last executing test programs:

1.618937752s ago: executing program 2 (id=310):
r0 = socket$kcm(0x25, 0x1, 0x0)
sendmsg(r0, 0x0, 0x4)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]})
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180))
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da", 0x13}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000)

574.734875ms ago: executing program 1 (id=316):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000040)="8ebc14801609", 0x6}], 0x2}, 0x40010)

496.437956ms ago: executing program 1 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000000020108000000000000000002000005040001800400038024000280140001"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x2400c084)

495.524768ms ago: executing program 0 (id=318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x180, 0xc8, 0x400000, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, r0]}}], 0x20, 0x1}, 0x4090)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(r5, &(0x7f0000000000), 0xffc0)

495.290251ms ago: executing program 1 (id=319):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840)

418.986821ms ago: executing program 1 (id=320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)

418.649939ms ago: executing program 1 (id=321):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r3})
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x60}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8912, &(0x7f0000000080))

323.29966ms ago: executing program 2 (id=322):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

306.192784ms ago: executing program 2 (id=323):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

245.56026ms ago: executing program 0 (id=324):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000a00010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

237.450897ms ago: executing program 1 (id=325):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

233.782243ms ago: executing program 0 (id=326):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0x1000)

163.871125ms ago: executing program 2 (id=327):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

163.585076ms ago: executing program 0 (id=328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c050015006600000005000100060000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0)

159.95148ms ago: executing program 2 (id=329):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000)

97.909579ms ago: executing program 0 (id=330):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010006c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

325.974µs ago: executing program 2 (id=331):
socket$kcm(0x10, 0x2, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
syz_clone(0x108200, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open$cgroup(&(0x7f00000011c0)={0x3, 0x80, 0x4, 0x3, 0x61, 0x76, 0x0, 0xfffffffffffffff9, 0x8000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001140), 0xb}, 0x412, 0xdcc8, 0x5, 0x2, 0x81, 0x10000, 0x1, 0x0, 0x81, 0x0, 0x4c}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x108800}, 0x0, 0xffffffffffffffff, r2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)

