0x1, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x38, 0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

1.690804287s ago: executing program 4 (id=3531):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}, {&(0x7f0000001240)="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", 0x234}], 0x2}, 0x9cdc2384056b48b8)

1.618157863s ago: executing program 4 (id=3532):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, &(0x7f0000000380)=""/243}, 0x20)

1.525009654s ago: executing program 4 (id=3533):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1.368170005s ago: executing program 3 (id=3534):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a0001", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

834.346247ms ago: executing program 4 (id=3535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x20008000)

739.604466ms ago: executing program 4 (id=3536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

658.303293ms ago: executing program 4 (id=3537):
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0})
socketpair(0x1e, 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="98000000180081064e81f782db4cb904021d08", 0x13}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
close(r1)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33)
socket$kcm(0x28, 0x1, 0x0)
r4 = syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2e, 0xffff4746, 0x3, 0x2, 0x0, 0x7}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@rfm={0x25, 0x5, "1e47d9c90acf1f469349007d16c0e8f7"}, 0x80, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="675f17e8a544f0f67ec69324fac1", 0xe}, {&(0x7f0000000080)="463266396ceff74ab29742e4bb113756", 0x10}, {&(0x7f00000006c0)="e2a9c7eef25eeb6c8f53506498185b8b5f52590f18d27d7590894e21ae2ea708841a860606209580cf6a35645fb6d40596155343fb4450bc1fcfaf90abf18da9eaf8b74604e6dec228485b0b62e093ca11589b510d6f8701a7be12349db2c6b5059c47dc5b7e3e2fcf0f11097081a9dc2d62b31fa7c1ed587c2496df6417479849d84e991dd89675251207f23e5a27a3c52a8b566bdabfe9b3fea1ae81135f911772e168e1739f4c918c122f0118f45280ab9e2cf2a8af95f7e457aa60a6ea01", 0xc0}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000b40)}, {&(0x7f0000000840)="c274d75abb01291bf31924710c7b19aa3a312ac77ca62280ac6a86cb61c0e0b08c51a996ea33ba19876c1b", 0x2b}], 0x8}, 0x40000)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$sock(r8, &(0x7f00000008c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000900)}, 0x880)

268.049752ms ago: executing program 3 (id=3538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

165.214004ms ago: executing program 3 (id=3539):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x100, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x7b8}]}, 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

92.528233ms ago: executing program 3 (id=3540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)

0s ago: executing program 3 (id=3541):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r1, 0x0, 0x4000000)
close(r2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00b5F'], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x18, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r7, 0x4)
sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20)
r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='!~u&00\t&&')
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60773' (ED25519) to the list of known hosts.
syzkaller login: [   48.242125][ T5772] cgroup: Unknown subsys name 'net'
[   48.340511][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.348455][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.990720][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.989845][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.994113][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.998272][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.002084][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.005657][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.022375][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.026645][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.030407][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.034158][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.038839][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.168953][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.172927][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.186182][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.190878][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.196555][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.258355][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   55.399941][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.403758][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.407603][ T5840] bridge_slave_0: entered allmulticast mode
[   55.411753][ T5840] bridge_slave_0: entered promiscuous mode
[   55.420656][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.423722][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.428212][ T5840] bridge_slave_1: entered allmulticast mode
[   55.432108][ T5840] bridge_slave_1: entered promiscuous mode
[   55.484908][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.494241][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.550878][ T5840] team0: Port device team_slave_0 added
[   55.571662][ T5840] team0: Port device team_slave_1 added
[   55.618745][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.621819][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.633317][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.644441][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.647476][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.656730][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.668887][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.781192][ T5840] hsr_slave_0: entered promiscuous mode
[   55.784584][ T5840] hsr_slave_1: entered promiscuous mode
[   55.838796][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.841600][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.844180][ T5845] bridge_slave_0: entered allmulticast mode
[   55.848303][ T5845] bridge_slave_0: entered promiscuous mode
[   55.852262][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.855345][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.859027][ T5845] bridge_slave_1: entered allmulticast mode
[   55.862353][ T5845] bridge_slave_1: entered promiscuous mode
[   55.908796][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.912112][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.926652][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.997429][ T5845] team0: Port device team_slave_0 added
[   56.014123][ T5845] team0: Port device team_slave_1 added
[   56.099699][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.102668][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.114142][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.134028][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.137264][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.140345][ T5851] bridge_slave_0: entered allmulticast mode
[   56.144239][ T5851] bridge_slave_0: entered promiscuous mode
[   56.157924][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.160830][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.173047][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.183758][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.189625][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.192765][ T5851] bridge_slave_1: entered allmulticast mode
[   56.197749][ T5851] bridge_slave_1: entered promiscuous mode
[   56.263901][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.278985][ T5845] hsr_slave_0: entered promiscuous mode
[   56.281587][ T5845] hsr_slave_1: entered promiscuous mode
[   56.283802][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   56.286847][ T5845] Cannot create hsr debugfs directory
[   56.291695][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.370996][ T5851] team0: Port device team_slave_0 added
[   56.389251][ T5851] team0: Port device team_slave_1 added
[   56.444821][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.448006][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.460116][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.479367][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.482181][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.493869][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.550080][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.560366][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.584924][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.591655][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.606387][ T5851] hsr_slave_0: entered promiscuous mode
[   56.609139][ T5851] hsr_slave_1: entered promiscuous mode
[   56.611792][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.613915][ T5851] Cannot create hsr debugfs directory
[   56.762253][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.778990][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.804695][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.831103][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.895059][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.904023][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.927624][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.938849][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.962611][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.004961][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   57.025060][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.028266][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.050939][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.053954][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.077681][ T5846] Bluetooth: hci0: command tx timeout
[   57.094983][ T5846] Bluetooth: hci1: command tx timeout
[   57.133867][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.187327][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.203691][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.206690][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.225634][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.228715][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.236085][ T5846] Bluetooth: hci2: command tx timeout
[   57.237622][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.282297][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.313377][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.315914][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.334290][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.337423][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.369406][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.474637][ T5840] veth0_vlan: entered promiscuous mode
[   57.490279][ T5840] veth1_vlan: entered promiscuous mode
[   57.571399][ T5840] veth0_macvtap: entered promiscuous mode
[   57.587555][ T5840] veth1_macvtap: entered promiscuous mode
[   57.602687][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.615814][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.631374][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.641532][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.657623][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.661211][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.671207][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.676272][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.725301][ T5845] veth0_vlan: entered promiscuous mode
[   57.750611][ T5845] veth1_vlan: entered promiscuous mode
[   57.764600][  T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.773845][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.807187][ T5851] veth0_vlan: entered promiscuous mode
[   57.810885][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.815170][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.821319][ T5845] veth0_macvtap: entered promiscuous mode
[   57.839522][ T5851] veth1_vlan: entered promiscuous mode
[   57.847805][ T5845] veth1_macvtap: entered promiscuous mode
[   57.883422][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.883817][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.903736][ T5851] veth0_macvtap: entered promiscuous mode
[   57.919241][ T5851] veth1_macvtap: entered promiscuous mode
[   57.930716][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.951786][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.961088][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.978261][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.987808][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.991187][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.011152][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.047548][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.054325][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.078902][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.091816][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.098073][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.101528][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.187259][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.190181][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.216927][  T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.219755][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.250796][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.254907][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.569421][ T5846] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11
[   58.949888][ T5947] netlink: 'syz.1.19': attribute type 25 has an invalid length.
[   58.953801][ T5947] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.19'.
[   58.992894][ T5947] netlink: 'syz.1.19': attribute type 21 has an invalid length.
[   58.997998][ T5947] netlink: 14045 bytes leftover after parsing attributes in process `syz.1.19'.
[   59.149961][ T5955] netlink: 'syz.0.23': attribute type 3 has an invalid length.
[   59.153788][ T5955] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   59.158273][ T5955] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.23'.
[   59.162149][ T5953] : port 1(vlan0) entered blocking state
[   59.165711][ T5953] : port 1(vlan0) entered disabled state
[   59.169412][ T5846] Bluetooth: hci1: command tx timeout
[   59.169774][ T5953] vlan0: entered allmulticast mode
[   59.172451][ T5233] Bluetooth: hci0: command tx timeout
[   59.174509][ T5953] veth0_vlan: entered allmulticast mode
[   59.182007][ T5953] vlan0: entered promiscuous mode
[   59.202384][ T5955] netlink: 'syz.0.23': attribute type 8 has an invalid length.
[   59.299925][ T5959] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.25'.
[   59.449074][ T5970] netlink: 'syz.0.29': attribute type 3 has an invalid length.
[   60.572289][ T6038] netlink: 'syz.0.63': attribute type 21 has an invalid length.
[   61.189946][ T6056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.236603][ T5846] Bluetooth: hci1: command tx timeout
[   61.239726][ T5233] Bluetooth: hci0: command tx timeout
[   61.389968][ T6056] syz.1.69 (6056) used greatest stack depth: 19912 bytes left
[   61.598058][ T6071] netlink: 324 bytes leftover after parsing attributes in process `syz.0.76'.
[   62.178956][ T6080] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.78'.
[   62.179621][    C0] hrtimer: interrupt took 28787 ns
[   62.251102][ T6088] netlink: 44 bytes leftover after parsing attributes in process `syz.1.79'.
[   62.292707][ T6092] netlink: 'syz.0.81': attribute type 2 has an invalid length.
[   62.297563][ T6092] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   62.302177][ T6092] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   62.435006][ T6100] syzkaller1: tun_chr_ioctl cmd 1074025677
[   62.442817][ T6100] syzkaller1: linktype set to 780
[   62.468196][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.85'.
[   62.472949][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.85'.
[   62.478975][ T6100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.85'.
[   62.575500][ T6109] : renamed from hsr0 (while UP)
[   62.598123][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   62.602024][ T5846] Bluetooth: hci2: Injecting HCI hardware error event
[   62.605632][ T5846] Bluetooth: hci2: hardware error 0x00
[   62.606997][ T6110] xt_time: invalid argument - start or stop time greater than 23:59:59
[   63.317641][ T5844] Bluetooth: hci0: command tx timeout
[   63.319916][ T5233] Bluetooth: hci1: command tx timeout
[   63.653815][ T6124] wg0 speed is unknown, defaulting to 1000
[   63.657016][ T6124] wg0 speed is unknown, defaulting to 1000
[   63.659977][ T6124] wg0 speed is unknown, defaulting to 1000
[   63.664984][ T6124] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   63.677278][ T6124] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   63.742905][ T6124] wg0 speed is unknown, defaulting to 1000
[   63.748801][ T6124] wg0 speed is unknown, defaulting to 1000
[   63.752881][ T6124] wg0 speed is unknown, defaulting to 1000
[   64.154575][ T6152] validate_nla: 2 callbacks suppressed
[   64.154590][ T6152] netlink: 'syz.2.107': attribute type 10 has an invalid length.
[   64.172540][ T6152] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   64.210904][ T6148] syzkaller0: entered promiscuous mode
[   64.213398][ T6148] syzkaller0: entered allmulticast mode
[   64.676274][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   65.812567][ T6166] syzkaller0: tun_chr_ioctl cmd 1074025677
[   65.814978][ T6166] syzkaller0: linktype set to 801
[   66.011881][ T6191] Zero length message leads to an empty skb
[   66.076573][ T6193] netlink: 'syz.0.126': attribute type 4 has an invalid length.
[   66.080069][ T6193] netlink: 'syz.0.126': attribute type 16 has an invalid length.
