last executing test programs:

1m13.865729414s ago: executing program 1 (id=890):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000011c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e23, 0x0, 0x4e24, 0x3ff, 0xa, 0xa0, 0xa0, 0x84}, {@in6=@private0, 0x4d3, 0x32}, @in6=@loopback, {0xd6, 0x2, 0x2, 0x1, 0x9, 0x9, 0x0, 0x9}, {0x101, 0x2, 0x2fe, 0xfff}, {0x4c0, 0xa9d, 0x7cc}, 0x70bd2c, 0x3501, 0x2, 0x0, 0x9, 0x40}, 0x9, 0xfffffff9}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000044)
r1 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x49, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94)

1m13.172408622s ago: executing program 1 (id=901):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x7, 0x7fdf, 0x456e, 0x141, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)

1m13.063589608s ago: executing program 1 (id=902):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3b, 0x1, 0x70bd2a, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x10)

1m13.062744257s ago: executing program 1 (id=904):
r0 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43)

1m13.030463068s ago: executing program 1 (id=906):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m12.902582939s ago: executing program 1 (id=910):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

57.825913449s ago: executing program 32 (id=910):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

32.432719011s ago: executing program 2 (id=1428):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@allocspi={0x114, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e24, 0x8, 0x4e20, 0x5, 0xa, 0xa0, 0x1a0, 0x2a}, {@in6=@mcast2, 0x4d5, 0x33}, @in=@multicast2, {0x0, 0xa, 0xfffffffffffffff9, 0x3, 0x2, 0x9, 0x200000000009, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x7}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x0, 0xa, 0x0, 0x1, 0x1}, 0x3, 0xffff}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2c, 0xc3b, 0x70bd29, 0x101}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810)

32.432350085s ago: executing program 2 (id=1429):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

31.406329188s ago: executing program 2 (id=1442):
r0 = socket$kcm(0x28, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x3c, 0x0, 0x0)

31.355718927s ago: executing program 2 (id=1445):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4)

31.355101328s ago: executing program 2 (id=1446):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

31.295844173s ago: executing program 2 (id=1448):
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x3b, &(0x7f0000000840)=[{&(0x7f0000000780)="b9", 0xfffffdef}], 0x1}, 0x840)

15.686847004s ago: executing program 33 (id=1448):
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x3b, &(0x7f0000000840)=[{&(0x7f0000000780)="b9", 0xfffffdef}], 0x1}, 0x840)

5.476941316s ago: executing program 3 (id=1730):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x82, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x94)

5.22484747s ago: executing program 3 (id=1733):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0xfc}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400100000103010300000000000000000000000600014000000000c0000b8008000c400000000188000e000200e00000020c000280050001008800006673195fb5993c3f003a0000000c000280050001002f0000000c00028005010100210000002c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000bb06000340000000000c000280050001003a000000100017000000007f0000000300000004140005800e0001006972632d32303030300000bba4000340000000000c000200fffffffb0000000d0c000200fffffffb00000040080003400000ffff00000a002e762c7928ea3b4a0376188012c7c20d224ad634554fb85890a519db8a34156c3a642b53e22b2df20c000200ffffffff00000008000000000000000000000000000000000000000000000000000000efbf6bdc5e82dddcf0ac2b40f6d5a006089eab8bab9c36d2e01d532d84a099bcbb"], 0x140}, 0x1, 0x0, 0x0, 0x4000091}, 0x20000800)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x1, 0x5}, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x880, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x1942}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000"], 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x4, &(0x7f00000003c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socket$kcm(0x23, 0x5, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)

3.431791258s ago: executing program 3 (id=1744):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)

2.477660773s ago: executing program 3 (id=1750):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x4f, 0x1, 0x9, 0x25dfdbff, {0x2}}, 0x14}}, 0x0)