0s ago: executing program 0 (id=332):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x0, 0x8, 0x3fb, 0xb, 0x48f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg(0xffffffffffffffff, 0x0, 0x40002041)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1363' (ED25519) to the list of known hosts.
syzkaller login: [   57.491280][ T5836] cgroup: Unknown subsys name 'net'
[   57.639659][ T5836] cgroup: Unknown subsys name 'cpuset'
[   57.643548][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.520817][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.216418][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.801505][ T5883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.807598][ T5886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.811374][ T5886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.815504][ T5886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.821181][ T5886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.833632][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.837651][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.846998][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.851514][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.855151][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.869286][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.873032][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.878543][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.883204][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.886814][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.282753][ T5882] chnl_net:caif_netlink_parms(): no params data found
[   70.314894][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   70.365421][ T5885] chnl_net:caif_netlink_parms(): no params data found
[   70.503928][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.507369][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.510304][ T5888] bridge_slave_0: entered allmulticast mode
[   70.514260][ T5888] bridge_slave_0: entered promiscuous mode
[   70.518557][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.520811][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.523048][ T5888] bridge_slave_1: entered allmulticast mode
[   70.525712][ T5888] bridge_slave_1: entered promiscuous mode
[   70.529482][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.532312][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.535103][ T5882] bridge_slave_0: entered allmulticast mode
[   70.539642][ T5882] bridge_slave_0: entered promiscuous mode
[   70.543747][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.547005][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.549580][ T5882] bridge_slave_1: entered allmulticast mode
[   70.552793][ T5882] bridge_slave_1: entered promiscuous mode
[   70.606410][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.609027][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.611909][ T5885] bridge_slave_0: entered allmulticast mode
[   70.615706][ T5885] bridge_slave_0: entered promiscuous mode
[   70.623772][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.629421][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.645787][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.649687][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.652626][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.655394][ T5885] bridge_slave_1: entered allmulticast mode
[   70.659880][ T5885] bridge_slave_1: entered promiscuous mode
[   70.690990][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.710924][ T5888] team0: Port device team_slave_0 added
[   70.729192][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.734421][ T5888] team0: Port device team_slave_1 added
[   70.767283][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.789109][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.791683][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.801736][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.808963][ T5882] team0: Port device team_slave_0 added
[   70.823902][ T5882] team0: Port device team_slave_1 added
[   70.827087][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.829798][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.840285][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.892404][ T5885] team0: Port device team_slave_0 added
[   70.896157][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.899341][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.909162][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.927350][ T5885] team0: Port device team_slave_1 added
[   70.930544][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.932955][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.942213][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.966136][ T5888] hsr_slave_0: entered promiscuous mode
[   70.968752][ T5888] hsr_slave_1: entered promiscuous mode
[   71.001784][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.004376][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.014623][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.020239][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.022953][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.032396][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.074306][ T5882] hsr_slave_0: entered promiscuous mode
[   71.077248][ T5882] hsr_slave_1: entered promiscuous mode
[   71.079690][ T5882] debugfs: 'hsr0' already exists in 'hsr'
[   71.082057][ T5882] Cannot create hsr debugfs directory
[   71.142334][ T5885] hsr_slave_0: entered promiscuous mode
[   71.144654][ T5885] hsr_slave_1: entered promiscuous mode
[   71.147251][ T5885] debugfs: 'hsr0' already exists in 'hsr'
[   71.149046][ T5885] Cannot create hsr debugfs directory