[   66.082734][ T6193] __nla_validate_parse: 1 callbacks suppressed
[   66.082745][ T6193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.126'.
[   66.385676][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'.
[   66.559468][ T6213] Dead loop on virtual device ip6_vti0, fix it urgently!
[   68.550228][ T6226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.142'.
[   68.577413][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'.
[   68.709297][ T6236] netlink: 'syz.0.147': attribute type 21 has an invalid length.
[   68.711877][ T6236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.147'.
[   68.994932][ T6255] delete_channel: no stack
[   69.390708][ T6276] syz.2.165 uses obsolete (PF_INET,SOCK_PACKET)
[   69.468157][ T6280] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   69.830008][ T6306] netlink: 'syz.0.179': attribute type 10 has an invalid length.
[   69.832527][ T6306] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.179'.
[   69.873465][ T6310] warning: `syz.0.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.383750][ T6347] netlink: 'syz.1.199': attribute type 21 has an invalid length.
[   70.472139][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'.
[   70.479896][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'.
[   70.487163][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   70.490368][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   70.933706][ T6367] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.253884][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.256168][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.350678][ T6376] netlink: 'syz.2.213': attribute type 10 has an invalid length.
[   71.411395][ T6376] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   71.573405][ T6384] tun0: tun_chr_ioctl cmd 1074025675
[   71.579278][ T6384] tun0: persist enabled
[   71.582028][ T6382] tun0: tun_chr_ioctl cmd 1074025675
[   71.585534][ T6382] tun0: persist disabled
[   71.688221][ T6392] Driver unsupported XDP return value 0 on prog  (id 70) dev N/A, expect packet loss!
[   71.740576][ T6396] netlink: 'syz.0.221': attribute type 7 has an invalid length.
[   71.831265][ T6401] netlink: 'syz.0.222': attribute type 10 has an invalid length.
[   71.834007][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.222'.
[   71.837502][ T6401] dummy0: entered promiscuous mode
[   71.840942][ T6401] bridge0: port 3(dummy0) entered blocking state
[   71.846582][ T6401] bridge0: port 3(dummy0) entered disabled state
[   71.849390][ T6401] dummy0: entered allmulticast mode
[   71.852295][ T6401] bridge0: port 3(dummy0) entered blocking state
[   71.854976][ T6401] bridge0: port 3(dummy0) entered forwarding state
[   71.893286][ T6403] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.223'.
[   72.014922][ T6408] netlink: 104 bytes leftover after parsing attributes in process `syz.2.225'.
[   72.558819][ T6455] netlink: 'syz.0.248': attribute type 2 has an invalid length.
[   72.561618][ T6455] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   72.564412][ T6455] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.248'.
[   72.570952][ T6455] block nbd5: not configured, cannot reconfigure
[   72.583604][ T6453] netlink: 'syz.1.247': attribute type 25 has an invalid length.
[   72.587534][ T6453] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.247'.
[   72.605362][ T6457] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.249'.
[   72.609789][ T6457] netlink: zone id is out of range
[   72.612388][ T6457] netlink: zone id is out of range
[   72.614235][ T6459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.615232][ T6457] netlink: get zone limit has 8 unknown bytes
[   72.685407][ T6465] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.253'.
[   72.775602][ T6471] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.022117][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'.
[   73.117711][ T6498] netlink: 'syz.0.268': attribute type 37 has an invalid length.
[   73.142404][ T6502] netlink: 495 bytes leftover after parsing attributes in process `syz.0.270'.
[   73.299817][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'.
[   73.603224][ T6553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.160164][ T6609] tap0: tun_chr_ioctl cmd 2147767521
[   76.480542][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.873666][ T6678] openvswitch: netlink: Flow actions attr not present in new flow.
[   76.878657][ T6681] validate_nla: 1 callbacks suppressed
[   76.878714][ T6681] netlink: 'syz.2.350': attribute type 1 has an invalid length.
[   76.881879][ T6678] syzkaller0: entered promiscuous mode
[   77.255044][ T6717] netlink: 'syz.2.367': attribute type 21 has an invalid length.
[   77.258749][ T6717] __nla_validate_parse: 9 callbacks suppressed
[   77.258758][ T6717] netlink: 176 bytes leftover after parsing attributes in process `syz.2.367'.
[   77.624095][ T6728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.371'.
[   77.911799][ T6739] netlink: 52 bytes leftover after parsing attributes in process `syz.2.376'.
[   77.915099][ T6739] team_slave_0: entered allmulticast mode
[   77.918943][ T6739] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   77.956658][ T6740] netlink: 'syz.0.363': attribute type 28 has an invalid length.
[   79.029916][ T6795] netlink: 'syz.2.402': attribute type 22 has an invalid length.
[   79.176983][ T6803] netlink: 'syz.0.406': attribute type 10 has an invalid length.
[   79.181457][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'.
[   79.187582][ T6803] batman_adv: batadv0: Adding interface: hsr_slave_1
[   79.190541][ T6803] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.202369][ T6803] batman_adv: batadv0: Interface activated: hsr_slave_1
[   80.439412][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'.
[   80.796693][ T6873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'.
[   80.847735][ T6877] netlink: 277 bytes leftover after parsing attributes in process `syz.1.442'.
[   81.035445][ T6891] netlink: 10 bytes leftover after parsing attributes in process `syz.0.448'.
[   81.355476][ T6902] netlink: 180 bytes leftover after parsing attributes in process `syz.0.453'.
[   81.477627][   T10] cfg80211: failed to load regulatory.db
[   82.128568][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'.
[   82.470483][ T6914] delete_channel: no stack
[   82.670337][ T5846] Bluetooth: hci1: unknown advertising packet type: 0xc5
[   83.349736][ T6954] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.471'.
[   83.444160][ T6958] netlink: 156 bytes leftover after parsing attributes in process `syz.0.473'.
[   83.475250][ T6960] netlink: 260 bytes leftover after parsing attributes in process `syz.1.474'.
[   83.491849][ T6960] netlink: 260 bytes leftover after parsing attributes in process `syz.1.474'.
[   83.525959][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   83.534996][ T6964] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.477'.
[   83.698673][ T6969] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.475'.
[   84.289695][ T6973] netlink: 'syz.1.478': attribute type 13 has an invalid length.
[   84.440662][ T6979] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.542897][ T6987] netlink: 'syz.2.485': attribute type 1 has an invalid length.
[   84.648599][ T6997] netlink: 'syz.1.490': attribute type 2 has an invalid length.
[   84.651192][ T6997] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.490'.
[   84.654128][ T6997] nbd: must specify at least one socket
[   84.675654][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.493'.
[   84.682805][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.493'.
[   84.694882][ T7003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.493'.
[   84.727257][ T7006] netlink: 'syz.0.492': attribute type 25 has an invalid length.
[   84.742232][ T7008] : entered promiscuous mode
[   85.570335][ T7055] wg0 speed is unknown, defaulting to 1000
[   86.108948][ T7092] netlink: 'syz.1.533': attribute type 11 has an invalid length.
[   86.127433][ T7092] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   86.130429][ T7092] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   86.134939][ T7091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.185806][ T7094] netlink: 'syz.1.534': attribute type 22 has an invalid length.
[   86.308722][ T7102] netlink: 'syz.0.538': attribute type 1 has an invalid length.
[   87.814377][ T7135] netlink: zone id is out of range
[   87.817153][ T7135] netlink: zone id is out of range
[   87.819710][ T7135] netlink: zone id is out of range
[   87.821633][ T7135] netlink: zone id is out of range
[   87.823552][ T7135] netlink: zone id is out of range
[   87.825410][ T7135] netlink: zone id is out of range
[   87.836550][ T7135] netlink: zone id is out of range
[   87.838693][ T7135] netlink: zone id is out of range
[   87.840357][ T7135] netlink: zone id is out of range
[   88.025395][ T7153] netlink: 'syz.1.561': attribute type 21 has an invalid length.
[   88.033533][ T7153] netlink: 'syz.1.561': attribute type 15 has an invalid length.
[   88.043642][ T7153] IPv6: NLM_F_CREATE should be specified when creating new route
[   88.047339][ T7153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.050549][ T7153] IPv6: NLM_F_CREATE should be set when creating new route
[   88.053335][ T7153] IPv6: NLM_F_CREATE should be set when creating new route
[   88.056476][ T7153] IPv6: NLM_F_CREATE should be set when creating new route
[   89.338535][ T7223] C: renamed from team_slave_0 (while UP)
[   89.342394][ T7223] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[   89.344985][ T7223] __nla_validate_parse: 15 callbacks suppressed
[   89.344994][ T7223] netlink: 152 bytes leftover after parsing attributes in process `syz.0.589'.
[   89.382901][ T7225] netlink: 'syz.0.590': attribute type 1 has an invalid length.
[   89.675444][ T7252] netlink: 'syz.0.602': attribute type 10 has an invalid length.
[   89.705159][ T7252] geneve0: entered promiscuous mode
[   89.718984][ T7252] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   90.442737][ T7281] netlink: 'syz.2.615': attribute type 29 has an invalid length.
[   90.457346][ T7281] netlink: 'syz.2.615': attribute type 29 has an invalid length.
[   90.468454][ T7283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.616'.
[   90.778524][ T7323] dummy0: left allmulticast mode
[   90.781315][ T7323] bridge0: port 3(dummy0) entered disabled state
[   90.789069][ T7323] bridge_slave_1: left allmulticast mode
[   90.791492][ T7323] bridge_slave_1: left promiscuous mode
[   90.794176][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.812007][ T7323] bridge_slave_0: left allmulticast mode
[   90.814525][ T7323] bridge_slave_0: left promiscuous mode
[   90.817846][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.045577][ T7337] netlink: 'syz.2.639': attribute type 3 has an invalid length.
[   91.048488][ T7337] netlink: 'syz.2.639': attribute type 8 has an invalid length.
[   91.051194][ T7337] netlink: 'syz.2.639': attribute type 6 has an invalid length.
[   91.054137][ T7337] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.639'.
[   91.195389][ T7350] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[   91.328458][ T7362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.651'.
[   91.653162][ T7377] : renamed from vlan0 (while UP)
[   91.915029][ T7385] netlink: 'syz.1.660': attribute type 29 has an invalid length.
[   92.282756][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'.
[   92.294564][ T7389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.662'.
[   93.130041][ T7455] netlink: 56429 bytes leftover after parsing attributes in process `syz.2.692'.
[   93.367987][ T7466] netlink: 182 bytes leftover after parsing attributes in process `syz.1.697'.
[   94.553976][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'.
[   94.734631][ T7512] validate_nla: 3 callbacks suppressed
[   94.734649][ T7512] netlink: 'syz.2.711': attribute type 1 has an invalid length.
[   95.228712][ T7545] netlink: 'syz.0.722': attribute type 39 has an invalid length.
[   95.232778][ T7544] netlink: 'syz.2.724': attribute type 2 has an invalid length.
[   95.235473][ T7544] netlink: 'syz.2.724': attribute type 4 has an invalid length.
[   95.238521][ T7544] netlink: 'syz.2.724': attribute type 8 has an invalid length.
[   95.241353][ T7544] netlink: 44 bytes leftover after parsing attributes in process `syz.2.724'.
[   96.264506][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'.
[   96.269829][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'.
[   96.330829][ T7573] netlink: 830 bytes leftover after parsing attributes in process `syz.2.737'.
[   96.427768][ T7583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.742'.
[   96.702737][ T7607] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.703368][ T7610] netlink: 22 bytes leftover after parsing attributes in process `syz.1.754'.