2.399469438s ago: executing program 4 (id=1751):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, &(0x7f0000000040), 0xcf)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x3, 0x2, 0x1}}, 0x80, 0x0}, 0x804)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x81, 0x32f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x100024}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x29, 0x3, 0x4, 0xb, 0x0, 0x2, 0x3e584, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x2200, 0x8, 0x4017, 0x0, 0x40, 0x1, 0x5, 0x0, 0x6, 0x0, 0x637}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6)
r5 = socket$inet(0x2, 0x2, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f06010800000000000000000700000505"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4000000)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d3", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000840)="2d00000080", 0x5}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000940b040a0101027f00000100000000001c000000000000"], 0x40}, 0x20000810)
r9 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000200)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="ec8f5e924525992811bc4e3069263bffb2af502d5a86fd5648d834647328d8e5e49aa16ea6480925e1c9b49833dcae4cc7557b506f4185118680ea70e9a1299865952142d0e1f7faa07eeba2687fe81b07d219dec770453ae09d402b24a6db9d3b4f35dafb133050589ed5856bb164758e01e945504b4f936388f5b31f00383d81d8736d92dbeb399605e7fb6fa1d51a25e7e7365ee11274c32ec26f93833cc0ce2356ca6fd85d084ea440df1ebc766eea3a1f4358e14e81d9d12c147c85f1d533bd0138942694f1a7d92f3fea2df14dc986097489f3cf8caf321315fde13a93b658aa128c468f23b9d07ff107e13219d7bc244844bd8fef8ff0c97bb068ee89266bf4bf241ac17044c00bfd9e8b85579ba2723a1668f0721523a29b09e747bd305ed469a7d977cfe113da7974b5e4c9934fbaa3ec3eab77c18b80216f196484ce149f395dbb036946ab235684094e88c2067b7e34a3d5d8fcfa10874879147412e00abfa6e9896cc0bf75ad66a566d1918e7cf927621e932022750d30cb5a6ac36b2b75cc201fac34225f5ad493979e5098c4273deceb2359e5c3aec41c1cece9245585e7a2369b3ddd6aa7c47968bd85d83c78ff8c6640ca070da6f834f300bc3c02f86cb5c735fe07d1891c807c02a20a072e4afd37659969a24a0204902fcfbb06bff18189bad5b58e28155454d2d94988ea5712b4782963dc04549540b535289dc3541607c832431ab6638ad957271c84cb4bbe052ae387a16016a34aa18ae3f8cced205fa2f79b1ca9d0ccf0718848ce851366f21969504393edeecf40696c4013bdccf7380c4938c1bc39e064e99c55100c30c8dd5f1f0aab2faab53a182198c1a3cecce7944b2b7aad8478c624630d6546a43fd244f423e8d53e8a4a6b32fd23413088ff5dd4bba8e9de1822c03fbc9ab75131a62d1e9249fcfd2bfd3371da950935e68ca145872c2dac3724be02021cf52cdd16397d088f4da016a40dbab3378c30ddbfde9f8c79585da98101a5815243bb482abdf3baf18955bdfdda16779a093537ce6a816511ebd81fb617b6f264a103f64de8972521ac521522f53013f8c2b41a031c6942fac1cb042bef556bf5a4a298e0995e58963b545f0d14295519f2e0b0ac0313c78b8e08f11427945881c0bdad0ed40ab01a8b0a5fa6c9325a5bcca38aabe9e8414a751f07a6fc8db585d14dbb8729d5c5e829abc307cfde5c7a2bcea00d9d6b1da936b40250dd8b5baf2a9341e10b36e63461f442a925f9ccb43ebd7321e61f6e979eba081d9a25d6e961eca8498bddf62bc24e63e6365f791956babb7851507416524a86ed03afef0f39df0de387b2cccfa542214a04c9c1a9067f989dd6ae2a6f34b471a83389b3da99abc3fee153acbd44b2c76ded2c1b4d7263677d4c1d4e8f8421f40d959f3eb587f55990b32e2f2a2d08c408da6c3bd906d89f332a533eea9b150f9afb32a9138529f5e40b29103b2fb4cbc067f14dd7aa6cd796e76be87516b85602171c579f1729464916a65dca901e37c0d02d5449024a7783c46333c66edfdc39ef521db16e811bb30ec6ec96dfb5d53ccf9951099bd815eeca448c28730302ea2454a9a83931f984943ecb334c81558d34d55849cf8936387c27e0b6005265caf1f47fe01b31d6dc7129b35b856dfa718ada3994b65825b493c49eb364a3b24d838c7086491f971a975cfca4c107859e0e9c7193dd05c6a22eb22c79541e0846ad122e074e4552dc92f997ffaebeffdcdb31adf50b21aa20d39dfc969b5dd587adaac7d29fa30a959bdf664a8caf1e287f703548ea6e81fad53a5b5dd7652c820bdd893105e3efd9b032e28c8bb2b91c55ae69354362e8d38497a26898d936cd65e8449193f3969589a25d71cbd4b531198fb761d54ef7b0cb7cb749a2afd54f76c292f64df897601aea84df198401d269034ae0668985381c51c1ae61e3e0c5913a8ff6ac33b9af4c23dac77cd3111713796e9c89e9defc975cca593c3d967d228c5618067d970a422d416bc060f82ffd4b4f4b83a5dcc0c5b373287b8c14f7ff3f600ae271df4f8a59acc85f28aa822bdf069c54ea2c3585b4053358c358622a6a4b9b271ee6d1d915e78e6e96c72e3f79c76dc5c16738fc009135b9b6dc9902b21a0ee2b46b36fecac8bfe4ff430be726c31e8d5b1b5be610f6b895129d21d76f7f6e27f85108aca20a019ff8af314ccd868fb19e81c588daa21741fc5beda6098903e00760c9273055e71b5f4624fa8136b6f5fb70e3b2d831e192bfe24bd157443e562edeabdffaa6e55167b8b0bbb29c98ceed2bc1b459d420f5281ffd041316cf095b6d90612c8cf0622da447b6df123a6283caa11b3498f180d3d528346b1885c6cf33f5a3f5275b7874fe66ab76d559627e005c6d75f3b04b9d99e8821afdbdcd9f58ea86b24953dd51c9e3905048fce3f75faa9316811fcc6212ced6d5883fcd4d6fc07451e852b4ae518c3782b31a245d5663f9b9cbe7e0d460b822be59e29e9c9ed861af5c17a2b42866743b47d1670869fffa9d7d2d62964cc69857ac0d3d2575b3b8e2b4b7c01ab1acbd48035d74ee9a80bbd91c5e1fa83f5c447bd5d4d5037b13bf1fda50d540d9371e54ff94248b28346724c6f144f0e7f3cec254d65aff900cc31822be91b0e762bc069f2facd829b4e53b587d4a7eeac38d44e3a17cbdc6dcf496e55fd3ae4574ab6d485a32f12ef128039525c999fb0a30fb71a52df919544378a663c63505eeb8ebcdedd3be80ff715b3ec90b4dc374293e6d2251f9de1b46f2550c344d6f03ebccfb634653d7753c4760ab36be165b1e2046f4309ca7accd6edefef2dd79264745711129ac4a061d3fab24904b2c73188e9bba98bc6899903b258c48d8045e04710add877b5c638cd5d7d8a3b7ab27a5d44629424757f358a765dc550c1878a69ef301f8695bfb67be150d7b187ddc1708e42b7b5bbf7395a2688af4e7d67fd60be99a963c3b771450549407b1d9dcea3962e14990c226fe2fe3aaf087fcce1992e0e131755b761cb9d1b7d02fd2bfd13c75c627fee0d656ef3cf876faaf369114d39440fd824eb796ad265c2e9cec7e3471296193bb56227debb18410bef58b67b167a09eddcc2c755a3923a881d646fc29241cb1695ff918409030c3fd7e26c5d63b107dbb92741b124a35544a7416029c04beb4e339a2c838c3d9db06cd3b305aa978fa3dc2e166605ed2c806ad9260ca37e05da2edfc449a23988eb2d8eaeee7fd389918d50e84eb7029e1c08679012fd87de066e315d528b5296d9a3c78eed02a21a2f1eb0adac6323e68dbef4d2fdec14f672acf4c4f10cabbcca5b55ecb230888d1beb82c608a485f55a0f93e2fee883734159d267067f7482f184e18310ac9e9b28fbcc37b5d45413c4e9425c6a01e07a7291459d07092d282dc9008d599e9b5c17e9baf734e5ca0b556f3b166e9a898bb11426d91e683673666ba407dc995b58ac7227ae96f2fa16c038cb7df3e0c6631aaa0e44e33ece90b0b3edde52bd6fc45664e9a52958b0e1a878bc30a6753f9d65aaf295a7be6f97bc9f5e15f5dcff6eca60c3c37ed015cd4e536c8acd688a2914e813a88ca2694d7b7be985f4e9df5605c14493a0ea5715b03db16571139f717b45fc7649020bd99e5ac537464762b5455a22a75815f733fc9b95cbfe300c6c94fbf59e8d9b910b88f2335bf40086e9a6e480ef773a115e73fbd43f985bcc5f16b4ef352edd22163b3a46b490d76039398a172fe490baef456bd225e5b4d1141a6e8642958b2525ab5f53319c8988862a290d26edeecab4f5ef399ec0014447434133e17fd424377352cff9a007fe5d3322592c226ed35411250f3a35f122677b0c6525d935fb79e3b1d1f98c17082c2a8c659b606041bbccadc7a52ac52d4dc1bbd3ed74a0c86be51189f969fa7517c251145d781d8149568472a5289bf63b243c98a28e972111bc9719e7a1377267f5d7af694c1eecf16aefdbbc2836a4f5fc0562c89cb3f696fda2aa1ed9321b7b2aa297bdaaec674070dfcaff079222b0f8df76b63385a3a790c04eab7685bfb048b3125ba46ab8217662183fff7216510886a8ca81b0c2fc7bf29ac2bf7be55dec67ad3dfc217b4e2ea2ca69a218a566977ad779ab373794931ceacf3887df0022db0c22a5c971b2d4a032412db1700b231efdfe33999b85004bdbebcf589e6022d6174c8605d97e370735ced2237b4fa705896fab96f1d4d8f2a82fe6d49c5b6347441afa3d59c063260e4bfb6c817abd60197ca48d886f74cd3b2133b61145378cb308c33ebc2dcb2027e883f376262be93a22c5ae80e7b50a9c5f3e83e492bd5bdb2f9578adf15a78151dc867aa9d11f42c92980abf9da548be2e79880afb6ad5ba8c215d95af0fa9d3508408cf71161d384f6c1a8423efdef5c0cbf700fd21cca2f5964952f20b0d5b1c13f0aed4985c6b9f0e0db8339d5ff81d29ded82c224d1a59b4d8c6833a3d681bd64eed60a3d8ede630080b0998f3da10a114ddeac0ca223f8f926b242028d8d8ff34f473fc187999be46c50aa507fc2651a49b16efb3fe653844e81f70e48b74479ba7a515121b3629a82c14b87dbbc696326cb4c9be356df066763730bb189de4b7e8a6c9e989d9a62f52f51fb667aac583e2bba3ba86f75b6f327e5eae5bfb2287fd64866b6e22ecf7663f709b19d7f08240b95875155c919902921cb434c24060fb6faf1281b46590f291a32c719124d083d519879f9cf2e9c67c4b7cedd8f396c5ccb73ec32f3ce9b98ab099a34d4b091081d22a6ab05ced63eaa852742e5cb2322539ca6f318cb76b0f8914e4fc538668a4bc47c5b7adeaff1323790c1053cec4c4218505b70dab7fb425d44c314de1ca18034b9698d2a7588be953e2e1a2d3d5d6ca377055c5334a0bf46ed45f6eaee54d271e741e0476683b6ccd47eba8680593ad987e8015fb3164121ba73af02cf9840cb240176794e65ab782e76def3ba8f42fa127d0a527fb19442b7a5125c3b81b71c61c3f9317d227a54207855c458f15ca91b8ba90f6e442ca3a9a2b43b0e8203a9db7e438b6759d36a669fbfb7bd1f7bed1e4b0e3837deb84c4e42ba6dccc5ea6e32d7be1bf5155b7b1787d0db64b41352304342a8b494b49769e219f04ebfd596a47865df90784aae8723740b13f3c7b0c5d206eedd518e534b1b2b24144ef7104ea04aa3ab8b587ae32bd63fe137aa8d8ea6dc25d78a45bd19775985eca3fa9ec113714a34a7f6e0924d03a0d62d0254b8af2a356cb385aef14aee8b3d107937d3d06af282545094f7ae8501d838da992ad821bbcaa059b54ea61ba708437d0b7f22368ec7e7b917a277d89ed8d9d6cfaa8801f62ae8f4e91939882cd2669ce41e0b773005c1b322d0469962a37b433fb5fda766822873f91785939e75c7ec9c906f10f7916652745bed1b6fb660d3255d3d19c54cb2e1af27cf02e6820aba5f44fd51769cabe96ad62c8d39f83864830bcd3ab34b4711c1f5c3df0e061eefbcc2a6fa36cf9a7e9a561c0a98c796268b79d248db428882fb4b072b9917a87b18058eec9617fe1dd2a06f223bda0e3f1f2b95f95accc5be2093f678df7c32cf23875ed4788d9c41149ba9b1c6e2b716e6d0b5e10de2dfb1901467fe95a9f350a9ffbe7e00741639adf1d71511ad90ac202aeb9ce0a37be69fe4bce6eb8b23fd56f4a5b6d1acfcd7ea7754e308f44b5bce66effded8a0a44feda", 0xfe0}], 0x1}, 0x40000)