[   71.271107][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.273893][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.468048][ T5882] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.480714][ T5882] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.487790][ T5882] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.504711][ T5882] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.562220][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.585131][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.600082][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.619266][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.651183][ T5885] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.658328][ T5885] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.663290][ T5885] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.679784][ T5885] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.782894][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.821482][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[   71.827826][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.841305][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.844230][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.861172][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.869611][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.872491][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.890818][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   71.914126][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.917001][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.920518][ T5883] Bluetooth: hci1: command tx timeout
[   71.920773][   T54] Bluetooth: hci0: command tx timeout
[   71.923181][ T5886] Bluetooth: hci2: command tx timeout
[   71.950670][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.953499][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.958813][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[   71.976248][ T5882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.998259][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.000987][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.030855][ T5888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.034485][ T5888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.044430][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.047311][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.211559][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.258394][ T5882] veth0_vlan: entered promiscuous mode
[   72.266783][ T5882] veth1_vlan: entered promiscuous mode
[   72.301107][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.341483][ T5882] veth0_macvtap: entered promiscuous mode
[   72.378336][ T5882] veth1_macvtap: entered promiscuous mode
[   72.385246][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.413399][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.430392][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.440566][ T5888] veth0_vlan: entered promiscuous mode
[   72.453719][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.464754][ T5888] veth1_vlan: entered promiscuous mode
[   72.476094][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.481270][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.484911][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.561430][ T5885] veth0_vlan: entered promiscuous mode
[   72.566098][ T5888] veth0_macvtap: entered promiscuous mode
[   72.583632][ T5888] veth1_macvtap: entered promiscuous mode
[   72.591073][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.593465][ T5885] veth1_vlan: entered promiscuous mode
[   72.593611][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.647868][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.649468][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.650708][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.658967][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.670592][ T5885] veth0_macvtap: entered promiscuous mode
[   72.680412][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.696424][ T5910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.701429][ T5885] veth1_macvtap: entered promiscuous mode
[   72.704853][ T5910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.739576][ T5910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.756165][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.778082][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.818938][ T5892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.830129][ T5892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.845685][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.850285][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.878225][ T5892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.881785][ T5892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.908368][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.914300][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.069218][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.072553][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.157408][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.161787][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.536141][ T5981] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   73.689823][ T5992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.32'.
[   73.700559][ T5993] netlink: 'syz.1.35': attribute type 10 has an invalid length.
[   73.722659][ T5993] team0: Device hsr_slave_0 failed to register rx_handler
[   73.840740][ T6003] netlink: 'syz.2.39': attribute type 7 has an invalid length.
[   73.853891][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'.
[   73.986783][ T5886] Bluetooth: hci0: command tx timeout
[   73.998749][ T5886] Bluetooth: hci2: command tx timeout
[   73.998836][   T54] Bluetooth: hci1: command tx timeout
[   74.141735][ T6025] netlink: 'syz.1.50': attribute type 2 has an invalid length.
[   74.144821][ T6025] netlink: 'syz.1.50': attribute type 7 has an invalid length.
[   74.156137][ T6025] netlink: 85 bytes leftover after parsing attributes in process `syz.1.50'.
[   74.161082][ T6025] netlink: 130140 bytes leftover after parsing attributes in process `syz.1.50'.
[   74.165723][ T6025] netlink: 'syz.1.50': attribute type 2 has an invalid length.
[   74.170666][ T6025] netlink: 'syz.1.50': attribute type 7 has an invalid length.
[   74.173720][ T6025] netlink: 85 bytes leftover after parsing attributes in process `syz.1.50'.
[   74.202099][ T6027] netlink: 'syz.2.51': attribute type 1 has an invalid length.
[   74.219619][ T6027] netlink: 'syz.2.51': attribute type 2 has an invalid length.
[   74.447055][ T6036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.55'.
[   74.888935][ T6062] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   74.892044][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'.
[   74.995643][ T6070] Zero length message leads to an empty skb