[   96.709931][ T7607] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.741739][ T7611] netlink: 'syz.2.752': attribute type 21 has an invalid length.
[   96.968120][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.760'.
[   96.972386][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.760'.
[   96.977608][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.760'.
[   97.208520][ T7639] netlink: 'syz.1.767': attribute type 10 has an invalid length.
[   97.211303][ T7639] macvlan1: entered allmulticast mode
[   97.213780][ T7639] veth1_vlan: entered allmulticast mode
[   97.218539][ T7639] team0: Device macvlan1 is up. Set it down before adding it as a team port
[   97.611808][ T5846] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   97.646912][ T7607] syz.2.752 (7607) used greatest stack depth: 19792 bytes left
[   98.123034][ T7688] netlink: 'syz.0.789': attribute type 10 has an invalid length.
[   98.128316][ T7688] net_ratelimit: 80 callbacks suppressed
[   98.128325][ T7688] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  101.142554][ T7831] __nla_validate_parse: 5 callbacks suppressed
[  101.142571][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'.
[  101.892637][ T7864] netlink: 208344 bytes leftover after parsing attributes in process `syz.1.865'.
[  101.900261][ T7864] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  101.903699][ T7864] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.907833][ T7866] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  102.145382][ T7881] netlink: 2 bytes leftover after parsing attributes in process `syz.1.873'.
[  102.161002][ T7881] batadv_slave_1: entered promiscuous mode
[  102.231074][ T7893] lo speed is unknown, defaulting to 1000
[  102.234928][ T7893] lo speed is unknown, defaulting to 1000
[  102.255520][ T7893] lo speed is unknown, defaulting to 1000
[  102.307259][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'.
[  102.376592][ T7893] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  102.540738][ T7893] lo speed is unknown, defaulting to 1000
[  102.553421][ T7893] lo speed is unknown, defaulting to 1000
[  102.578170][ T7893] lo speed is unknown, defaulting to 1000
[  102.644210][ T7918] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.891'.
[  102.649370][ T7918] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.891'.
[  102.654652][ T7918] tc_dump_action: action bad kind
[  102.787022][ T7932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.898'.
[  102.961507][ T7942] net veth1_virt_wifi : renamed from virt_wifi0
[  103.781288][ T7966] netlink: 'syz.2.914': attribute type 41 has an invalid length.
[  103.795632][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'.
[  104.234359][ T7985] netlink: 100 bytes leftover after parsing attributes in process `syz.2.922'.
[  105.152678][ T8037] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.948'.
[  105.522330][ T8060] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.604479][ T8141] __nla_validate_parse: 5 callbacks suppressed
[  106.604495][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.993'.
[  106.814294][ T8147] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.996'.
[  107.155169][ T8165] netlink: 'syz.2.1004': attribute type 4 has an invalid length.
[  107.162722][ T8165] netlink: 'syz.2.1004': attribute type 1 has an invalid length.
[  107.165554][ T8165] netlink: 'syz.2.1004': attribute type 2 has an invalid length.
[  107.169464][ T8165] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.1004'.
[  107.258128][ T8171] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1007'.
[  107.261983][ T8171] batadv0: entered promiscuous mode
[  107.385239][ T8183] netlink: 'syz.0.1013': attribute type 2 has an invalid length.
[  107.388688][ T8183] netlink: 'syz.0.1013': attribute type 9 has an invalid length.
[  107.393522][ T8183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1013'.
[  108.636725][ T5846] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[  108.722909][ T8227] netlink: 'syz.2.1032': attribute type 1 has an invalid length.
[  108.727887][ T8227] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1032'.
[  109.410115][ T8243] wg0 speed is unknown, defaulting to 1000
[  110.236305][ T8266] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.1049'.
[  110.240258][ T8266] netlink: 61827 bytes leftover after parsing attributes in process `syz.1.1049'.
[  110.344512][ T8270] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1051'.
[  110.715186][ T8291] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1060'.
[  111.601986][ T8344] netlink: 'syz.2.1085': attribute type 21 has an invalid length.
[  112.870352][ T8377] __nla_validate_parse: 1 callbacks suppressed
[  112.870411][ T8377] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1101'.
[  112.904100][ T8379] wg0 speed is unknown, defaulting to 1000
[  112.909161][ T8379] lo speed is unknown, defaulting to 1000
[  113.023824][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'.
[  113.036230][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'.
[  113.040944][ T8390] netlink: 'syz.2.1106': attribute type 4 has an invalid length.
[  113.316832][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  113.323094][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  113.329641][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  113.561449][ T8421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1120'.
[  113.708586][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'.
[  114.671210][ T8442] netlink: 'syz.2.1128': attribute type 10 has an invalid length.
[  115.084722][ T8442] bond0: (slave bond_slave_0): Releasing backup interface
[  115.288524][ T8458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'.
[  115.585202][ T8479] netlink: 'syz.0.1145': attribute type 3 has an invalid length.
[  115.592813][ T8479] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1145'.
[  117.255779][ T8550] tap0: tun_chr_ioctl cmd 1074025675
[  117.258443][ T8550] tap0: persist enabled
[  117.260516][ T8550] tap0: tun_chr_ioctl cmd 1074025675
[  117.262670][ T8550] tap0: persist enabled
[  117.510107][ T8574] netlink: 'syz.1.1189': attribute type 1 has an invalid length.
[  119.034352][ T8635] netlink: 'syz.2.1214': attribute type 2 has an invalid length.
[  119.154270][ T8637] __nla_validate_parse: 5 callbacks suppressed
[  119.154289][ T8637] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1215'.
[  120.201659][ T8655] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1221'.
[  120.210539][ T8657] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1222'.
[  120.300248][ T8665] syzkaller1: tun_chr_ioctl cmd 1074025677
[  120.303054][ T8665] syzkaller1: linktype set to 805
[  120.530438][ T8690] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1237'.
[  120.640876][ T8699] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1242'.
[  121.234454][ T8722] netlink: 'syz.0.1252': attribute type 4 has an invalid length.
[  121.238212][ T8722] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1252'.
[  121.781429][ T8745] netlink: 'syz.0.1261': attribute type 10 has an invalid length.
[  121.787223][ T8745] macvlan0: entered promiscuous mode
[  121.789807][ T8745] macvlan0: entered allmulticast mode
[  121.801668][ T8745] veth1_vlan: entered allmulticast mode
[  121.809267][ T8745] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  122.111518][ T8758] netlink: 'syz.0.1266': attribute type 3 has an invalid length.
[  122.114270][ T8758] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  122.135537][ T8758] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1266'.
[  122.380887][ T8768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'.
[  122.391997][ T8768] D`: renamed from hsr_slave_1 (while UP)
[  123.451956][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  123.876651][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'.
[  123.892483][ T8802] netlink: 'syz.0.1279': attribute type 3 has an invalid length.
[  124.570518][ T8814] openvswitch: netlink: VXLAN extension 1 has unexpected len 5 expected 4
[  124.842126][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  124.913226][ T8824] netlink: 'syz.0.1288': attribute type 29 has an invalid length.
[  124.918444][ T8824] netlink: 'syz.0.1288': attribute type 29 has an invalid length.
[  125.054952][ T8834] netlink: 'syz.2.1292': attribute type 29 has an invalid length.
[  125.059132][ T8830] wg0 speed is unknown, defaulting to 1000
[  125.064075][ T8834] netlink: 'syz.2.1292': attribute type 29 has an invalid length.
[  125.073344][ T8834] netlink: 'syz.2.1292': attribute type 29 has an invalid length.
[  125.079247][ T8830] lo speed is unknown, defaulting to 1000
[  125.080151][ T8834] netlink: 'syz.2.1292': attribute type 29 has an invalid length.
[  125.126848][   T33] audit: type=1107 audit(1755594967.103:2): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  125.330005][ T8853] netlink: 'syz.2.1301': attribute type 10 has an invalid length.
[  125.333190][ T8853] netlink: 'syz.2.1301': attribute type 19 has an invalid length.
[  125.343584][ T8853] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.1301'.
[  125.414315][ T8860] sctp: [Deprecated]: syz.1.1300 (pid 8860) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.414315][ T8860] Use struct sctp_sack_info instead
[  125.573766][ T8864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.576769][ T8864] IPv6: NLM_F_CREATE should be set when creating new route
[  125.579314][ T8864] IPv6: NLM_F_CREATE should be set when creating new route
[  125.581763][ T8864] IPv6: NLM_F_CREATE should be set when creating new route
[  125.590465][ T8862] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  125.593787][ T8862] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  125.611150][ T8866] netlink: 'syz.2.1306': attribute type 29 has an invalid length.
[  126.258747][ T8897] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1320'.
[  126.288114][ T8895] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  126.489633][ T8912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1327'.
[  126.634244][ T8927] netlink: 'syz.2.1335': attribute type 41 has an invalid length.
[  126.638100][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1335'.
[  128.034105][ T8946] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1344'.
[  128.322457][ T8963] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1352'.
[  128.700120][ T8984] syzkaller0: entered promiscuous mode
[  128.702712][ T8984] syzkaller0: entered allmulticast mode
[  129.159017][ T8982] syz.0.1361 (8982) used greatest stack depth: 17712 bytes left
[  130.140587][ T9002] validate_nla: 1 callbacks suppressed
[  130.140627][ T9002] netlink: 'syz.0.1370': attribute type 10 has an invalid length.
[  130.149686][ T9002] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1370'.
[  130.195194][ T5846] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  130.195224][ T5846] Bluetooth: unknown link type 8
[  130.200836][ T5846] Bluetooth: hci1: connection err: -111
[  130.305358][ T9018] lo speed is unknown, defaulting to 1000
[  130.310283][ T9018] lo speed is unknown, defaulting to 1000
[  130.313312][ T9018] lo speed is unknown, defaulting to 1000
[  130.330017][ T9020] netlink: 'syz.1.1379': attribute type 29 has an invalid length.
[  130.334160][ T9020] netlink: 'syz.1.1379': attribute type 29 has an invalid length.
[  130.559225][ T9018] infiniband syz1: set active
[  130.566533][ T9018] infiniband syz1: added lo
[  130.593372][ T9018] RDS/IB: syz1: added
[  130.595725][ T9018] smc: adding ib device syz1 with port count 1
[  130.598675][ T9018] smc:    ib device syz1 port 1 has pnetid 
[  130.903753][  T792] lo speed is unknown, defaulting to 1000
[  130.909873][ T9018] lo speed is unknown, defaulting to 1000
[  130.913109][   T10] lo speed is unknown, defaulting to 1000
[  131.084870][ T9036] syzkaller0: entered promiscuous mode
[  131.089398][ T9036] syzkaller0: entered allmulticast mode
[  131.099268][ T9018] lo speed is unknown, defaulting to 1000
[  131.100117][ T9036] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  131.261364][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'.
[  131.265526][ T9046] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  131.270385][ T9046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.319436][ T9018] lo speed is unknown, defaulting to 1000
[  131.378736][ T9054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1391'.
[  131.417675][ T9056] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  133.052047][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.054930][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  134.039724][ T9102] netlink: 'syz.0.1411': attribute type 10 has an invalid length.
[  134.042696][ T9102] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1411'.
[  134.050498][ T9102] bond0: entered promiscuous mode
[  134.052517][ T9102] bond_slave_0: entered promiscuous mode
[  134.054790][ T9102] bond_slave_1: entered promiscuous mode
[  134.164298][ T9110] netlink: 'syz.2.1415': attribute type 1 has an invalid length.
[  134.171975][ T9110] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1415'.