2.176271445s ago: executing program 0 (id=1753):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x21}, 0x94)

2.156854427s ago: executing program 4 (id=1754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1c, 0x32, 0xb, 0x70bd27, 0xfffffffc, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2008010)

2.086164466s ago: executing program 0 (id=1755):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYRES8, @ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x82101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_config_ext={0x4, 0xa}, 0x828, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000009c0)=r3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deda8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1b2ef4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f53d709959d7bd2f5cc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36fb0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4a7bce853249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8012392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccaca8154b8601213ee2296d2a27798c8ce2a305c0c8d1acf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c04701563816514f868a2b95319abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdff7f0000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977e37df17a321d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2c6aea1d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb89243a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a01040000a35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92de6b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250054f84b0fccd4f810bce02322b489b79aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d4b8123de6516737be55c06d9cdcfb1e20280e14700eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b19128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dceedb2ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b2f53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9f56cd47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b1e6860c305d1faca4d6e4680ab6a6d491ecc97a904cc9c643e489d1a5f7d8a359bea93ba2d95bd3341d98d4918118e5f7b6fa6f603274c561f63ee337ad8d0017bbd1e17b5ce71a18c8572810029fe5d0ac2a661d8b346240c46f0223981cd53c067b65b579c144a4c918504888132a19a6a1702afb8646cf8fbcc5a4f5fbc072388f7bd7955138fc4919d78cfc5f2fd7dccf3a20896045698d2b6770773412029db69c099fda38be5f37adc5bd48f7f11b5632bb63fa18718c1a24e0bad8d21f51f6bf3fbd3786a00c4e8f8536f6af28c9b8cd210bc0e82112f9943fc0fa81c08e456983cbdd8d08053c128e122da8b7583cb1"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2f, 0xffffff99, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122c00631177fbac14030a44079f03fe8000ff80000000000000000008ffff3a050b038da1880b251810a59d943be3f4aed50ea5a6b8686731cb89ef77523c899b699eeaa0eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380)="b101000000353b", &(0x7f0000000000), 0x0, 0x700}, 0x2c)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50)

2.085600405s ago: executing program 4 (id=1756):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.151705819s ago: executing program 4 (id=1757):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.115122769s ago: executing program 0 (id=1758):
socket$kcm(0x2c, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xf0ff, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.042910326s ago: executing program 0 (id=1759):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x64, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x16, 0x1, "f102dcf29effae15cd649e6a6437eb61afd9"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)

1.042338114s ago: executing program 0 (id=1760):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)

134.885881ms ago: executing program 4 (id=1761):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080))

134.653525ms ago: executing program 3 (id=1762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002500010325bd7000fcffffff1100000008000300470000008aa970"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0d3}, 0x200040c4)

650.442µs ago: executing program 0 (id=1763):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

238.33µs ago: executing program 3 (id=1764):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, 0x0, 0xfc00)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x100000000000830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x8100000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e75ec99993ec99ada7e78a1a5c041aa5c67b5f4c521df13b70c69f24af89bfc7bfda1ec82849f2239c2a87355fb20bb9973157079e61ba229f2fef2e787ab79c3a2f6c15e78e540840259ab5af57d0b093269f1e29a00550ad34a78e27879291633060756450bf8c4dc3e39784dfc0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880), 0x4000000}, 0x20)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4048845}, 0x24000840)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x24)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000200)="80c1e27c7b45849846597484c50aaf497da91080596ed5468482fa0bec920dcc452c9268fb9e0d485d16413f3104a00b3bdb890000000000000000"}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r1})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc)
socket$nl_audit(0x10, 0x3, 0x9)