[   75.047421][ T6074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.175728][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'.
[   75.336543][    C1] hrtimer: interrupt took 57184 ns
[   75.623642][ T6109] netlink: 2 bytes leftover after parsing attributes in process `syz.0.88'.
[   75.630351][ T6111] warning: `syz.2.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.647552][ T6109] batadv_slave_1: entered promiscuous mode
[   75.841717][ T6126] netlink: 156 bytes leftover after parsing attributes in process `syz.1.95'.
[   76.067281][   T54] Bluetooth: hci1: command tx timeout
[   76.077127][   T54] Bluetooth: hci2: command tx timeout
[   76.077233][ T5886] Bluetooth: hci0: command tx timeout
[   76.530823][ T6159] caif0: entered promiscuous mode
[   76.532972][ T6159] caif0: entered allmulticast mode
[   78.150461][ T5886] Bluetooth: hci2: command tx timeout
[   78.150703][   T54] Bluetooth: hci1: command tx timeout
[   78.159215][   T54] Bluetooth: hci0: command tx timeout
[   78.924758][ T6213] validate_nla: 5 callbacks suppressed
[   78.924786][ T6213] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   78.956307][ T6215] __nla_validate_parse: 6 callbacks suppressed
[   78.956324][ T6215] netlink: 14 bytes leftover after parsing attributes in process `syz.2.132'.
[   78.988884][ T6213] team0: Port device geneve1 added
[   78.993384][ T6215] hsr_slave_0: left promiscuous mode
[   79.005765][ T6215] hsr_slave_1: left promiscuous mode
[   79.768917][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   79.920778][ T6245] syzkaller0: entered promiscuous mode
[   79.933046][ T6245] syzkaller0: entered allmulticast mode
[   79.935714][ T6247] netlink: 56 bytes leftover after parsing attributes in process `syz.1.149'.
[   80.086813][ T6252] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.150'.
[   80.154809][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   80.160030][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   80.334774][ T6260] netlink: 'syz.1.154': attribute type 33 has an invalid length.
[   80.345313][ T6260] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.154'.
[   80.462844][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'.
[   80.745589][ T6282] netlink: 'syz.2.162': attribute type 10 has an invalid length.
[   83.222305][ T6324] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   83.293602][ T6329] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   83.564571][ T6343] netlink: 'syz.2.185': attribute type 1 has an invalid length.
[   83.782110][ T6352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.188'.
[   83.979241][ T6368] netlink: 'syz.1.196': attribute type 10 has an invalid length.
[   83.990199][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.994018][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.002795][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.005531][ T6368] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.008878][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.011971][ T6368] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.020102][ T6368] team0: Port device bridge0 added
[   84.074428][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'.
[   84.079214][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'.
[   84.155220][ T6377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.224064][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   84.228153][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   84.358774][ T6388] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.363061][ T6388] sock: sock_timestamping_bind_phc: sock not bind to device
[   84.451232][ T6396] netlink: 'syz.0.209': attribute type 21 has an invalid length.
[   84.454944][ T6396] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.209'.
[   84.527457][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   84.531285][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   84.534936][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   84.624670][ T6411] syz.1.216: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.634068][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz.1.216 Not tainted syzkaller #0 PREEMPT(full) 
[   84.634080][ T6411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.634086][ T6411] Call Trace:
[   84.634090][ T6411]  <TASK>
[   84.634107][ T6411]  dump_stack_lvl+0x189/0x250
[   84.634125][ T6411]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.634135][ T6411]  ? __pfx__printk+0x10/0x10
[   84.634148][ T6411]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.634159][ T6411]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.634170][ T6411]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   84.634180][ T6411]  warn_alloc+0x214/0x310
[   84.634194][ T6411]  ? stack_depot_save_flags+0x41b/0x860
[   84.634206][ T6411]  ? __pfx_warn_alloc+0x10/0x10
[   84.634218][ T6411]  ? kasan_save_track+0x4f/0x80
[   84.634228][ T6411]  ? xskq_create+0x56/0x170
[   84.634239][ T6411]  ? xsk_init_queue+0xb0/0x110
[   84.634247][ T6411]  ? xsk_setsockopt+0x57b/0x8d0
[   84.634255][ T6411]  ? do_sock_setsockopt+0x17c/0x1b0
[   84.634267][ T6411]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   84.634275][ T6411]  ? do_syscall_64+0xfa/0x3b0
[   84.634287][ T6411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.634300][ T6411]  __vmalloc_node_range_noprof+0x125/0x12f0
[   84.634324][ T6411]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.634338][ T6411]  ? __kasan_kmalloc+0x93/0xb0
[   84.634349][ T6411]  vmalloc_user_noprof+0xad/0xf0
[   84.634360][ T6411]  ? xskq_create+0xbf/0x170
[   84.634369][ T6411]  xskq_create+0xbf/0x170
[   84.634380][ T6411]  xsk_init_queue+0xb0/0x110
[   84.634391][ T6411]  xsk_setsockopt+0x57b/0x8d0
[   84.634401][ T6411]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.634410][ T6411]  ? __pfx_aa_sk_perm+0x10/0x10
[   84.634423][ T6411]  ? __fget_files+0x2a/0x420
[   84.634431][ T6411]  ? aa_sock_opt_perm+0xff/0x1b0
[   84.634439][ T6411]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   84.634447][ T6411]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.634457][ T6411]  do_sock_setsockopt+0x17c/0x1b0
[   84.634471][ T6411]  __x64_sys_setsockopt+0x13f/0x1b0
[   84.634480][ T6411]  do_syscall_64+0xfa/0x3b0
[   84.634496][ T6411]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.634508][ T6411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.634516][ T6411]  ? exc_page_fault+0x9f/0xf0