[  134.311185][ T9116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.320141][   T10] lo speed is unknown, defaulting to 1000
[  134.727591][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'.
[  134.834201][ T9130] netlink: 'syz.1.1419': attribute type 10 has an invalid length.
[  134.838189][ T9130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1419'.
[  134.933180][ T9130] dummy0: entered promiscuous mode
[  134.939189][ T9130] bridge0: port 3(dummy0) entered blocking state
[  134.942144][ T9130] bridge0: port 3(dummy0) entered disabled state
[  134.944963][ T9130] dummy0: entered allmulticast mode
[  134.952302][ T9130] bridge0: port 3(dummy0) entered blocking state
[  134.955217][ T9130] bridge0: port 3(dummy0) entered forwarding state
[  135.119210][ T9137] netlink: 'syz.0.1425': attribute type 2 has an invalid length.
[  135.122184][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'.
[  135.122656][ T9137] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1425'.
[  135.127637][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'.
[  135.327369][ T9154] wg0 speed is unknown, defaulting to 1000
[  135.331500][ T9154] lo speed is unknown, defaulting to 1000
[  135.338054][ T9154] lo speed is unknown, defaulting to 1000
[  135.387464][ T9159] netlink: 'syz.0.1436': attribute type 29 has an invalid length.
[  135.392005][ T9159] netlink: 'syz.0.1436': attribute type 29 has an invalid length.
[  135.399594][ T9159] netlink: 'syz.0.1436': attribute type 29 has an invalid length.
[  136.482817][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'.
[  137.765760][ T9207] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  137.769159][ T9207] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  137.823900][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1461'.
[  137.831668][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1461'.
[  139.018276][ T9242] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1472'.
[  139.462129][ T9242] hsr_slave_0: left promiscuous mode
[  139.468167][ T9242] hsr_slave_1: left promiscuous mode
[  139.667295][ T5846] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5
[  140.128930][ T9283] netlink: 'syz.2.1492': attribute type 2 has an invalid length.
[  140.132397][ T9283] netlink: 'syz.2.1492': attribute type 1 has an invalid length.
[  140.136724][ T9283] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1492'.
[  140.140851][ T9283] nbd: couldn't find device at index 16
[  140.457950][ T9293] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1496'.
[  140.743276][ T9301] netlink: 'syz.2.1500': attribute type 2 has an invalid length.
[  141.222644][ T9340] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1519'.
[  141.229886][ T9340] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1519'.
[  141.355431][ T9343] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  141.611420][ T9354] netlink: 'syz.2.1525': attribute type 12 has an invalid length.
[  141.620738][ T9354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1525'.
[  142.419125][ T9363] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1530'.
[  142.652608][ T9374] netlink: 'syz.1.1537': attribute type 1 has an invalid length.
[  142.655652][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'.
[  142.848973][ T9397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1547'.
[  143.002755][ T9403] netlink: 'syz.1.1550': attribute type 29 has an invalid length.
[  143.021152][ T9403] netlink: 'syz.1.1550': attribute type 10 has an invalid length.
[  143.161909][ T5846] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  143.424788][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.461055][ T9403] team0: Port device bond0 added
[  143.868632][ T9427] netlink: 'syz.1.1560': attribute type 21 has an invalid length.
[  143.872101][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1560'.
[  143.927907][ T9429] netlink: 'syz.2.1561': attribute type 3 has an invalid length.
[  143.933219][ T9429] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1561'.
[  144.147794][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'.
[  144.152191][ T9451] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  144.157489][ T9451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.411752][ T9473] wg0 speed is unknown, defaulting to 1000
[  144.418612][ T9473] lo speed is unknown, defaulting to 1000
[  144.422577][ T9473] lo speed is unknown, defaulting to 1000
[  144.434374][ T5233] Bluetooth: hci0: Malformed LE Event: 0x1b
[  144.506001][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'.
[  147.707556][ T9499] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1593'.
[  147.711546][ T9499] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  147.715085][ T9499] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  148.139539][ T9517] netlink: 'syz.1.1602': attribute type 29 has an invalid length.
[  148.148618][ T9517] netlink: 'syz.1.1602': attribute type 29 has an invalid length.
[  148.152323][ T9517] netlink: 'syz.1.1602': attribute type 29 has an invalid length.
[  148.156683][ T9517] netlink: 'syz.1.1602': attribute type 29 has an invalid length.
[  148.183860][ T9519] netlink: 'syz.1.1603': attribute type 4 has an invalid length.
[  148.447355][ T9527] sit0: entered allmulticast mode
[  148.725105][ T9533] netlink: 'syz.2.1605': attribute type 3 has an invalid length.
[  148.735231][ T9533] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1605'.
[  148.915552][ T9530] sit0: entered promiscuous mode
[  149.663139][ T9555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1616'.
[  149.669674][ T9555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1616'.
[  149.753266][ T9560] netlink: 'syz.2.1619': attribute type 10 has an invalid length.
[  149.766278][ T9562] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1620'.
[  149.999106][ T9582] netlink: 'syz.2.1628': attribute type 16 has an invalid length.
[  150.002763][ T9582] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1628'.
[  150.022054][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'.
[  150.351849][ T9615] netlink: 'syz.1.1640': attribute type 21 has an invalid length.
[  150.460901][ T9619] netlink: 'syz.0.1641': attribute type 21 has an invalid length.
[  150.501198][ T9619] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1641'.
[  150.561993][ T9627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1646'.
[  150.723805][ T9638] xt_time: unknown flags 0xf4
[  150.738288][ T9640] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1652'.
[  151.140558][ T9667] syzkaller0: entered promiscuous mode
[  151.143145][ T9667] syzkaller0: entered allmulticast mode
[  153.121828][ T9707] __nla_validate_parse: 2 callbacks suppressed
[  153.121843][ T9707] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1684'.
[  153.474942][ T9717] validate_nla: 2 callbacks suppressed
[  153.475075][ T9717] netlink: 'syz.0.1689': attribute type 10 has an invalid length.
[  153.484080][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1689'.
[  153.546888][ T9724] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1692'.
[  153.574858][ T9717] veth0_vlan: entered allmulticast mode
[  153.595023][ T9717] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  153.972048][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1707'.
[  154.100080][ T9769] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1713'.
[  154.319769][ T9787] dvmrp1: tun_chr_ioctl cmd 35108
[  154.343677][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1724'.
[  155.799255][ T9840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1747'.
[  155.948368][ T5233] Bluetooth: hci1: adv larger than maximum supported
[  155.948396][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x18
[  155.951333][ T5233] Bluetooth: hci1: Malformed LE Event: 0x0d
[  156.624795][ T9878] netlink: 'syz.1.1764': attribute type 1 has an invalid length.
[  156.683814][ T9884] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1767'.
[  156.722035][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'.
[  157.348563][ T9913] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1779'.
[  158.349506][ T9949] netlink: 'syz.1.1792': attribute type 10 has an invalid length.
[  158.353038][ T9949] lo: entered promiscuous mode
[  158.369643][ T9949] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  158.382299][ T5841] lo speed is unknown, defaulting to 1000
[  158.386758][ T5841] syz2: Port: 1 Link DOWN
[  161.549942][ T9998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1814'.
[  161.558905][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1814'.
[  161.563357][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1814'.
[  162.863379][T10079] netlink: 'syz.1.1850': attribute type 4 has an invalid length.
[  162.867779][T10079] netlink: 'syz.1.1850': attribute type 2 has an invalid length.
[  162.871595][T10079] netlink: 199288 bytes leftover after parsing attributes in process `syz.1.1850'.
[  163.013883][T10091] netlink: 'syz.2.1856': attribute type 4 has an invalid length.
[  163.175954][ T5233] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  164.547863][T10145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1877'.
[  164.577599][T10147] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1879'.
[  164.726975][T10142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  164.731414][T10142] IPv6: NLM_F_CREATE should be set when creating new route
[  164.735941][T10142] IPv6: NLM_F_CREATE should be set when creating new route
[  164.742105][T10142] IPv6: NLM_F_CREATE should be set when creating new route
[  165.237615][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  165.244150][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'.
[  165.248182][T10179] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1894'.
[  165.502954][T10188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.153032][T10221] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1912'.
[  166.298861][T10227] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1915'.
[  166.474913][T10231] netlink: 'syz.0.1917': attribute type 9 has an invalid length.
[  166.564506][T10238] __nla_validate_parse: 1 callbacks suppressed
[  166.564526][T10238] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1921'.
[  166.574961][T10238] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1921'.
[  166.799826][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'.
[  166.803991][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'.
[  166.894694][T10258] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.902269][T10258] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.933437][T10259] sit0: left promiscuous mode
[  166.940240][T10259] sit0: entered promiscuous mode
[  167.879729][T10261] netlink: 'syz.1.1931': attribute type 29 has an invalid length.
[  167.884994][T10261] netlink: 'syz.1.1931': attribute type 29 has an invalid length.
[  167.919545][T10261] netlink: 572 bytes leftover after parsing attributes in process `syz.1.1931'.
[  168.179479][T10287] netlink: 'syz.2.1944': attribute type 10 has an invalid length.
[  168.584841][T10315] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1955'.
[  168.645332][T10319] netlink: 'syz.0.1956': attribute type 11 has an invalid length.
[  168.652347][T10319] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1956'.
[  169.479682][T10317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.497553][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'.
[  169.755053][T10345] bridge_slave_1: left allmulticast mode
[  169.779248][T10345] bridge_slave_1: left promiscuous mode
[  169.783872][T10345] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.838353][T10357] netlink: 'syz.0.1972': attribute type 1 has an invalid length.
[  169.841820][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'.
[  169.841893][T10345] bridge_slave_0: left allmulticast mode
[  169.856018][T10345] bridge_slave_0: left promiscuous mode
[  169.860001][T10345] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.521242][T10375] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1980'.
[  170.679638][T10381] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  171.683647][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'.
[  171.692426][T10409] syzkaller0: entered promiscuous mode
[  171.694945][T10409] syzkaller0: entered allmulticast mode
[  171.793901][ T5233] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  171.852692][T10417] netlink: 'syz.2.2001': attribute type 29 has an invalid length.
[  171.943982][T10424] netlink: 'syz.1.2003': attribute type 1 has an invalid length.
[  172.132857][T10438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'.
[  172.230401][T10446] openvswitch: netlink: Message has 4 unknown bytes.
[  172.771627][T10477] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2024'.
[  172.898471][T10491] netlink: 752 bytes leftover after parsing attributes in process `syz.1.2028'.
[  173.182182][T10505] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  173.189669][T10505] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  173.784223][T10518] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2039'.
[  174.649978][T10540] netlink: 'syz.2.2050': attribute type 29 has an invalid length.
[  174.660141][T10540] netlink: 'syz.2.2050': attribute type 29 has an invalid length.
[  174.668346][T10540] netlink: 'syz.2.2050': attribute type 29 has an invalid length.
[  174.723894][T10545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2053'.
[  174.730399][T10545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2053'.
[  175.189200][T10580] netlink: 'syz.0.2069': attribute type 13 has an invalid length.
[  175.196318][T10580] netlink: 'syz.0.2069': attribute type 58 has an invalid length.
[  175.206944][T10580] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2069'.
[  175.765254][T10613] sctp: [Deprecated]: syz.0.2083 (pid 10613) Use of int in max_burst socket option deprecated.
[  175.765254][T10613] Use struct sctp_assoc_value instead
[  176.217719][T10626] netlink: 'syz.1.2089': attribute type 11 has an invalid length.