0s ago: executing program 4 (id=1765):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x81, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x69, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a5, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='svc_process\x00', r1, 0x0, 0x408}, 0x18)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000091401ff"], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000000f1402002abd7000fcdbdf2508000300030000000800030003b1caf8e712060000000800150045fd81620896ea010040e90000000008ce7ca4223f309fe0fb00d106d65b0d003934c506c904888cbdfcc0d2eedb824c1364814ed2a14ccadfda2a01fead3edb6377064828f9e5ad936a44cfa9885df4b986a7a30b34a406f4da1d9bd68be5fdb5ace720935b855b269f7844f71fa21f2044ee3143baf601a44663e7745de2d829d46d45a5ddd7"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5905' (ED25519) to the list of known hosts.
syzkaller login: [   48.237804][ T5740] cgroup: Unknown subsys name 'net'
[   48.350850][ T5740] cgroup: Unknown subsys name 'cpuset'
[   48.356866][ T5740] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.767619][ T5740] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.690560][ T5825] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.818457][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.821323][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.823917][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.827151][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.829785][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.939776][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.407715][ T5863] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.062648][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.065954][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.069150][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.071966][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.074575][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.092666][ T5204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.096476][ T5204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.102674][ T5204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.105589][ T5204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.108922][ T5204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.250042][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.253057][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.255699][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.259003][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.261655][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.415477][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   58.424312][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   58.585396][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.589294][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.591652][ T5872] bridge_slave_0: entered allmulticast mode
[   58.595020][ T5872] bridge_slave_0: entered promiscuous mode
[   58.613355][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.619310][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.622018][ T5872] bridge_slave_1: entered allmulticast mode
[   58.625819][ T5872] bridge_slave_1: entered promiscuous mode
[   58.630568][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.633283][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.635795][ T5870] bridge_slave_0: entered allmulticast mode
[   58.640125][ T5870] bridge_slave_0: entered promiscuous mode
[   58.644549][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.649552][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.652394][ T5870] bridge_slave_1: entered allmulticast mode
[   58.655738][ T5870] bridge_slave_1: entered promiscuous mode
[   58.705337][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.710947][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.720381][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.724975][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.770415][ T5870] team0: Port device team_slave_0 added
[   58.774650][ T5870] team0: Port device team_slave_1 added
[   58.791758][ T5872] team0: Port device team_slave_0 added
[   58.805101][ T5872] team0: Port device team_slave_1 added
[   58.842693][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.845437][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.855644][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.861906][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.864759][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.874293][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.878849][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   58.884982][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.887919][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.897703][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.901607][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.904062][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.914194][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.021037][ T5872] hsr_slave_0: entered promiscuous mode
[   59.023803][ T5872] hsr_slave_1: entered promiscuous mode
[   59.052369][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.054664][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.057847][ T5877] bridge_slave_0: entered allmulticast mode
[   59.061682][ T5877] bridge_slave_0: entered promiscuous mode
[   59.067545][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.070442][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.073363][ T5877] bridge_slave_1: entered allmulticast mode
[   59.077395][ T5877] bridge_slave_1: entered promiscuous mode
[   59.086072][ T5870] hsr_slave_0: entered promiscuous mode
[   59.089865][ T5870] hsr_slave_1: entered promiscuous mode
[   59.094185][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   59.097167][ T5870] Cannot create hsr debugfs directory
[   59.146651][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.164497][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.224454][ T5877] team0: Port device team_slave_0 added
[   59.233322][ T5877] team0: Port device team_slave_1 added
[   59.321346][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.324084][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.334698][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.363046][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.366004][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.375344][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.433257][ T5877] hsr_slave_0: entered promiscuous mode
[   59.435672][ T5877] hsr_slave_1: entered promiscuous mode
[   59.438373][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   59.440460][ T5877] Cannot create hsr debugfs directory
[   59.531495][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.568427][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.584830][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.603882][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.648087][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.668950][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.674053][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.689660][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.722271][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.728678][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.739683][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.745679][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.830398][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.864464][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   59.871651][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.884582][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.890340][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.892918][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.898789][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.901111][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.923295][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   59.939102][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   59.951585][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.954184][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.960415][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.962586][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.965997][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.968305][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.992601][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.994856][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.004062][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.168301][   T56] Bluetooth: hci1: command tx timeout
[   60.170923][   T56] Bluetooth: hci0: command tx timeout
[   60.215519][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.226064][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.270116][ T5870] veth0_vlan: entered promiscuous mode
[   60.275156][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.281964][ T5872] veth0_vlan: entered promiscuous mode
[   60.284878][ T5870] veth1_vlan: entered promiscuous mode
[   60.296842][ T5872] veth1_vlan: entered promiscuous mode
[   60.327731][ T5204] Bluetooth: hci2: command tx timeout
[   60.353589][ T5872] veth0_macvtap: entered promiscuous mode
[   60.356135][ T5877] veth0_vlan: entered promiscuous mode
[   60.360745][ T5870] veth0_macvtap: entered promiscuous mode
[   60.366037][ T5870] veth1_macvtap: entered promiscuous mode
[   60.374367][ T5872] veth1_macvtap: entered promiscuous mode
[   60.382802][ T5877] veth1_vlan: entered promiscuous mode
[   60.397738][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.413516][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.423991][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.433872][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.438425][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.441055][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.443730][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.451932][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.467054][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.474682][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.478629][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.493409][ T5877] veth0_macvtap: entered promiscuous mode
[   60.499268][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.516272][ T5877] veth1_macvtap: entered promiscuous mode
[   60.565957][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.595130][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.608183][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.611057][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.617853][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.629837][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.648409][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.652583][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.664773][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.677197][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.699840][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.702995][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.722950][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.729498][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.837459][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.846742][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.872186][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.874937][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.932576][ T5933] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   61.254783][ T5952] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.376245][    C0] hrtimer: interrupt took 379844 ns
[   62.039145][ T5989] netlink: 'syz.0.49': attribute type 1 has an invalid length.
[   62.160499][ T5204] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   62.262941][ T5204] Bluetooth: hci0: command tx timeout
[   62.267910][   T56] Bluetooth: hci1: command tx timeout
[   62.413860][ T5204] Bluetooth: hci2: command tx timeout
[   62.868677][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'.
[   64.067658][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'.
[   64.322812][ T6053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'.
[   64.328077][ T5204] Bluetooth: hci0: command tx timeout
[   64.330545][ T5204] Bluetooth: hci1: command tx timeout
[   64.346145][ T6051] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   64.487094][   T56] Bluetooth: hci2: command tx timeout
[   64.513737][ T6061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.476820][ T6098] netlink: 'syz.1.99': attribute type 5 has an invalid length.
[   65.731094][ T6107] sch_tbf: burst 4 is lower than device veth0_to_bridge mtu (1514) !
[   66.451602][   T56] Bluetooth: hci1: command tx timeout
[   66.454350][   T56] Bluetooth: hci0: command tx timeout
[   66.568208][ T5204] Bluetooth: hci2: command tx timeout
[   68.105853][ T6109] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.104'.
[   68.313013][ T6113] netlink: 'syz.0.106': attribute type 10 has an invalid length.
[   68.315514][ T6113] netlink: 55 bytes leftover after parsing attributes in process `syz.0.106'.
[   68.825589][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'.