[   84.634529][ T6411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.634538][ T6411] RIP: 0033:0x7fa50238ebe9
[   84.634547][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.634554][ T6411] RSP: 002b:00007fa503296038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.634563][ T6411] RAX: ffffffffffffffda RBX: 00007fa5025b5fa0 RCX: 00007fa50238ebe9
[   84.634569][ T6411] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[   84.634574][ T6411] RBP: 00007fa502411e19 R08: 0000000000000004 R09: 0000000000000000
[   84.634580][ T6411] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[   84.634585][ T6411] R13: 00007fa5025b6038 R14: 00007fa5025b5fa0 R15: 00007ffe964919d8
[   84.634600][ T6411]  </TASK>
[   84.634714][ T6411] Mem-Info:
[   84.760082][ T6411] active_anon:4876 inactive_anon:0 isolated_anon:0
[   84.760082][ T6411]  active_file:1260 inactive_file:38223 isolated_file:0
[   84.760082][ T6411]  unevictable:1768 dirty:421 writeback:0
[   84.760082][ T6411]  slab_reclaimable:9252 slab_unreclaimable:50810
[   84.760082][ T6411]  mapped:18077 shmem:2430 pagetables:923
[   84.760082][ T6411]  sec_pagetables:0 bounce:0
[   84.760082][ T6411]  kernel_misc_reclaimable:0
[   84.760082][ T6411]  free:308184 free_pcp:14897 free_cma:0
[   84.777369][ T6411] Node 0 active_anon:10564kB inactive_anon:0kB active_file:2220kB inactive_file:53804kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33820kB dirty:572kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6892kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.789664][ T6411] Node 1 active_anon:8940kB inactive_anon:0kB active_file:2820kB inactive_file:99088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38488kB dirty:1112kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4512kB pagetables:1596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.801533][ T6411] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.814029][ T6411] lowmem_reserve[]: 0 811 811 811 811
[   84.815889][ T6411] Node 0 DMA32 free:379364kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10592kB inactive_anon:0kB active_file:2220kB inactive_file:53804kB unevictable:3536kB writepending:572kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:24392kB local_pcp:17752kB free_cma:0kB
[   84.832462][ T6411] lowmem_reserve[]: 0 0 0 0 0
[   84.834536][ T6411] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   84.846395][ T6411] lowmem_reserve[]: 0 0 854 854 854
[   84.848628][ T6411] Node 1 Normal free:379520kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8904kB inactive_anon:0kB active_file:2820kB inactive_file:99088kB unevictable:3536kB writepending:1112kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35344kB local_pcp:15972kB free_cma:0kB
[   84.861189][ T6411] lowmem_reserve[]: 0 0 0 0 0
[   84.863169][ T6411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.869502][ T6411] Node 0 DMA32: 395*4kB (UM) 501*8kB (UME) 313*16kB (UME) 136*32kB (UM) 22*64kB (UE) 8*128kB (U) 6*256kB (UM) 2*512kB (U) 1*1024kB (U) 1*2048kB (E) 87*4096kB (M) = 379364kB
[   84.877084][ T6411] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   84.883734][ T6411] Node 1 Normal: 430*4kB (UM) 435*8kB (UM) 93*16kB (UME) 203*32kB (UME) 50*64kB (UM) 23*128kB (UME) 15*256kB (UME) 6*512kB (ME) 5*1024kB (ME) 4*2048kB (ME) 83*4096kB (UM) = 379520kB
[   84.902257][ T6411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.916764][ T6411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.920516][ T6411] 41916 total pagecache pages
[   84.922467][ T6411] 0 pages in swap cache
[   84.924182][ T6411] Free swap  = 124996kB
[   84.925922][ T6411] Total swap = 124996kB
[   84.953831][ T6411] 786301 pages RAM
[   84.955388][ T6411] 0 pages HighMem/MovableOnly
[   84.960023][ T6411] 241329 pages reserved
[   84.961624][ T6411] 0 pages cma reserved
[   84.979533][ T6422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.222'.
[   85.115428][ T6427] netlink: 'syz.1.224': attribute type 10 has an invalid length.
[   85.119507][ T6427] netlink: 55 bytes leftover after parsing attributes in process `syz.1.224'.
[   86.098399][ T6427] syz.1.224 (6427) used greatest stack depth: 19768 bytes left
[   86.114755][ T6438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.781370][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1064507255 wd_nsec: 1064507256
[   86.795619][  T792] cfg80211: failed to load regulatory.db
[   87.047277][ T6461] netlink: 'syz.1.239': attribute type 39 has an invalid length.
[   87.628147][ T6494] netlink: 'syz.0.254': attribute type 21 has an invalid length.
[   89.372125][ T6556] __nla_validate_parse: 8 callbacks suppressed
[   89.372137][ T6556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.275'.
[   89.810475][ T6561] netlink: 'syz.0.276': attribute type 10 has an invalid length.
[   89.869142][ T6561] bridge0: port 3(macsec0) entered blocking state
[   89.876995][ T6561] bridge0: port 3(macsec0) entered disabled state
[   89.884456][ T6561] macsec0: entered allmulticast mode
[   89.888132][ T6561] veth1_macvtap: entered allmulticast mode
[   89.932851][ T6561] macsec0: entered promiscuous mode
[   89.966449][ T6561] bridge0: port 3(macsec0) entered blocking state
[   89.971770][ T6561] bridge0: port 3(macsec0) entered forwarding state
[   90.136264][ T6570] netlink: 'syz.1.279': attribute type 29 has an invalid length.
[   90.140368][ T6570] netlink: 'syz.1.279': attribute type 29 has an invalid length.
[   90.384641][ T6579] netlink: 830 bytes leftover after parsing attributes in process `syz.1.283'.
[   90.390100][ T6579] bond_slave_0: entered promiscuous mode
[   90.392651][ T6579] bond_slave_1: entered promiscuous mode
[   90.439606][ T6561] syz.0.276 (6561) used greatest stack depth: 19640 bytes left
[   90.645219][ T6587] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.286'.
[   91.552333][ T6599] netlink: 156 bytes leftover after parsing attributes in process `syz.2.291'.
[   91.794795][ T6612] sit0: entered allmulticast mode
[   91.807978][ T6612] sit0: entered promiscuous mode
[   91.810890][ T6614] netlink: 92 bytes leftover after parsing attributes in process `syz.1.298'.
[   92.909977][ T6648] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[   92.921334][ T6637] delete_channel: no stack
[   92.963945][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'.