[  176.220719][T10626] netlink: 'syz.1.2089': attribute type 11 has an invalid length.
[  176.223678][T10626] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2089'.
[  176.365672][T10640] netlink: 'syz.2.2096': attribute type 3 has an invalid length.
[  176.376807][T10640] netlink: 'syz.2.2096': attribute type 10 has an invalid length.
[  177.157637][T10678] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2111'.
[  177.195506][T10676] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2111'.
[  177.288724][T10678] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2111'.
[  177.293860][ T5233] Bluetooth: hci0: Malformed HCI Event
[  177.727647][T10703] sit0: entered allmulticast mode
[  178.533516][T10717] syzkaller0: entered promiscuous mode
[  178.545763][T10717] syzkaller0: entered allmulticast mode
[  178.699099][T10729] netlink: 'syz.1.2133': attribute type 3 has an invalid length.
[  178.702460][T10729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2133'.
[  180.411510][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'.
[  180.419680][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2148'.
[  180.836980][ T5844] Bluetooth: hci0: command 0x0406 tx timeout
[  180.839358][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.878558][T10777] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2155'.
[  180.995486][T10783] tun0: tun_chr_ioctl cmd 1074025677
[  181.000332][T10783] tun0: linktype set to 270
[  181.305762][T10795] netlink: 'syz.2.2163': attribute type 2 has an invalid length.
[  181.310012][T10795] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2163'.
[  181.624727][T10813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2169'.
[  181.629700][T10808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2169'.
[  182.664866][T10840] netlink: 'syz.0.2182': attribute type 10 has an invalid length.
[  182.669857][T10840] __nla_validate_parse: 2 callbacks suppressed
[  182.669914][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2182'.
[  182.684194][T10840] ipvlan1: entered promiscuous mode
[  182.688425][T10840] ipvlan1: entered allmulticast mode
[  182.907834][T10840] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  183.400667][T10870] netlink: 'syz.0.2194': attribute type 49 has an invalid length.
[  183.445217][T10872] netlink: 'syz.1.2196': attribute type 2 has an invalid length.
[  183.450103][T10872] netlink: 'syz.1.2196': attribute type 1 has an invalid length.
[  183.453461][T10872] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2196'.
[  183.458454][T10872] nbd: illegal input index 65540
[  183.641778][T10884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2202'.
[  183.646137][T10884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.913847][T10892] netlink: 802 bytes leftover after parsing attributes in process `syz.0.2206'.
[  184.553163][T10911] netlink: 'syz.2.2215': attribute type 1 has an invalid length.
[  184.603984][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'.
[  184.659644][T10915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  184.749495][T10925] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2220'.
[  184.754596][T10921] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2220'.
[  185.187110][T10943] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  185.398244][T10953] wg0 speed is unknown, defaulting to 1000
[  185.410845][T10953] lo speed is unknown, defaulting to 1000
[  185.424767][T10953] lo speed is unknown, defaulting to 1000
[  185.445267][T10962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.773508][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2246'.
[  185.778752][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2246'.
[  185.782750][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2246'.
[  185.918990][T10984] netlink: 'syz.1.2247': attribute type 2 has an invalid length.
[  186.179369][T10996] netlink: 'syz.0.2252': attribute type 29 has an invalid length.
[  186.184113][T10996] netlink: 'syz.0.2252': attribute type 29 has an invalid length.
[  186.844974][T11026] netlink: 'syz.2.2266': attribute type 1 has an invalid length.
[  193.463900][T11274] __nla_validate_parse: 2 callbacks suppressed
[  193.463916][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2374'.
[  193.470984][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'.
[  193.670293][ T5845] cgroup: fork rejected by pids controller in /syz0
[  193.976330][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.980791][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.984497][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.989099][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.992633][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.014328][T11296] wg0 speed is unknown, defaulting to 1000
[  194.017096][T11296] lo speed is unknown, defaulting to 1000
[  194.019890][T11296] lo speed is unknown, defaulting to 1000
[  194.119926][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.122172][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.191135][T11296] chnl_net:caif_netlink_parms(): no params data found
[  194.248219][T11296] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.250833][T11296] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.253362][T11296] bridge_slave_0: entered allmulticast mode
[  194.256307][T11296] bridge_slave_0: entered promiscuous mode
[  194.259855][T11296] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.262404][T11296] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.264997][T11296] bridge_slave_1: entered allmulticast mode
[  194.268148][T11296] bridge_slave_1: entered promiscuous mode
[  194.293124][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.298341][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.318564][T11296] team0: Port device team_slave_0 added
[  194.322246][T11296] team0: Port device team_slave_1 added
[  194.341720][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.344188][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.353626][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.366131][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.368730][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.378109][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.410019][T11296] hsr_slave_0: entered promiscuous mode
[  194.412735][T11296] hsr_slave_1: entered promiscuous mode
[  194.415159][T11296] debugfs: 'hsr0' already exists in 'hsr'
[  194.417919][T11296] Cannot create hsr debugfs directory
[  194.546200][T11296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.638241][T11296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.710325][T11296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.722437][T11315] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2387'.
[  194.773607][T11296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.933671][T11296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  194.939867][T11296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  194.944619][T11296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  194.953414][T11296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  194.961821][T11325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2391'.
[  194.969190][T11324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2391'.
[  194.978669][T11325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2391'.
[  195.012350][T11296] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.015473][T11296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.019020][T11296] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.022071][T11296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.079475][T11296] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.091304][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2393'.
[  195.102268][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.109291][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.120528][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2393'.
[  195.127854][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2393'.
[  195.135630][T11296] 8021q: adding VLAN 0 to HW filter on device team0
[  195.160251][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.163235][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.174438][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.177638][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.320489][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.359311][T11296] veth0_vlan: entered promiscuous mode
[  195.372033][T11296] veth1_vlan: entered promiscuous mode
[  195.413738][T11296] veth0_macvtap: entered promiscuous mode
[  195.428869][T11296] veth1_macvtap: entered promiscuous mode
[  195.444531][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.464301][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.480722][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.484444][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.500760][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.513169][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.719819][  T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.732051][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.772622][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.779689][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.040214][ T5233] Bluetooth: hci1: command tx timeout
[  196.270758][T11371] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2406'.
[  196.273760][T11371] bond_slave_1: entered promiscuous mode
[  196.275764][T11371] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  197.152877][T11439] netlink: 'syz.2.2437': attribute type 10 has an invalid length.
[  197.242598][T11439] team0: Port device wlan1 added
[  198.133890][ T5233] Bluetooth: hci1: command tx timeout
[  199.673223][T11518] __nla_validate_parse: 1 callbacks suppressed
[  199.673234][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2468'.
[  199.706996][T11520] netlink: 'syz.0.2469': attribute type 21 has an invalid length.
[  199.771599][T11525] delete_channel: no stack
[  199.773439][T11525] delete_channel: no stack
[  200.206814][ T5233] Bluetooth: hci1: command tx timeout
[  200.752975][T11559] : renamed from bond0 (while UP)
[  200.984276][T11580] netlink: 'syz.0.2495': attribute type 3 has an invalid length.
[  200.990568][T11580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2495'.
[  202.197266][T11599] infiniband syz!: set active
[  202.200246][T11599] infiniband syz!: added team_slave_0
[  202.203518][T11599] syz!: rxe_create_cq: returned err = -12
[  202.207499][T11599] infiniband syz!: Couldn't create ib_mad CQ
[  202.210509][T11599] infiniband syz!: Couldn't open port 1
[  202.237559][T11599] RDS/IB: syz!: added
[  202.239455][T11599] smc: adding ib device syz! with port count 1
[  202.242454][T11599] smc:    ib device syz! port 1 has pnetid 
[  202.277356][ T5233] Bluetooth: hci1: command tx timeout
[  202.318651][T11645] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2524'.
[  203.313464][T11683] delete_channel: no stack
[  204.525390][T11709] netlink: 'syz.2.2551': attribute type 22 has an invalid length.
[  204.529437][T11709] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2551'.
[  204.803152][T11723] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2558'.
[  205.239394][T11752] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2570'.
[  205.778452][T11781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2582'.
[  207.690722][T11835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2602'.
[  208.310173][T11868] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2620'.
[  208.944763][T11892] netlink: 'syz.1.2632': attribute type 4 has an invalid length.
[  210.465816][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2644'.
[  210.470376][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2644'.
[  210.724767][T11933] netlink: 'syz.1.2652': attribute type 21 has an invalid length.
[  211.624308][T11967] netlink: 'syz.0.2668': attribute type 25 has an invalid length.
[  211.669534][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'.
[  211.693951][T11975] netlink: 'syz.0.2672': attribute type 6 has an invalid length.
[  211.697876][T11975] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2672'.
[  211.953477][T11992] veth0_vlan: entered allmulticast mode
[  212.102774][T12003] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2685'.
[  212.123726][T11992] veth0_vlan: left promiscuous mode
[  212.163933][T12007] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2687'.
[  212.175487][T12007] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2687'.
[  212.784426][T11992] veth0_vlan: entered promiscuous mode
[  213.065221][T12053] netlink: 'syz.2.2708': attribute type 10 has an invalid length.
[  213.071936][T12053] netlink: 'syz.2.2708': attribute type 16 has an invalid length.
[  213.075319][T12053] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2708'.
[  213.111653][T12057] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2711'.
[  213.115187][T12057] batadv_slave_1: entered promiscuous mode
[  213.141311][T12059] netlink: 'syz.0.2712': attribute type 291 has an invalid length.
[  213.237375][T12064] sit0: left promiscuous mode
[  213.659251][T12090] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2724'.
[  215.681767][T12147] netlink: 'syz.0.2750': attribute type 21 has an invalid length.
[  215.940499][T12157] __nla_validate_parse: 2 callbacks suppressed
[  215.940519][T12157] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2755'.
[  218.121175][T12252] lo speed is unknown, defaulting to 1000
[  218.124463][T12252] lo speed is unknown, defaulting to 1000
[  218.784126][T12279] netlink: 'syz.2.2809': attribute type 7 has an invalid length.
[  218.826843][T12281] netlink: 'syz.0.2810': attribute type 10 has an invalid length.
[  218.865194][T12281] macvlan0: entered allmulticast mode
[  218.898198][T12281] veth1_vlan: entered allmulticast mode
[  218.927994][T12281] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  219.334022][T12302] wg2: entered promiscuous mode
[  219.366227][T12302] wg2: entered allmulticast mode
[  219.511566][T12307] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  219.514372][T12307] netlink: 'syz.1.2821': attribute type 2 has an invalid length.
[  219.517294][T12307] netlink: 'syz.1.2821': attribute type 7 has an invalid length.
[  219.519935][T12307] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2821'.
[  219.522982][T12307] netlink: 101636 bytes leftover after parsing attributes in process `syz.1.2821'.
[  219.526516][T12307] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  219.529430][T12307] netlink: 'syz.1.2821': attribute type 2 has an invalid length.
[  219.532142][T12307] netlink: 'syz.1.2821': attribute type 7 has an invalid length.
[  219.535525][T12307] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2821'.
[  220.380329][ T5233] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  220.459628][T12326] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2829'.
[  220.710795][T12345] netlink: 'syz.0.2838': attribute type 2 has an invalid length.
[  220.714343][T12345] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2838'.
[  220.721586][T12345] nbd: must specify an index to disconnect
[  220.890185][T12356] netlink: 'syz.0.2842': attribute type 1 has an invalid length.
[  220.893698][T12356] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2842'.
[  220.941135][T12360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2844'.