[   68.829467][ T6125] openvswitch: netlink: Message has 8 unknown bytes.
[   69.092238][ T6130] netlink: 'syz.2.111': attribute type 10 has an invalid length.
[   69.095638][ T6130] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.111'.
[   69.448935][ T6146] bpf: Bad value for 'uid'
[   69.508285][ T6150] Zero length message leads to an empty skb
[   70.693424][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'.
[   70.697780][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'.
[   70.700974][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.129'.
[   70.846796][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'.
[   70.988206][ T6184] netlink: 'syz.1.136': attribute type 2 has an invalid length.
[   70.991119][ T6184] netlink: 12374 bytes leftover after parsing attributes in process `syz.1.136'.
[   71.582823][ T6217] =======================================================
[   71.582823][ T6217] WARNING: The mand mount option has been deprecated and
[   71.582823][ T6217]          and is ignored by this kernel. Remove the mand
[   71.582823][ T6217]          option from the mount to silence this warning.
[   71.582823][ T6217] =======================================================
[   71.699304][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.702721][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.111110][ T6235] netlink: 'syz.2.158': attribute type 10 has an invalid length.
[   72.113785][ T6235] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.158'.
[   72.979289][ T6267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.212833][ T6286] openvswitch: netlink: Duplicate or invalid key (type 0).
[   73.215867][ T6286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.480269][ T6303] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   73.663485][ T6312] __nla_validate_parse: 1 callbacks suppressed
[   73.663548][ T6312] netlink: 188 bytes leftover after parsing attributes in process `syz.1.195'.
[   73.872733][ T6323] netlink: 10 bytes leftover after parsing attributes in process `syz.0.199'.
[   73.919233][ T6329] netlink: 'syz.2.202': attribute type 1 has an invalid length.
[   73.922771][ T6329] netlink: 17231 bytes leftover after parsing attributes in process `syz.2.202'.
[   74.501160][ T6339] openvswitch: netlink: IP tunnel dst address not specified
[   74.519416][ T6334] syz.2.204 (6334) used greatest stack depth: 19432 bytes left
[   74.625078][ T6347] netlink: zone id is out of range
[   74.628833][ T6347] netlink: zone id is out of range
[   74.631483][ T6347] netlink: zone id is out of range
[   74.633859][ T6347] netlink: zone id is out of range
[   74.635942][ T6347] netlink: zone id is out of range
[   74.672609][ T6347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.209'.
[   74.779790][ T6355] netlink: 'syz.1.212': attribute type 6 has an invalid length.
[   74.918425][ T6368] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   74.920964][ T6368] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   75.392233][ T6377] netlink: 'syz.0.222': attribute type 21 has an invalid length.
[   75.395024][ T6377] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.222'.
[   75.742149][ T6397] netlink: 'syz.2.231': attribute type 10 has an invalid length.
[   75.768436][ T6397] team0: Port device dummy0 added
[   76.342032][ T6430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.247'.
[   77.031569][ T6465] netlink: 'syz.2.261': attribute type 7 has an invalid length.
[   77.034544][ T6465] netlink: 'syz.2.261': attribute type 8 has an invalid length.
[   79.954652][    T9] cfg80211: failed to load regulatory.db
[   82.268117][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1148075694 wd_nsec: 1148075849
[   83.069276][   T33] audit: type=1107 audit(1764087040.699:2): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='''
[   83.122124][ T6476] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.268'.
[   83.418046][ T6507] netlink: 'syz.2.283': attribute type 1 has an invalid length.
[   83.505721][ T5204] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   83.673583][ T6527] netlink: 'syz.0.288': attribute type 39 has an invalid length.
[   83.805748][ T6530] netlink: 'syz.2.291': attribute type 19 has an invalid length.
[   83.810084][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.291'.
[   84.028241][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[   84.031687][ T6534] netlink: 572 bytes leftover after parsing attributes in process `syz.1.292'.
[   84.404762][ T6542] netlink: 'syz.2.295': attribute type 6 has an invalid length.
[   84.457754][ T6546] net_ratelimit: 56 callbacks suppressed
[   84.457764][ T6546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.417487][ T6600] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   85.420656][ T6600] netlink: 'syz.1.320': attribute type 2 has an invalid length.
[   85.528346][ T6597] delete_channel: no stack
[   89.216039][ T5204] Bluetooth: hci2: ISO packet for unknown connection handle 255
[   89.593235][ T6626] netlink: 14 bytes leftover after parsing attributes in process `syz.1.330'.
[   90.513618][ T6632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.333'.
[   90.824755][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   90.828130][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'.
[   90.831047][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'.
[   90.872719][ T6654] netlink: 6 bytes leftover after parsing attributes in process `syz.0.343'.
[   92.344737][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'.
[   92.350273][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'.
[   92.360491][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'.
[   92.368706][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'.
[   93.193663][ T6707] netlink: 'syz.2.365': attribute type 8 has an invalid length.
[   94.579417][ T6748] veth0_vlan: entered allmulticast mode
[   94.750768][ T6752] __nla_validate_parse: 16 callbacks suppressed
[   94.750845][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'.
[   94.764729][ T6754] netlink: 64 bytes leftover after parsing attributes in process `syz.1.385'.
[   94.933539][ T6755] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.972659][ T6755] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   95.300330][ T6770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.391'.
[   95.340454][ T6774] netlink: 'syz.2.394': attribute type 29 has an invalid length.
[   95.345199][ T6774] netlink: 'syz.2.394': attribute type 29 has an invalid length.
[   95.531741][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[   95.582739][ T6787] netlink: 'syz.1.400': attribute type 25 has an invalid length.
[   95.586106][ T6787] netlink: 'syz.1.400': attribute type 7 has an invalid length.
[   95.810472][ T5204] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[   96.962515][ T6839] raw_sendmsg: syz.2.423 forgot to set AF_INET. Fix it!
[   97.066454][ T6847] netlink: 56 bytes leftover after parsing attributes in process `syz.1.428'.
[   97.115015][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.124810][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.131842][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.135536][ T6854] netlink: 'syz.0.430': attribute type 21 has an invalid length.
[   97.141451][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.496130][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'.
[   97.614496][ T6872] tmpfs: Bad value for 'mode'
[   97.650227][ T6874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.437'.
[   97.654105][ T6874] netlink: 51 bytes leftover after parsing attributes in process `syz.1.437'.
[   97.658616][ T6874] netlink: 'syz.1.437': attribute type 4 has an invalid length.
[   97.770465][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[   98.744667][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[   99.257298][ T6927] netlink: 'syz.1.459': attribute type 10 has an invalid length.
[   99.263546][ T6927] netlink: 'syz.1.459': attribute type 10 has an invalid length.
[   99.282650][ T6931] netlink: 'syz.0.461': attribute type 15 has an invalid length.
[   99.631413][ T6961] netlink: 'syz.0.475': attribute type 4 has an invalid length.
[   99.637486][ T6961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  100.068572][ T6982] netlink: zone id is out of range
[  100.070780][ T6982] netlink: del zone limit has 4 unknown bytes
[  100.093421][ T6984] netlink: 'syz.2.486': attribute type 10 has an invalid length.
[  100.096142][ T6984] __nla_validate_parse: 3 callbacks suppressed
[  100.103177][ T6984] netlink: 55 bytes leftover after parsing attributes in process `syz.2.486'.
[  101.192469][ T7017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.723932][ T7047] netlink: 52 bytes leftover after parsing attributes in process `syz.2.512'.
[  101.742165][ T7051] syz.1.514 uses obsolete (PF_INET,SOCK_PACKET)
[  102.307223][ T7088] syzkaller0: tun_chr_ioctl cmd 2147767506
[  102.321831][ T7086] syzkaller0: create flow: hash 1023553820 index 1
[  102.351266][ T5927] syzkaller0: tun_net_xmit 76
[  102.353274][ T5927] syzkaller0: tun_net_xmit 48
[  102.355131][ T7086] syzkaller0: delete flow: hash 1023553820 index 1
[  103.428407][ T7136] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[  103.722651][ T7138] netlink: 'syz.2.555': attribute type 6 has an invalid length.
[  103.725513][ T7138] netlink: 164 bytes leftover after parsing attributes in process `syz.2.555'.
[  104.091189][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'.
[  104.144688][ T7153] netlink: 104 bytes leftover after parsing attributes in process `syz.1.559'.
[  104.315213][ T7153] wg2: entered promiscuous mode
[  104.326403][ T7153] wg2: entered allmulticast mode
[  104.493577][ T7159] netlink: 'syz.2.563': attribute type 6 has an invalid length.
[  104.497117][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  104.530359][ T7163] netlink: 14 bytes leftover after parsing attributes in process `syz.2.564'.
[  104.581431][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.588712][ T7163] team0: Port device dummy0 removed
[  104.683807][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.568'.
[  104.806814][ T7184] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768
[  105.779379][ T7210] netlink: 'syz.1.584': attribute type 3 has an invalid length.
[  105.924784][ T7219] netlink: 'syz.1.587': attribute type 2 has an invalid length.
[  106.072244][ T7221] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  106.152238][ T7238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.597'.
[  106.257044][ T7246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.259911][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.266401][ T7246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.600'.
[  106.771513][ T5927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.849535][ T5927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.902861][ T5927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.958156][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.962587][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.964264][ T5927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.965342][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.973916][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.977366][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.977950][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.615'.
[  107.161994][ T7290] syzkaller1: tun_chr_ioctl cmd 1074025676
[  107.163889][ T7290] syzkaller1: owner set to 778
[  107.167815][ T5927] bridge_slave_1: left allmulticast mode
[  107.169742][ T5927] bridge_slave_1: left promiscuous mode
[  107.172584][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.180329][ T5927] bridge_slave_0: left allmulticast mode
[  107.182288][ T5927] bridge_slave_0: left promiscuous mode
[  107.184634][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.394687][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.399540][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.403040][ T5927] bond0 (unregistering): Released all slaves
[  107.415788][ T7276] chnl_net:caif_netlink_parms(): no params data found
[  107.539516][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.544051][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.549636][ T7276] bridge_slave_0: entered allmulticast mode
[  107.553045][ T7276] bridge_slave_0: entered promiscuous mode
[  107.566369][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.573386][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.581641][ T7276] bridge_slave_1: entered allmulticast mode
[  107.585237][ T7276] bridge_slave_1: entered promiscuous mode
[  107.590532][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  107.594253][ T7307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.626'.
[  107.677707][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.696321][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.723544][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'.
[  107.791557][ T7276] team0: Port device team_slave_0 added
[  107.802767][ T5204] Bluetooth: hci0: Unable to find connection for big 0x00
[  107.811273][ T7276] team0: Port device team_slave_1 added
[  107.852062][ T5927] hsr_slave_0: left promiscuous mode
[  107.854601][ T5927] hsr_slave_1: left promiscuous mode