[   92.983269][ T6648] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   93.899700][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'.
[   93.902615][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'.
[   93.932917][ T6665] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.319'.
[   94.293899][ T6687] netlink: 'syz.2.329': attribute type 11 has an invalid length.
Connection to localhost closed by remote host.
[   94.488034][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   94.488664][ T6692] netlink: 'syz.2.331': attribute type 10 has an invalid length.
[   94.512773][ T6692] veth0_vlan: left promiscuous mode
[   94.521801][ T6692] veth0_vlan: entered promiscuous mode
[   94.528307][ T6692] team0: Device veth0_vlan failed to register rx_handler
[   95.109411][ T5871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.153550][ T5882] syz-executor (5882) used greatest stack depth: 19064 bytes left
[   95.193779][ T5871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.263386][ T5871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.327812][ T5871] bond0: (slave netdevsim0): Releasing backup interface
[   95.332607][ T5871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.470294][ T5871] bridge_slave_1: left allmulticast mode
[   95.473267][ T5871] bridge_slave_1: left promiscuous mode
[   95.476847][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.484887][ T5871] bridge_slave_0: left allmulticast mode
[   95.487886][ T5871] bridge_slave_0: left promiscuous mode
[   95.490338][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.793899][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.800003][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.804347][ T5871] bond0 (unregistering): Released all slaves
[   96.096344][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.100528][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.104656][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.107944][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.125251][ T5871] veth1_macvtap: left promiscuous mode
[   96.130171][ T5871] veth0_macvtap: left promiscuous mode
[   96.132198][ T5871] veth1_vlan: left promiscuous mode
[   96.504529][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   96.538643][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   97.168420][ T5871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.234673][ T5871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.296292][ T5871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.325951][ T5871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.445587][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.502997][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.563748][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.628322][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.773227][ T5871] macsec0: left allmulticast mode
[   97.776405][ T5871] veth1_macvtap: left allmulticast mode
[   97.779470][ T5871] macsec0: left promiscuous mode
[   97.781817][ T5871] bridge0: port 3(macsec0) entered disabled state
[   97.792388][ T5871] bridge_slave_1: left allmulticast mode
[   97.794681][ T5871] bridge_slave_1: left promiscuous mode
[   97.797656][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.803376][ T5871] bridge_slave_0: left promiscuous mode
[   97.805701][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.815982][ T5871] bridge_slave_1: left allmulticast mode
[   97.819760][ T5871] bridge_slave_1: left promiscuous mode
[   97.822189][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.828132][ T5871] bridge_slave_0: left allmulticast mode
[   97.830411][ T5871] bridge_slave_0: left promiscuous mode
[   97.832882][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.855315][ T5871] bond_slave_0: left promiscuous mode
[   97.858108][ T5871] bond_slave_1: left promiscuous mode
[   98.063163][ T5871] team0: Port device geneve1 removed
[   98.168097][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.172656][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.176235][ T5871] bond0 (unregistering): Released all slaves
[   98.326070][ T5871] team0: Port device bridge0 removed
[   98.443104][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.448906][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.453730][ T5871] bond0 (unregistering): Released all slaves
[   98.865910][ T5871] hsr_slave_0: left promiscuous mode
[   98.871027][ T5871] hsr_slave_1: left promiscuous mode
[   98.873863][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.878555][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.882369][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.885412][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.892980][ T5871] hsr_slave_0: left promiscuous mode
[   98.896146][ T5871] hsr_slave_1: left promiscuous mode
[   98.901512][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.904555][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.917701][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.920783][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.962154][ T5871] veth1_macvtap: left promiscuous mode
[   98.964052][ T5871] veth0_macvtap: left promiscuous mode
[   98.965838][ T5871] veth1_vlan: left promiscuous mode
[   98.968806][ T5871] veth0_vlan: left promiscuous mode
[   98.971830][ T5871] veth1_macvtap: left promiscuous mode
[   98.974042][ T5871] veth0_macvtap: left promiscuous mode
[   99.384811][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   99.405639][ T5871] team0 (unregistering): Port device team_slave_0 removed
[   99.758378][ T5871] team0 (unregistering): Port device team_slave_1 removed
[   99.792048][ T5871] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
12:58:37  Registers:
info registers vcpu 0

CPU#0
RAX=62783b91f1bdec00 RBX=ffffffff819683a8 RCX=62783b91f1bdec00 RDX=0000000000000001
RSI=ffffffff8d9b6a0a RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a7446a3680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5dbacc1698b77900 RBX=ffffffff819683a8 RCX=5dbacc1698b77900 RDX=0000000000000001
RSI=ffffffff8d9b6a0a RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a7446a2600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000062 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000ff0000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