[  220.963781][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'.
[  221.436322][T12376] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2851'.
[  221.570592][T12382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.579486][T12382] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  221.606888][T12382] bond0: entered promiscuous mode
[  221.609359][T12382] bond_slave_0: entered promiscuous mode
[  221.612336][T12382] bond_slave_1: entered promiscuous mode
[  221.615177][T12382] macvlan0: entered promiscuous mode
[  221.621354][T12382] batadv0: entered promiscuous mode
[  223.050858][T12439] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2881'.
[  224.634677][T12496] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2907'.
[  226.931787][T12550] syz.2.2930 (12550) used greatest stack depth: 16936 bytes left
[  226.973496][T12580] validate_nla: 5 callbacks suppressed
[  226.973506][T12580] netlink: 'syz.2.2941': attribute type 21 has an invalid length.
[  227.159219][T12591] wg0 speed is unknown, defaulting to 1000
[  227.161793][T12591] wg0 speed is unknown, defaulting to 1000
[  227.164199][T12591] wg0 speed is unknown, defaulting to 1000
[  227.175150][T12591] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  227.197337][T12591] wg0 speed is unknown, defaulting to 1000
[  227.231093][T12591] wg0 speed is unknown, defaulting to 1000
[  227.245688][T12591] wg0 speed is unknown, defaulting to 1000
[  227.249995][T12591] wg0 speed is unknown, defaulting to 1000
[  227.607303][T12614] netlink: 'syz.0.2955': attribute type 10 has an invalid length.
[  227.610316][T12614] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2955'.
[  228.223627][T12651] netlink: 'syz.0.2969': attribute type 23 has an invalid length.
[  228.382418][T12655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2971'.
[  229.881316][T12678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2982'.
[  229.898539][T12678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2982'.
[  229.913542][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'.
[  229.919690][T12671] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2979'.
[  229.922113][T12678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2982'.
[  230.068388][T12685] netlink: 'syz.2.2984': attribute type 10 has an invalid length.
[  230.071241][T12685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2984'.
[  230.079384][T12685] batman_adv: batadv0: Adding interface: vlan1
[  230.081650][T12685] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.091518][T12685] batman_adv: batadv0: Interface activated: vlan1
[  230.220044][T12693] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2989'.
[  230.885197][T12727] netlink: 'syz.1.3006': attribute type 21 has an invalid length.
[  230.892212][T12727] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3006'.
[  230.898657][T12727] netlink: 'syz.1.3006': attribute type 4 has an invalid length.
[  230.902020][T12727] netlink: 'syz.1.3006': attribute type 5 has an invalid length.
[  233.084542][T12818] netlink: 'syz.2.3049': attribute type 1 has an invalid length.
[  233.104066][T12818] __nla_validate_parse: 2 callbacks suppressed
[  233.104088][T12818] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3049'.
[  233.272690][T12828] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3054'.
[  233.379217][T12836] netlink: 'syz.2.3057': attribute type 46 has an invalid length.
[  233.855670][T12849] netlink: 'syz.0.3063': attribute type 39 has an invalid length.
[  234.198760][T12857] netlink: 'syz.2.3066': attribute type 21 has an invalid length.
[  234.786086][ T5878] wg0 speed is unknown, defaulting to 1000
[  234.788636][ T5878] syz0: Port: 1 Link DOWN
[  235.185277][T12888] netlink: 'syz.0.3080': attribute type 19 has an invalid length.
[  235.569539][T12893] netlink: 'syz.0.3082': attribute type 3 has an invalid length.
[  235.573762][T12893] netlink: 'syz.0.3082': attribute type 2 has an invalid length.
[  235.578858][T12893] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.3082'.
[  236.209049][T12913] netlink: 'syz.1.3092': attribute type 3 has an invalid length.
[  236.212481][T12913] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.3092'.
[  236.648211][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'.
[  236.749792][T12915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  236.844483][T12925] : entered promiscuous mode
[  236.949363][T12931] netlink: 'syz.1.3098': attribute type 21 has an invalid length.
[  236.957080][T12931] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3098'.
[  236.964757][T12931] netlink: 'syz.1.3098': attribute type 4 has an invalid length.
[  236.970959][T12931] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3098'.
[  240.269700][T12946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.588733][T12965] validate_nla: 1 callbacks suppressed
[  241.588791][T12965] netlink: 'syz.2.3114': attribute type 3 has an invalid length.
[  241.600681][T12965] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.3114'.
[  242.924811][T12998] netlink: 'syz.1.3129': attribute type 25 has an invalid length.
[  245.353686][T13050] netlink: 'syz.1.3152': attribute type 3 has an invalid length.
[  245.364613][T13050] netlink: 'syz.1.3152': attribute type 1 has an invalid length.
[  245.369082][T13050] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3152'.
[  245.594475][T13057] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3155'.
[  245.604045][T13057] netlink: 'syz.1.3155': attribute type 1 has an invalid length.
[  246.765130][   T12] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  246.909008][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.913488][   T12] bond_slave_0: left promiscuous mode
[  246.920601][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.924345][   T12] bond_slave_1: left promiscuous mode
[  246.948807][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  246.954394][   T12] veth1_vlan: left allmulticast mode
[  246.960732][   T12] bond0 (unregistering): Released all slaves
[  246.984672][T13054] netlink: 'syz.2.3154': attribute type 4 has an invalid length.
[  246.993899][T13064] netlink: 'syz.1.3158': attribute type 4 has an invalid length.
[  247.514519][ T5233] Bluetooth: hci0: Malformed LE Event: 0x02
[  247.525775][T13094] netlink: 'syz.2.3171': attribute type 40 has an invalid length.
[  247.940568][   T12] hsr_slave_0: left promiscuous mode
[  247.959919][   T12] hsr_slave_1: left promiscuous mode
[  247.967047][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.980440][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.987705][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.990336][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.006525][   T12] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  248.009242][   T12] batman_adv: batadv0: Removing interface: hsr_slave_1
[  248.069623][   T12] veth1_macvtap: left promiscuous mode
[  248.078376][   T12] veth0_macvtap: left promiscuous mode
[  248.084485][   T12] veth1_vlan: left promiscuous mode
[  249.224994][T13136] netlink: 'syz.2.3189': attribute type 1 has an invalid length.
[  249.229292][T13136] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3189'.
[  249.512656][   T12] team0 (unregistering): Port device team_slave_1 removed
[  249.545615][   T12] team0 (unregistering): Port device C removed
[  249.869695][  T181] smc: removing ib device syz1
[  249.886302][ T5841] lo speed is unknown, defaulting to 1000
[  249.895965][ T5841] syz1: Port: 1 Link DOWN
[  250.185420][T13140] netlink: 'syz.1.3191': attribute type 25 has an invalid length.
[  250.371209][T13157] nft_compat: unsupported protocol 0
[  250.545655][T13162] wg0 speed is unknown, defaulting to 1000
[  250.561552][T13162] wg0 speed is unknown, defaulting to 1000
[  250.578720][T13162] wg0 speed is unknown, defaulting to 1000
[  250.602311][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'.
[  250.613204][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3199'.
[  250.632013][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'.
[  250.639305][T13162] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  250.643621][T13164] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3199'.
[  250.655627][T13164] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3199'.
[  250.699033][T13162] wg0 speed is unknown, defaulting to 1000
[  250.703148][T13162] wg0 speed is unknown, defaulting to 1000
[  250.769635][T13162] wg0 speed is unknown, defaulting to 1000
[  251.053936][T13175] netlink: 'syz.1.3205': attribute type 39 has an invalid length.
[  251.112644][T13179] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3206'.
[  251.675605][   T33] audit: type=1107 audit(1755595093.643:3): pid=13199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  254.300906][T13332] openvswitch: netlink: IP tunnel dst address not specified
[  254.544934][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'.
[  255.200832][T13274] Set syz1 is full, maxelem 65536 reached
[  255.531919][T13363] netlink: 'syz.1.3252': attribute type 1 has an invalid length.
[  255.569420][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.576489][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  256.130111][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'.
[  256.134001][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'.
[  256.613346][T13406] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3270'.
[  256.969080][T13428] lo speed is unknown, defaulting to 1000
[  257.094076][T13428] wg0 speed is unknown, defaulting to 1000
[  257.853906][T13467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.591378][T13481] tap0: tun_chr_ioctl cmd 2147767517
[  259.414302][T13505] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[  259.534889][T13511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3315'.
[  259.540956][T13511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3315'.
[  260.030932][T13529] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3323'.
[  260.093197][T13535] =======================================================
[  260.093197][T13535] WARNING: The mand mount option has been deprecated and
[  260.093197][T13535]          and is ignored by this kernel. Remove the mand
[  260.093197][T13535]          option from the mount to silence this warning.
[  260.093197][T13535] =======================================================
[  261.119176][T13566] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3339'.
[  261.163351][T13570] netlink: 'syz.2.3341': attribute type 2 has an invalid length.
[  261.255374][T13577] debugfs: '!' already exists in 'ieee80211'
[  261.602616][T13596] netlink: 'syz.0.3352': attribute type 21 has an invalid length.
[  264.860792][T13617] netlink: 16370 bytes leftover after parsing attributes in process `syz.2.3360'.
[  265.915323][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3388'.
[  265.920235][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3388'.
[  266.518144][T13703] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3400'.
[  267.413753][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.511740][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.648851][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.720746][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.817299][   T13] dummy0: left allmulticast mode
[  267.820252][   T13] bridge0: port 3(dummy0) entered disabled state
[  267.829303][   T13] bridge_slave_1: left allmulticast mode
[  267.831267][   T13] bridge_slave_1: left promiscuous mode
[  267.834158][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.840617][   T13] bridge_slave_0: left allmulticast mode
[  267.843280][   T13] bridge_slave_0: left promiscuous mode
[  267.845736][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.852481][   T13] : left allmulticast mode
[  267.854208][   T13] : left promiscuous mode
[  267.857312][   T13] : port 1() entered disabled state
[  268.184479][   T13] team0: Port device  removed
[  268.190544][   T13]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.199568][   T13]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.205315][   T13]  (unregistering): Released all slaves
[  268.349966][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.354224][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  268.360242][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  268.364354][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  268.369762][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  268.414340][T13730] lo speed is unknown, defaulting to 1000
[  268.614633][T13730] wg0 speed is unknown, defaulting to 1000
[  268.994673][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.999455][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.002684][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.008020][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.011353][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.104537][   T13] hsr_slave_0: left promiscuous mode
[  269.127618][   T13] D`: left promiscuous mode
[  269.133670][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.138816][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.142799][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.146552][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.160720][   T13] veth1_macvtap: left promiscuous mode
[  269.163287][   T13] veth0_macvtap: left promiscuous mode
[  269.165721][   T13] veth1_vlan: left allmulticast mode
[  269.168362][   T13] veth1_vlan: left promiscuous mode
[  269.657524][   T13] team0 (unregistering): Port device team_slave_1 removed
[  269.710175][   T13] team0 (unregistering): Port device team_slave_0 removed
[  270.040469][T13730] chnl_net:caif_netlink_parms(): no params data found
[  270.194604][T13730] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.198401][T13730] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.200984][T13730] bridge_slave_0: entered allmulticast mode
[  270.204308][T13730] bridge_slave_0: entered promiscuous mode
[  270.217426][T13730] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.220647][T13730] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.223487][T13730] bridge_slave_1: entered allmulticast mode
[  270.227551][T13730] bridge_slave_1: entered promiscuous mode
[  270.261780][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.265123][T13743] wg0 speed is unknown, defaulting to 1000
[  270.270639][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.304681][T13730] team0: Port device team_slave_0 added
[  270.327947][T13730] team0: Port device team_slave_1 added
[  270.377897][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.380388][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.390190][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.405602][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.408846][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.419244][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.436357][ T5233] Bluetooth: hci0: command tx timeout
[  270.476845][T13730] hsr_slave_0: entered promiscuous mode
[  270.479550][T13730] hsr_slave_1: entered promiscuous mode
[  270.553404][T13743] chnl_net:caif_netlink_parms(): no params data found
[  270.700154][T13743] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.705646][T13743] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.710226][T13743] bridge_slave_0: entered allmulticast mode
[  270.714226][T13743] bridge_slave_0: entered promiscuous mode
[  270.725171][T13743] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.729069][T13743] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.732099][T13743] bridge_slave_1: entered allmulticast mode
[  270.743784][T13743] bridge_slave_1: entered promiscuous mode
[  270.804328][T13743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.816717][T13743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.893138][T13743] team0: Port device team_slave_0 added
[  270.906166][T13730] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  270.915634][T13743] team0: Port device team_slave_1 added
[  270.937101][T13790] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3430'.