[  107.860397][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.863004][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.875356][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.885342][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.902287][ T5927] veth1_macvtap: left promiscuous mode
[  107.904423][ T5927] veth0_macvtap: left promiscuous mode
[  109.164683][ T5204] Bluetooth: hci2: command tx timeout
[  109.224031][ T5927] team0 (unregistering): Port device team_slave_1 removed
[  109.238469][ T7342] netlink: 'syz.1.641': attribute type 6 has an invalid length.
[  109.241766][ T7342] netlink: 360 bytes leftover after parsing attributes in process `syz.1.641'.
[  109.268290][ T5927] team0 (unregistering): Port device team_slave_0 removed
[  109.521961][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.524209][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.533840][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.543298][  T976] infiniband syz0: ib_query_port failed (-19)
[  109.555438][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.560249][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.583280][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.668939][ T7276] hsr_slave_0: entered promiscuous mode
[  109.672202][ T7276] hsr_slave_1: entered promiscuous mode
[  109.675175][ T7276] debugfs: 'hsr0' already exists in 'hsr'
[  109.712353][ T7348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.863667][ T7276] Cannot create hsr debugfs directory
[  110.355481][ T7359] delete_channel: no stack
[  110.357683][ T7359] delete_channel: no stack
[  111.175312][ T7276] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.201981][ T7371] netlink: 220 bytes leftover after parsing attributes in process `syz.2.653'.
[  111.211467][ T5204] Bluetooth: hci2: command tx timeout
[  111.217879][ T7276] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  111.231620][ T7276] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  111.240669][ T7276] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  111.356516][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.396997][ T7276] 8021q: adding VLAN 0 to HW filter on device team0
[  111.402871][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.405289][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.425605][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.428459][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.710854][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.805687][ T7276] veth0_vlan: entered promiscuous mode
[  111.831338][ T7276] veth1_vlan: entered promiscuous mode
[  111.901978][ T7276] veth0_macvtap: entered promiscuous mode
[  111.918142][ T7276] veth1_macvtap: entered promiscuous mode
[  111.938478][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.950970][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.967550][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.970497][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.973344][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.298898][ T5204] Bluetooth: hci2: command tx timeout
[  114.341379][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.404743][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.410686][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.440142][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.442956][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.524720][ T7403] netlink: 'syz.0.661': attribute type 10 has an invalid length.
[  114.546689][ T7403] bridge0: port 3(netdevsim0) entered blocking state
[  114.549718][ T7403] bridge0: port 3(netdevsim0) entered disabled state
[  114.552224][ T7403] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  114.555052][ T7405] netlink: 'syz.1.662': attribute type 7 has an invalid length.
[  114.555733][ T7403] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  114.558877][ T7405] netlink: 176 bytes leftover after parsing attributes in process `syz.1.662'.
[  114.713706][ T7412] openvswitch: netlink: Key 22 has unexpected len 8 expected 4
[  114.934815][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  114.947245][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  115.134143][ T7439] netlink: 4416 bytes leftover after parsing attributes in process `syz.1.674'.
[  115.366700][ T5204] Bluetooth: hci2: command tx timeout
[  118.787265][ T7460] netlink: 'syz.1.682': attribute type 21 has an invalid length.
[  118.790469][ T7460] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.682'.
[  119.270755][ T7472] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[  119.273508][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'.
[  119.741131][ T7481] netlink: 152 bytes leftover after parsing attributes in process `syz.1.689'.
[  119.743985][ T7481] netlink: 6 bytes leftover after parsing attributes in process `syz.1.689'.
[  120.483168][ T7543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.331460][ T7568] netlink: 'syz.1.718': attribute type 27 has an invalid length.
[  121.334944][ T7568] netlink: 'syz.1.718': attribute type 4 has an invalid length.
[  121.338432][ T7568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.718'.
[  122.464132][ T7576] netlink: 'syz.0.726': attribute type 5 has an invalid length.
[  122.467619][ T7576] netlink: 'syz.0.726': attribute type 5 has an invalid length.
[  122.515335][ T7578] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[  123.357405][ T7611] netlink: zone id is out of range
[  123.359935][ T7611] netlink: zone id is out of range
[  123.362155][ T7611] netlink: zone id is out of range
[  123.364377][ T7611] netlink: zone id is out of range
[  123.367038][ T7611] netlink: zone id is out of range
[  123.369270][ T7611] netlink: zone id is out of range
[  123.371646][ T7611] netlink: zone id is out of range
[  123.373908][ T7611] netlink: zone id is out of range
[  123.376118][ T7611] netlink: zone id is out of range
[  124.439882][ T7625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.748'.
[  124.443837][ T7625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.748'.
[  124.490098][ T7629] lo speed is unknown, defaulting to 1000
[  124.493298][ T7629] lo speed is unknown, defaulting to 1000
[  124.511142][ T7629] lo speed is unknown, defaulting to 1000
[  124.620909][ T7629] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  124.843769][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  124.950233][ T7629] lo speed is unknown, defaulting to 1000
[  124.964459][ T7629] lo speed is unknown, defaulting to 1000
[  124.988014][ T7629] lo speed is unknown, defaulting to 1000
[  126.445009][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'.
[  126.474156][ T7701] netlink: 'syz.1.780': attribute type 1 has an invalid length.
[  126.892685][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'.
[  127.148279][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'.
[  127.343020][ T7744] netlink: 'syz.2.798': attribute type 10 has an invalid length.
[  127.345870][ T7744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.798'.
[  127.385514][ T7745] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.797'.
[  127.483451][ T7748] : renamed from wg2
[  127.720715][ T7753] net_ratelimit: 54 callbacks suppressed
[  127.720729][ T7753] openvswitch: netlink: Message has 4 unknown bytes.
[  128.868745][ T7805] netlink: 'syz.2.817': attribute type 1 has an invalid length.
[  129.156021][ T7812] xt_l2tp: v2 tid > 0xffff: 327812
[  129.934126][ T7825] netlink: 228 bytes leftover after parsing attributes in process `syz.1.825'.
[  130.263834][ T7833] bridge0: port 3(veth0_to_bridge) entered blocking state
[  130.271474][ T7833] bridge0: port 3(veth0_to_bridge) entered disabled state
[  130.278044][ T7833] veth0_to_bridge: entered allmulticast mode
[  130.287790][ T7833] veth0_to_bridge: entered promiscuous mode
[  130.290131][ T7833] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  130.296062][ T7833] bridge0: port 3(veth0_to_bridge) entered blocking state
[  130.299237][ T7833] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  132.443154][ T7886] netlink: 168 bytes leftover after parsing attributes in process `syz.1.855'.
[  132.491430][ T7888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.856'.
[  132.651957][ T7908] netlink: 3 bytes leftover after parsing attributes in process `syz.1.866'.
[  132.738374][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'.
[  132.742311][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.872'.
[  132.745148][ T7920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'.
[  133.129800][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  133.132908][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.445878][ T7948] delete_channel: no stack
[  133.798174][ T7976] netlink: 'syz.0.897': attribute type 10 has an invalid length.
[  133.803582][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.807539][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.813016][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.815670][ T7976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.818969][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.821426][ T7976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.830467][ T7976] team0: Port device bridge0 added
[  135.104032][ T8023] delete_channel: no stack
[  135.229761][ T8034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.360193][ T8044] siw: device registration error -23
[  136.625341][ T8056] netlink: 54775 bytes leftover after parsing attributes in process `syz.0.937'.
[  136.813750][ T8066] sit0: entered allmulticast mode
[  136.925349][ T8062] wg2: entered promiscuous mode
[  136.927617][ T8062] wg2: entered allmulticast mode
[  139.519830][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.943'.
[  139.524423][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.943'.
[  139.533087][ T8074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.943'.
[  139.609100][ T8078] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  139.709713][ T8083] netlink: 288 bytes leftover after parsing attributes in process `syz.2.947'.
[  140.634398][ T8117] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.964'.
[  141.061631][ T5204] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  141.061841][ T5204] Bluetooth: hci2: connection err: -111
[  141.191955][ T8152] netlink: 352 bytes leftover after parsing attributes in process `syz.0.980'.
[  141.465017][ T8155] netlink: 76 bytes leftover after parsing attributes in process `syz.0.981'.
[  141.468402][ T8155] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  141.749905][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.758388][ T8171] netlink: 'syz.0.987': attribute type 3 has an invalid length.
[  141.820013][ T8173] netlink: 6 bytes leftover after parsing attributes in process `syz.0.988'.
[  141.967466][   T33] audit: type=1107 audit(1764087099.599:3): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='">EW'=J!Rh%}<*/*ȅv'
[  142.470097][ T5204] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7
[  142.635023][ T8227] netlink: 'syz.0.1013': attribute type 1 has an invalid length.
[  142.754851][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'.
[  142.865119][ T5204] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  143.818585][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1031'.
[  144.075746][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'.
[  144.082398][ T8273] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1034'.
[  144.094172][ T8276] netlink: 'syz.2.1035': attribute type 10 has an invalid length.
[  144.101760][ T8276] geneve0: entered promiscuous mode
[  144.109813][ T8276] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  144.128242][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1035'.
[  144.278888][ T8282] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1037'.
[  144.286388][ T8282] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  144.507432][ T8289] C: renamed from team_slave_0 (while UP)
[  144.535055][ T8289] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1040'.
[  145.268588][ T8321] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  145.580831][ T8330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.594670][ T8330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.029873][ T8357] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1073'.
[  146.445095][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1077'.
[  147.148698][ T8377] __nla_validate_parse: 3 callbacks suppressed
[  147.148708][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'.
[  147.394343][ T8390] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  147.405778][ T8390] netlink: 'syz.0.1088': attribute type 10 has an invalid length.
[  147.425425][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.432992][ T8390] bridge_slave_1: left allmulticast mode
[  147.435290][ T8390] bridge_slave_1: left promiscuous mode
[  147.442762][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.494809][ T8390] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  147.638525][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1092'.
[  147.841590][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'.
[  147.848218][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'.
[  147.856867][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1095'.
[  147.913729][ T8408] netlink: 'syz.0.1096': attribute type 29 has an invalid length.