[  270.948639][T13730] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  270.959408][T13730] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  270.971051][T13743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.974140][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.984415][T13743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.990769][T13730] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  271.003252][T13743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.008114][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.018317][T13743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.057570][T13743] hsr_slave_0: entered promiscuous mode
[  271.060160][T13743] hsr_slave_1: entered promiscuous mode
[  271.062353][T13743] debugfs: 'hsr0' already exists in 'hsr'
[  271.064235][T13743] Cannot create hsr debugfs directory
[  271.072257][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'.
[  271.078785][ T5233] Bluetooth: hci1: command tx timeout
[  271.088260][T13730] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.090757][T13730] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.093148][T13730] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.095459][T13730] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.100756][T13248] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.104459][T13248] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.258885][T13743] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  271.265090][T13743] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  271.270948][T13743] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  271.278925][T13730] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.281783][T13743] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  271.308658][T13730] 8021q: adding VLAN 0 to HW filter on device team0
[  271.323268][T13248] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.325723][T13248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.339928][T13248] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.342731][T13248] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.424218][T13743] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.443692][T13743] 8021q: adding VLAN 0 to HW filter on device team0
[  271.454431][  T183] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.457607][  T183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.473605][  T183] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.476208][  T183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.546145][T13730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.609428][T13743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.612785][T13730] veth0_vlan: entered promiscuous mode
[  271.623394][T13730] veth1_vlan: entered promiscuous mode
[  271.659871][T13730] veth0_macvtap: entered promiscuous mode
[  271.667077][T13730] veth1_macvtap: entered promiscuous mode
[  271.689139][T13730] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.702032][T13730] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.713046][ T5711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.718762][ T5711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.722456][ T5711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.734588][ T5711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.797117][T13246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.800369][T13246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.837999][T13246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.841245][T13246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.921454][T13743] veth0_vlan: entered promiscuous mode
[  271.945796][T13743] veth1_vlan: entered promiscuous mode
[  271.983907][T13743] veth0_macvtap: entered promiscuous mode
[  272.009115][T13743] veth1_macvtap: entered promiscuous mode
[  272.033031][T13743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.062787][T13743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.091580][ T5711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.153800][ T5711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.163418][ T5711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.167907][ T5711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.263755][T13834] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3435'.
[  272.270114][  T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.273912][  T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.313889][  T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.317871][  T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.529522][ T5233] Bluetooth: hci0: command tx timeout
[  273.156354][ T5233] Bluetooth: hci1: command tx timeout
[  273.850096][T13854] syzkaller0: entered promiscuous mode
[  273.852486][T13854] syzkaller0: entered allmulticast mode
[  274.597014][ T5233] Bluetooth: hci0: command tx timeout
[  275.237736][ T5233] Bluetooth: hci1: command tx timeout
[  275.265156][T13872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3444'.
[  275.269325][T13872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3444'.
[  275.514404][T13898] netlink: 352 bytes leftover after parsing attributes in process `syz.3.3455'.
[  275.540602][T13901] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.3457'.
[  276.153436][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3459'.
[  276.361954][T13902] delete_channel: no stack
[  276.685106][ T5233] Bluetooth: hci0: command tx timeout
[  277.268099][T13935] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3472'.
[  277.316151][ T5233] Bluetooth: hci1: command tx timeout
[  277.431458][T13947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3475'.
[  277.669747][T13957] netlink: 'syz.3.3480': attribute type 7 has an invalid length.
[  279.022371][T13965] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3485'.
[  279.032045][T13965] netlink: zone id is out of range
[  279.035270][T13965] netlink: zone id is out of range
[  279.038361][T13965] netlink: get zone limit has 8 unknown bytes
[  279.276402][T13979] cgroup: fork rejected by pids controller in /syz2
[  280.251244][T13996] netlink: 3787 bytes leftover after parsing attributes in process `syz.4.3498'.
[  280.404179][ T5711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.537078][T14007] netlink: 'syz.3.3504': attribute type 1 has an invalid length.
[  280.587095][ T5711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.605586][T14009] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  280.698021][ T5711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.824635][ T5711] bond0: (slave netdevsim0): Releasing backup interface
[  280.825802][T14017] netlink: 'syz.3.3509': attribute type 9 has an invalid length.
[  280.841036][ T5711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.872617][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.878894][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.882439][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.887844][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  280.891494][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  281.143565][ T5711] bond_slave_1: left promiscuous mode
[  281.392134][T14039] netlink: 'syz.4.3518': attribute type 41 has an invalid length.
[  281.592065][ T5711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.599364][ T5711] bond0 (unregistering): Released all slaves
[  281.615404][T14018] wg0 speed is unknown, defaulting to 1000
[  281.622174][   T51] wg0 speed is unknown, defaulting to 1000
[  281.626527][   T51] syz0: Port: 1 Link DOWN
[  281.720307][ T5711] : left promiscuous mode
[  281.755779][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'.
[  281.860343][T14018] chnl_net:caif_netlink_parms(): no params data found
[  282.659280][T14018] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.661930][T14018] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.664474][T14018] bridge_slave_0: entered allmulticast mode
[  282.673263][T14018] bridge_slave_0: entered promiscuous mode
[  282.722350][T14018] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.725386][T14018] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.732053][T14018] bridge_slave_1: entered allmulticast mode
[  282.732114][T14059] sctp: [Deprecated]: syz.4.3524 (pid 14059) Use of int in maxseg socket option.
[  282.732114][T14059] Use struct sctp_assoc_value instead
[  282.735762][T14018] bridge_slave_1: entered promiscuous mode
[  282.790451][T14018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.830679][ T5711] team0: Port device wlan1 removed
[  282.840914][T14018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.916147][ T5846] Bluetooth: hci2: command tx timeout
[  282.926935][ T5846] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[  282.972148][T14018] team0: Port device team_slave_0 added
[  282.981143][T14018] team0: Port device team_slave_1 added
[  283.024031][T14018] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.027536][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.046558][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.064945][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.069186][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.098297][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.194364][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.198442][ T5711] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.211864][ T5711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.215099][ T5711] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.224770][ T5711] batman_adv: batadv0: Interface deactivated: vlan1
[  283.235676][ T5711] batman_adv: batadv0: Removing interface: vlan1
[  283.255345][ T5711] veth1_vlan: left promiscuous mode
[  283.287820][ T5711] veth0_vlan: left promiscuous mode
[  284.121238][ T5711] team0 (unregistering): Port device team_slave_1 removed
[  284.212531][ T5711] team0 (unregistering): Port device team_slave_0 removed
[  284.901459][T14081] C: renamed from team_slave_0 (while UP)
[  284.905475][T14081] netlink: 'syz.3.3534': attribute type 1 has an invalid length.
[  284.909968][T14081] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3534'.
[  284.914113][T14081] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  284.947863][T14018] hsr_slave_0: entered promiscuous mode
[  284.956323][T14018] hsr_slave_1: entered promiscuous mode
[  284.961312][T14018] debugfs: 'hsr0' already exists in 'hsr'
[  284.964903][T14091] netlink: 'syz.3.3538': attribute type 23 has an invalid length.
[  284.970481][T14018] Cannot create hsr debugfs directory
[  285.002346][ T5233] Bluetooth: hci2: command tx timeout
[  285.280918][ T5711] ==================================================================
[  285.284496][ T5711] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  285.288018][ T5711] Write of size 8 at addr ffff8880303b16a8 by task kworker/u8:2/5711
[  285.292518][ T5711] 
[  285.293604][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  285.293620][ T5711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.293630][ T5711] Workqueue: netns cleanup_net
[  285.293654][ T5711] Call Trace:
[  285.293661][ T5711]  <TASK>
[  285.293694][ T5711]  dump_stack_lvl+0x189/0x250
[  285.293712][ T5711]  ? __virt_addr_valid+0x1c8/0x5c0
[  285.293728][ T5711]  ? rcu_is_watching+0x15/0xb0
[  285.293741][ T5711]  ? __kasan_check_byte+0x12/0x40
[  285.293758][ T5711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.293771][ T5711]  ? rcu_is_watching+0x15/0xb0
[  285.293781][ T5711]  ? lock_release+0x4b/0x3e0
[  285.293798][ T5711]  ? __virt_addr_valid+0x1c8/0x5c0
[  285.293811][ T5711]  ? __virt_addr_valid+0x4a5/0x5c0
[  285.293826][ T5711]  print_report+0xca/0x240
[  285.293837][ T5711]  ? __xfrm_state_delete+0x666/0xca0
[  285.293854][ T5711]  kasan_report+0x118/0x150
[  285.293869][ T5711]  ? __xfrm_state_delete+0x666/0xca0
[  285.293888][ T5711]  __xfrm_state_delete+0x666/0xca0
[  285.293909][ T5711]  xfrm_state_flush+0x45f/0x770
[  285.293930][ T5711]  xfrm6_tunnel_net_exit+0x3c/0x100
[  285.293944][ T5711]  ops_undo_list+0x49a/0x990
[  285.293962][ T5711]  ? __pfx_ops_undo_list+0x10/0x10
[  285.293980][ T5711]  ? do_raw_spin_unlock+0x4d/0x240
[  285.293995][ T5711]  cleanup_net+0x4c5/0x800
[  285.294012][ T5711]  ? __pfx_cleanup_net+0x10/0x10
[  285.294029][ T5711]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.294045][ T5711]  ? process_scheduled_works+0x9ef/0x17b0
[  285.294056][ T5711]  ? process_scheduled_works+0x9ef/0x17b0
[  285.294067][ T5711]  process_scheduled_works+0xae1/0x17b0
[  285.294086][ T5711]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.294115][ T5711]  worker_thread+0x8a0/0xda0
[  285.294135][ T5711]  kthread+0x711/0x8a0
[  285.294151][ T5711]  ? __pfx_worker_thread+0x10/0x10
[  285.294162][ T5711]  ? __pfx_kthread+0x10/0x10
[  285.294177][ T5711]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.294190][ T5711]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.294206][ T5711]  ? __pfx_kthread+0x10/0x10
[  285.294219][ T5711]  ret_from_fork+0x3fc/0x770
[  285.294233][ T5711]  ? __pfx_ret_from_fork+0x10/0x10
[  285.294247][ T5711]  ? __switch_to_asm+0x39/0x70
[  285.294261][ T5711]  ? __switch_to_asm+0x33/0x70
[  285.294275][ T5711]  ? __pfx_kthread+0x10/0x10
[  285.294288][ T5711]  ret_from_fork_asm+0x1a/0x30
[  285.294308][ T5711]  </TASK>
[  285.294313][ T5711] 
[  285.393368][ T5711] Allocated by task 12681:
[  285.395291][ T5711]  kasan_save_track+0x3e/0x80
[  285.397305][ T5711]  __kasan_slab_alloc+0x6c/0x80
[  285.399446][ T5711]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  285.401796][ T5711]  xfrm_state_alloc+0x24/0x2f0
[  285.403909][ T5711]  __find_acq_core+0x8a7/0x1c00
[  285.406045][ T5711]  xfrm_find_acq+0x78/0xa0
[  285.408043][ T5711]  xfrm_alloc_userspi+0x6b3/0xc90
[  285.410236][ T5711]  xfrm_user_rcv_msg+0x7a3/0xab0
[  285.412371][ T5711]  netlink_rcv_skb+0x208/0x470
[  285.414471][ T5711]  xfrm_netlink_rcv+0x79/0x90
[  285.416530][ T5711]  netlink_unicast+0x82f/0x9e0
[  285.418620][ T5711]  netlink_sendmsg+0x805/0xb30
[  285.420725][ T5711]  __sock_sendmsg+0x21c/0x270
[  285.422817][ T5711]  ____sys_sendmsg+0x505/0x830
[  285.424910][ T5711]  ___sys_sendmsg+0x21f/0x2a0
[  285.426978][ T5711]  __x64_sys_sendmsg+0x19b/0x260
[  285.429156][ T5711]  do_syscall_64+0xfa/0x3b0
[  285.431152][ T5711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.433726][ T5711] 
[  285.434803][ T5711] Freed by task 5905:
[  285.436565][ T5711]  kasan_save_track+0x3e/0x80
[  285.438608][ T5711]  kasan_save_free_info+0x46/0x50
[  285.440804][ T5711]  __kasan_slab_free+0x5b/0x80
[  285.442878][ T5711]  kmem_cache_free+0x18f/0x400
[  285.444965][ T5711]  xfrm_state_gc_task+0x52d/0x6b0
[  285.447135][ T5711]  process_scheduled_works+0xae1/0x17b0
[  285.449557][ T5711]  worker_thread+0x8a0/0xda0
[  285.451600][ T5711]  kthread+0x711/0x8a0
[  285.453396][ T5711]  ret_from_fork+0x3fc/0x770
[  285.455418][ T5711]  ret_from_fork_asm+0x1a/0x30
[  285.457504][ T5711] 
[  285.458579][ T5711] The buggy address belongs to the object at ffff8880303b1680
[  285.458579][ T5711]  which belongs to the cache xfrm_state of size 928
[  285.464537][ T5711] The buggy address is located 40 bytes inside of
[  285.464537][ T5711]  freed 928-byte region [ffff8880303b1680, ffff8880303b1a20)
[  285.470375][ T5711] 
[  285.471451][ T5711] The buggy address belongs to the physical page:
[  285.474204][ T5711] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880303b2d00 pfn:0x303b0
[  285.478506][ T5711] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  285.482134][ T5711] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  285.485332][ T5711] page_type: f5(slab)
[  285.487105][ T5711] raw: 00fff00000000040 ffff88801c30bb40 dead000000000122 0000000000000000
[  285.490824][ T5711] raw: ffff8880303b2d00 00000000800e0005 00000000f5000000 0000000000000000
[  285.494552][ T5711] head: 00fff00000000040 ffff88801c30bb40 dead000000000122 0000000000000000
[  285.498247][ T5711] head: ffff8880303b2d00 00000000800e0005 00000000f5000000 0000000000000000
[  285.501953][ T5711] head: 00fff00000000002 ffffea0000c0ec01 00000000ffffffff 00000000ffffffff
[  285.505646][ T5711] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  285.509405][ T5711] page dumped because: kasan: bad access detected
[  285.512194][ T5711] page_owner tracks the page as allocated
[  285.514729][ T5711] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5920, tgid 5918 (syz.2.3), ts 58350911687, free_ts 58336792755
[  285.522705][ T5711]  post_alloc_hook+0x240/0x2a0
[  285.524819][ T5711]  get_page_from_freelist+0x21e4/0x22c0
[  285.527238][ T5711]  __alloc_frozen_pages_noprof+0x181/0x370
[  285.529781][ T5711]  alloc_pages_mpol+0x232/0x4a0
[  285.531936][ T5711]  allocate_slab+0x8a/0x370
[  285.533913][ T5711]  ___slab_alloc+0xbeb/0x1410
[  285.535890][ T5711]  kmem_cache_alloc_noprof+0x283/0x3c0
[  285.538194][ T5711]  xfrm_state_alloc+0x24/0x2f0
[  285.540282][ T5711]  xfrm_add_sa+0x17d1/0x4070
[  285.542270][ T5711]  xfrm_user_rcv_msg+0x7a3/0xab0
[  285.544412][ T5711]  netlink_rcv_skb+0x208/0x470
[  285.546489][ T5711]  xfrm_netlink_rcv+0x79/0x90
[  285.548503][ T5711]  netlink_unicast+0x82f/0x9e0
[  285.550605][ T5711]  netlink_sendmsg+0x805/0xb30
[  285.552729][ T5711]  __sock_sendmsg+0x21c/0x270
[  285.554781][ T5711]  ____sys_sendmsg+0x505/0x830
[  285.556873][ T5711] page last free pid 5292 tgid 5292 stack trace:
[  285.559605][ T5711]  __free_frozen_pages+0xbc4/0xd30
[  285.561845][ T5711]  __slab_free+0x303/0x3c0
[  285.563791][ T5711]  qlist_free_all+0x97/0x140
[  285.565845][ T5711]  kasan_quarantine_reduce+0x148/0x160
[  285.568227][ T5711]  __kasan_slab_alloc+0x22/0x80
[  285.570348][ T5711]  __kmalloc_noprof+0x224/0x4f0
[  285.572423][ T5711]  tomoyo_realpath_from_path+0xe3/0x5d0
[  285.574775][ T5711]  tomoyo_path_perm+0x213/0x4b0
[  285.576813][ T5711]  security_inode_getattr+0x12f/0x330
[  285.579133][ T5711]  vfs_fstatat+0xb1/0x170
[  285.580998][ T5711]  __x64_sys_newfstatat+0x116/0x190
[  285.583186][ T5711]  do_syscall_64+0xfa/0x3b0
[  285.585140][ T5711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.587718][ T5711] 
[  285.588778][ T5711] Memory state around the buggy address:
[  285.591130][ T5711]  ffff8880303b1580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  285.594563][ T5711]  ffff8880303b1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  285.598002][ T5711] >ffff8880303b1680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.601396][ T5711]                                   ^
[  285.603643][ T5711]  ffff8880303b1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.607032][ T5711]  ffff8880303b1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.610456][ T5711] ==================================================================
[  285.614200][ T5711] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  285.617362][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  285.621388][ T5711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.625700][ T5711] Workqueue: netns cleanup_net
[  285.627779][ T5711] Call Trace:
[  285.629251][ T5711]  <TASK>
[  285.630545][ T5711]  dump_stack_lvl+0x99/0x250
[  285.632560][ T5711]  ? __asan_memcpy+0x40/0x70
[  285.634588][ T5711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.636887][ T5711]  ? __pfx__printk+0x10/0x10
[  285.638945][ T5711]  vpanic+0x281/0x750
[  285.640706][ T5711]  ? __pfx_print_hex_dump+0x10/0x10
[  285.642983][ T5711]  ? __pfx_vpanic+0x10/0x10
[  285.644946][ T5711]  ? irqentry_exit+0x74/0x90
[  285.646945][ T5711]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.649235][ T5711]  panic+0xb9/0xc0
[  285.650918][ T5711]  ? __pfx_panic+0x10/0x10
[  285.652936][ T5711]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  285.655490][ T5711]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.658218][ T5711]  ? __xfrm_state_delete+0x666/0xca0
[  285.660448][ T5711]  check_panic_on_warn+0x89/0xb0
[  285.662625][ T5711]  ? __xfrm_state_delete+0x666/0xca0
[  285.665099][ T5711]  end_report+0x78/0x160
[  285.667220][ T5711]  kasan_report+0x129/0x150
[  285.669370][ T5711]  ? __xfrm_state_delete+0x666/0xca0
[  285.671703][ T5711]  __xfrm_state_delete+0x666/0xca0
[  285.673954][ T5711]  xfrm_state_flush+0x45f/0x770
[  285.676118][ T5711]  xfrm6_tunnel_net_exit+0x3c/0x100
[  285.678386][ T5711]  ops_undo_list+0x49a/0x990
[  285.680416][ T5711]  ? __pfx_ops_undo_list+0x10/0x10
[  285.682689][ T5711]  ? do_raw_spin_unlock+0x4d/0x240
[  285.684923][ T5711]  cleanup_net+0x4c5/0x800
[  285.686897][ T5711]  ? __pfx_cleanup_net+0x10/0x10
[  285.689030][ T5711]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.691317][ T5711]  ? process_scheduled_works+0x9ef/0x17b0
[  285.693888][ T5711]  ? process_scheduled_works+0x9ef/0x17b0
[  285.696575][ T5711]  process_scheduled_works+0xae1/0x17b0
[  285.699118][ T5711]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.701809][ T5711]  worker_thread+0x8a0/0xda0
[  285.703809][ T5711]  kthread+0x711/0x8a0
[  285.705609][ T5711]  ? __pfx_worker_thread+0x10/0x10
[  285.707877][ T5711]  ? __pfx_kthread+0x10/0x10
[  285.709885][ T5711]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.712123][ T5711]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.714372][ T5711]  ? __pfx_kthread+0x10/0x10
[  285.716409][ T5711]  ret_from_fork+0x3fc/0x770
[  285.718376][ T5711]  ? __pfx_ret_from_fork+0x10/0x10
[  285.720545][ T5711]  ? __switch_to_asm+0x39/0x70
[  285.722567][ T5711]  ? __switch_to_asm+0x33/0x70
[  285.724707][ T5711]  ? __pfx_kthread+0x10/0x10
[  285.726708][ T5711]  ret_from_fork_asm+0x1a/0x30
[  285.728785][ T5711]  </TASK>
[  285.730959][ T5711] Kernel Offset: disabled
[  285.732864][ T5711] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:18:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002faf090
R8 =ffff888106860237 R9 =1ffff11020d0c046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98f5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a88f3 CR3=000000003b122000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f68cbb87498 00007f68cbb87470 XMM03=00007f68cbb874a8 00007f68cbb874a0
XMM04=00007f68cc6ed100 00007f68cbb87460 XMM05=00007f68cbb87478 00007f68cbb874c0
XMM06=00007f68cbb874b8 00007f68cbb874b0 XMM07=00007f68cbb874a8 00007f68cbb874a0
XMM08=0000000000000000 00007f68cba12ee7 XMM09=0000000000000000 00007f68cba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff99afba00 RBX=ffffffff8e139ea0 RCX=0000000000000000 RDX=0000000000000001
RSI=0000000000000000 RDI=ffff88810683b980 RBP=0000000000000000 RSP=ffffc90002cce9c8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90002ccec28 R11=fffff52000599d91
R12=0000000000000002 R13=ffffffff8e139ea0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5fe0 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f79713c66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68cbbb5fac CR3=0000000105880000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000021 0000000031003230
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00ff0000 XMM09=6c6c696b66722f37 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