[  147.917461][ T8408] netlink: 'syz.0.1096': attribute type 3 has an invalid length.
[  147.919336][ T8400] netlink: 'syz.2.1093': attribute type 16 has an invalid length.
[  147.920679][ T8408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1096'.
[  147.949751][ T8400] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1093'.
[  148.073558][ T8400] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1093'.
[  148.082534][ T8400] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1093'.
[  148.144562][ T8400] netlink: 'syz.2.1093': attribute type 4 has an invalid length.
[  148.439332][ T8427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1104'.
[  148.627758][ T8436] netlink: 'syz.0.1109': attribute type 10 has an invalid length.
[  148.650467][ T8436] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  148.780527][ T8442] netlink: del zone limit has 4 unknown bytes
[  149.020005][ T8456] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  149.023187][ T8456] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  149.380809][ T8466] netlink: 'syz.2.1121': attribute type 21 has an invalid length.
[  149.469459][ T8474] wg0 speed is unknown, defaulting to 1000
[  149.472151][ T8474] wg0 speed is unknown, defaulting to 1000
[  149.475158][ T8474] wg0 speed is unknown, defaulting to 1000
[  149.502144][ T8474] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  149.555968][ T8474] wg0 speed is unknown, defaulting to 1000
[  149.568295][ T8474] wg0 speed is unknown, defaulting to 1000
[  149.573223][ T8474] wg0 speed is unknown, defaulting to 1000
[  149.891772][   T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.895848][   T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.898924][   T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.901973][   T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.905312][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.931200][ T8485] lo speed is unknown, defaulting to 1000
[  149.934907][ T8485] wg0 speed is unknown, defaulting to 1000
[  150.336645][ T8485] chnl_net:caif_netlink_parms(): no params data found
[  150.425578][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.428132][ T8485] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.430424][ T8485] bridge_slave_0: entered allmulticast mode
[  150.433058][ T8485] bridge_slave_0: entered promiscuous mode
[  150.436407][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.438819][ T8485] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.441113][ T8485] bridge_slave_1: entered allmulticast mode
[  150.443755][ T8485] bridge_slave_1: entered promiscuous mode
[  150.515883][ T8485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.525724][ T8485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.560655][ T8485] team0: Port device team_slave_0 added
[  150.566013][ T8485] team0: Port device team_slave_1 added
[  150.585986][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.588623][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.599168][ T8485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.603615][ T8485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.605838][ T8485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.622130][ T8485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.659031][ T8485] hsr_slave_0: entered promiscuous mode
[  150.666895][ T8485] hsr_slave_1: entered promiscuous mode
[  150.669421][ T8485] debugfs: 'hsr0' already exists in 'hsr'
[  150.671225][ T8485] Cannot create hsr debugfs directory
[  150.697012][ T8513] bpf: Bad value for 'gid'
[  150.727029][ T5875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.815800][ T5875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.862132][ T8485] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  150.868964][ T8485] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  150.874210][ T8485] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  150.879645][ T8485] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  150.902255][ T5875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.950385][ T8485] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.952853][ T8485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.955362][ T8485] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.957759][ T8485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.999930][ T5875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.049567][ T8485] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.065405][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.070179][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.081825][ T8485] 8021q: adding VLAN 0 to HW filter on device team0
[  151.127405][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.130308][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.158396][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.160799][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.179221][ T5875] veth0_to_bridge: left allmulticast mode
[  151.181552][ T5875] veth0_to_bridge: left promiscuous mode
[  151.183920][ T5875] bridge0: port 3(veth0_to_bridge) entered disabled state
[  151.265016][ T5875] bridge_slave_1: left allmulticast mode
[  151.268572][ T5875] bridge_slave_1: left promiscuous mode
[  151.270565][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.326471][ T5875] bridge_slave_0: left allmulticast mode
[  151.328367][ T5875] bridge_slave_0: left promiscuous mode
[  151.330392][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.599849][ T8559] netlink: 'syz.2.1156': attribute type 60 has an invalid length.
[  151.615232][ T8558] delete_channel: no stack
[  151.723145][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.730760][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.746564][ T5875] bond0 (unregistering): Released all slaves
[  151.794508][ T8485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.800177][ T8485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.926551][   T56] Bluetooth: hci3: command tx timeout
[  151.942125][ T8485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.975407][ T5875] hsr_slave_0: left promiscuous mode
[  151.980475][ T5875] hsr_slave_1: left promiscuous mode
[  151.985729][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.992929][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.003094][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.005499][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.015775][ T5875] veth1_macvtap: left promiscuous mode
[  152.032737][   T56] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  152.035418][ T5875] veth0_macvtap: left promiscuous mode
[  152.038334][ T5875] veth1_vlan: left promiscuous mode
[  152.338979][ T8580] netlink: 'syz.2.1163': attribute type 10 has an invalid length.
[  152.443355][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  152.470308][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  152.694548][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.697750][ T8580] team0: Port device bond0 added
[  152.716154][ T8485] veth0_vlan: entered promiscuous mode
[  152.722343][ T8485] veth1_vlan: entered promiscuous mode
[  152.744983][ T8485] veth0_macvtap: entered promiscuous mode
[  152.757251][ T8485] veth1_macvtap: entered promiscuous mode
[  152.765775][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.772735][ T8485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.785369][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.789685][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.807192][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.811042][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.860593][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.865270][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.883775][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.887721][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.980537][ T8584] netlink: 'syz.3.1128': attribute type 4 has an invalid length.
[  152.983784][ T8584] __nla_validate_parse: 5 callbacks suppressed
[  152.983793][ T8584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1128'.
[  154.006468][ T5204] Bluetooth: hci3: command tx timeout
[  154.063512][ T8596] netlink: ct family unspecified
[  154.065712][ T8596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.098149][ T5204] Bluetooth: hci1: command tx timeout
[  154.305670][ T8601] netlink: 'syz.3.1171': attribute type 29 has an invalid length.
[  154.312311][ T8601] netlink: 'syz.3.1171': attribute type 29 has an invalid length.
[  154.373637][ T8602] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1171'.
[  154.376881][ T8602] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  154.601967][ T8606] -: renamed from syzkaller0
[  154.686872][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  154.700949][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  154.741090][ T8609] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1174'.
[  154.744547][ T8609] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1174'.
[  154.749097][ T8609] netlink: 'syz.2.1174': attribute type 5 has an invalid length.
[  154.752482][ T8609] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1174'.
[  154.793604][ T8612] sch_fq: defrate 0 ignored.
[  156.088795][ T5204] Bluetooth: hci3: command tx timeout
[  157.695379][ T8623] IPv6: NLM_F_CREATE should be specified when creating new route
[  157.820324][ T8635] netlink: 'syz.0.1186': attribute type 1 has an invalid length.
[  158.186487][ T5204] Bluetooth: hci3: command tx timeout
[  158.480880][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1203'.
[  158.707698][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'.
[  158.851740][ T8690] netlink: 'syz.3.1213': attribute type 1 has an invalid length.
[  159.147857][ T8711] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1222'.
[  159.682910][ T8739] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1235'.
[  160.133037][ T5204] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  160.388634][ T8776] netlink: 'syz.2.1252': attribute type 1 has an invalid length.
[  160.393891][ T8776] netlink: 'syz.2.1252': attribute type 4 has an invalid length.
[  160.397685][ T8776] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1252'.
[  160.402278][ T8776] netlink: 'syz.2.1252': attribute type 1 has an invalid length.
[  160.405847][ T8776] netlink: 'syz.2.1252': attribute type 4 has an invalid length.
[  160.409442][ T8776] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1252'.
[  164.276393][ T5204] Bluetooth: hci1: unexpected subevent 0x10 length: 150 > 2
[  164.378259][ T8827] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1275'.
[  164.383023][ T8827] hsr_slave_0: left promiscuous mode
[  164.396880][ T8827] hsr_slave_1: left promiscuous mode
[  164.599494][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1276'.
[  164.787367][ T8856] netlink: 'syz.2.1287': attribute type 1 has an invalid length.
[  164.790089][ T8856] netlink: 'syz.2.1287': attribute type 3 has an invalid length.
[  164.792718][ T8856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1287'.
[  165.761391][ T8897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1303'.
[  166.231548][ T8935] netlink: 'syz.3.1310': attribute type 32 has an invalid length.
[  166.257474][ T8940] netlink: 'syz.0.1311': attribute type 2 has an invalid length.
[  166.579062][ T8990] netlink: 'syz.2.1315': attribute type 1 has an invalid length.
[  166.581932][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'.
[  166.634060][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'.
[  167.374375][ T5204] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  167.582691][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'.
[  167.606093][ T9029] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1331'.
[  168.587889][ T9056] bridge_slave_1: left allmulticast mode
[  168.590289][ T9056] bridge_slave_1: left promiscuous mode
[  168.592826][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.605375][ T9056] bridge_slave_0: left allmulticast mode
[  168.609189][ T9056] bridge_slave_0: left promiscuous mode
[  168.611201][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.181186][ T9071] netlink: 'syz.2.1348': attribute type 2 has an invalid length.
[  169.334812][ T9081] netlink: 'syz.3.1353': attribute type 2 has an invalid length.
[  169.337698][ T9085] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1355'.
[  169.339089][ T9081] netlink: 'syz.3.1353': attribute type 2 has an invalid length.
[  169.502615][ T9088] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1354'.
[  169.508114][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'.
[  169.596786][ T5204] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  169.686945][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'.
[  169.742865][ T9112] nbd: must specify an index to disconnect
[  171.086682][ T9159] netlink: 'syz.3.1387': attribute type 1 has an invalid length.
[  171.129148][ T9157] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  171.223397][ T9170] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1392'.
[  171.293857][ T9173] syzkaller0: tun_chr_ioctl cmd 1074812117
[  171.537515][ T9189] netlink: 'syz.3.1399': attribute type 1 has an invalid length.
[  172.839214][ T5204] Bluetooth: hci3: command tx timeout
[  174.352080][ T9206] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1408'.
[  174.476697][ T9211] netlink: 'syz.3.1407': attribute type 6 has an invalid length.
[  174.479409][ T9211] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1407'.
[  174.545284][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1409'.
[  174.670318][ T9223] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1414'.
[  174.675116][ T9223] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1414'.
[  174.775498][ T9232] delete_channel: no stack
[  174.947786][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'.
[  174.951368][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'.
[  176.068787][ T9284] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1440'.
[  176.134850][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'.
[  176.877518][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1451'.
[  177.167121][ T9313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.268778][ T9317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.493597][ T9327] delete_channel: no stack
[  177.495608][ T9327] delete_channel: no stack
[  178.872409][ T9369] netlink: 'syz.0.1480': attribute type 1 has an invalid length.
[  178.924974][ T9373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.147424][ T5204] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6
[  179.335842][ T9384] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1487'.
[  179.447910][ T9391] netlink: 'syz.3.1490': attribute type 10 has an invalid length.
[  179.450525][ T9391] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1490'.
[  179.613754][ T9405] siw: device registration error -23
[  179.621104][ T9405] lo speed is unknown, defaulting to 1000
[  180.490537][ T9421] netlink: 'syz.3.1503': attribute type 6 has an invalid length.
[  180.750262][ T9427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31
[  180.829956][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'.
[  180.832782][ T9429] netlink: 'syz.0.1507': attribute type 1 has an invalid length.
[  180.835151][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'.
[  180.915979][   T56] Bluetooth: hci2: Malformed Event: 0x02
[  181.287843][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  181.469871][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'.
[  181.542651][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'.
[  181.903793][ T9449] sock: sock_timestamping_bind_phc: sock not bind to device
[  182.053528][ T9454] bridge0: port 3(bond0) entered blocking state
[  182.057612][ T9454] bridge0: port 3(bond0) entered disabled state
[  182.061487][ T9454] bond0: entered allmulticast mode
[  182.063650][ T9454] bond_slave_0: entered allmulticast mode
[  182.065882][ T9454] bond_slave_1: entered allmulticast mode
[  182.082571][ T9454] bond0: entered promiscuous mode
[  182.085034][ T9454] bond_slave_0: entered promiscuous mode
[  182.095883][ T9454] bond_slave_1: entered promiscuous mode
[  182.103564][ T9454] bridge0: port 3(bond0) entered blocking state
[  182.106530][ T9454] bridge0: port 3(bond0) entered forwarding state
[  182.198352][ T9460] netlink: 'syz.3.1521': attribute type 29 has an invalid length.
[  182.746927][ T9473] netlink: 'syz.0.1527': attribute type 29 has an invalid length.
[  182.798706][ T9476] netlink: 'syz.0.1528': attribute type 21 has an invalid length.
[  183.140274][ T9480] netlink: 'syz.3.1530': attribute type 11 has an invalid length.
[  183.468095][ T9489] openvswitch: netlink: Message has -2 unknown bytes.
[  183.590787][ T9491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'.
[  183.600777][ T9491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'.
[  183.769059][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1536'.
[  183.889838][ T9502] option changes via remount are deprecated (pid=9501 comm=syz.3.1538)
[  184.108427][ T9507] syzkaller0: entered promiscuous mode
[  184.111018][ T9507] syzkaller0: entered allmulticast mode
[  185.224993][ T9513] virt_wifi0 speed is unknown, defaulting to 1000
[  185.227285][ T9513] virt_wifi0 speed is unknown, defaulting to 1000
[  185.229789][ T9513] virt_wifi0 speed is unknown, defaulting to 1000
[  185.238108][ T9513] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  185.248777][ T9513] virt_wifi0 speed is unknown, defaulting to 1000
[  185.251588][ T9513] virt_wifi0 speed is unknown, defaulting to 1000
[  185.254316][ T9513] virt_wifi0 speed is unknown, defaulting to 1000
[  185.401049][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'.
[  185.411964][ T9528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1548'.
[  185.669103][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'.
[  186.702900][ T9567] __nla_validate_parse: 1 callbacks suppressed
[  186.702922][ T9567] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1567'.
[  187.834685][ T9594] netlink: 'syz.3.1577': attribute type 39 has an invalid length.
[  188.069363][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'.
[  188.408962][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'.
[  188.479062][ T9614] netlink: 'syz.0.1587': attribute type 288 has an invalid length.
[  188.770862][ T9622] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1591'.
[  189.055653][ T9630] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1595'.
[  189.069843][ T9632] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1596'.
[  190.080365][ T9673] netlink: 'syz.0.1614': attribute type 2 has an invalid length.
[  190.083654][ T9673] netlink: 'syz.0.1614': attribute type 2 has an invalid length.
[  191.974976][   T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.979253][   T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.982324][   T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.985780][   T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.989813][   T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.174366][ T9686] lo speed is unknown, defaulting to 1000
[  193.181531][ T9686] wg0 speed is unknown, defaulting to 1000
[  193.185620][ T9686] virt_wifi0 speed is unknown, defaulting to 1000
[  193.269923][ T9692] netlink: 'syz.3.1621': attribute type 1 has an invalid length.
[  193.346307][ T9696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1622'.
[  193.363084][ T9700] macvtap0: refused to change device tx_queue_len
[  193.379333][ T9686] chnl_net:caif_netlink_parms(): no params data found
[  193.424499][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'.
[  193.475464][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.480652][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.482985][ T9686] bridge_slave_0: entered allmulticast mode
[  193.485821][ T9686] bridge_slave_0: entered promiscuous mode
[  193.500639][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.503023][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.505599][ T9686] bridge_slave_1: entered allmulticast mode
[  193.516035][ T9713] netlink: 'syz.0.1628': attribute type 10 has an invalid length.
[  193.530804][ T9686] bridge_slave_1: entered promiscuous mode
[  193.561920][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.566790][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.587812][ T9686] team0: Port device team_slave_0 added
[  193.591615][ T9686] team0: Port device team_slave_1 added
[  193.612136][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.614900][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.625914][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.630408][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.632604][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.641757][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.707214][ T9686] hsr_slave_0: entered promiscuous mode
[  193.709728][ T9686] hsr_slave_1: entered promiscuous mode
[  193.718684][ T9686] debugfs: 'hsr0' already exists in 'hsr'
[  193.720539][ T9686] Cannot create hsr debugfs directory
[  193.807889][ T9728] netlink: 'syz.0.1635': attribute type 1 has an invalid length.
[  193.923180][ T9686] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  193.929393][ T9686] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  193.938539][ T9686] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  193.948157][ T9686] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  193.965687][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.968478][ T9686] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.970862][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.973086][ T9686] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.006701][ T5204] Bluetooth: hci0: command tx timeout
[  194.028665][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.038932][  T143] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.042127][  T143] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.052346][ T9686] 8021q: adding VLAN 0 to HW filter on device team0
[  194.060404][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.062899][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.072992][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.075342][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.175747][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'.
[  194.243523][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.364587][ T9686] veth0_vlan: entered promiscuous mode
[  194.372368][ T9686] veth1_vlan: entered promiscuous mode
[  194.391714][ T9686] veth0_macvtap: entered promiscuous mode
[  194.396044][ T9686] veth1_macvtap: entered promiscuous mode
[  194.408817][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.415674][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.425432][ T5927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.432491][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.437518][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.440817][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.495747][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.499745][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.519755][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.522305][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.561935][ T9771] netlink: 'syz.4.1619': attribute type 46 has an invalid length.
[  194.564945][ T9771] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1619'.
[  194.570420][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.570494][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.759477][ T9778] netlink: 'syz.4.1647': attribute type 3 has an invalid length.
[  194.805770][ T9780] : renamed from bond_slave_0 (while UP)
[  194.874798][ T9785] netlink: 'syz.4.1650': attribute type 21 has an invalid length.
[  194.878261][ T9785] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1650'.
[  194.973571][ T9790] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1653'.
[  194.981593][ T9790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1653'.
[  195.013166][ T9794] openvswitch: netlink: Key type 233 is out of range max 32
[  195.044662][ T9796] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1656'.
[  195.350611][ T9817] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  195.351418][ T9819] netlink: 'syz.4.1665': attribute type 21 has an invalid length.
[  195.359399][ T9819] IPv6: NLM_F_CREATE should be specified when creating new route
[  195.418229][ T9822] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1667'.
[  195.581448][ T9838] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1672'.
[  195.698058][ T9844] netlink: 'syz.4.1675': attribute type 21 has an invalid length.
[  196.086398][ T5204] Bluetooth: hci0: command tx timeout
[  196.421289][ T9875] netlink: 'syz.3.1688': attribute type 21 has an invalid length.
[  196.612879][ T9887] syzkaller0: entered promiscuous mode
[  196.614711][ T9887] syzkaller0: entered allmulticast mode
[  196.628436][ T9887] syzkaller0: create flow: hash 722969308 index 1
[  196.710162][ T5927] syzkaller0: tun_net_xmit 48
[  196.792496][ T9886] syzkaller0: delete flow: hash 722969308 index 1
[  197.619210][ T9911] netlink: 'syz.3.1705': attribute type 30 has an invalid length.
[  198.166826][ T5204] Bluetooth: hci0: command tx timeout
[  198.320057][ T9915] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.324683][ T9915] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  200.256310][ T5204] Bluetooth: hci0: command tx timeout
[  201.419560][   T51] wg0 speed is unknown, defaulting to 1000
[  201.422169][   T51] syz0: Port: 1 Link DOWN
[  201.467701][ T5927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.575067][ T9944] xt_HMARK: spi-set and port-set can't be combined
[  201.577988][ T5927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.592619][ T9946] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  201.662846][ T5927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.678871][   T13] tipc: Subscription rejected, illegal request
[  201.770869][ T5927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.882510][ T9962] netlink: 'syz.0.1728': attribute type 6 has an invalid length.
[  201.885164][ T9962] netlink: 'syz.0.1728': attribute type 23 has an invalid length.
[  201.888642][ T9962] IPv6: NLM_F_CREATE should be specified when creating new route
[  202.377209][ T9977] netlink: 'syz.3.1733': attribute type 13 has an invalid length.
[  202.383385][ T9977] netlink: 'syz.3.1733': attribute type 17 has an invalid length.
[  202.438535][ T5927] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  203.154710][ T5927] team0: Port device bond0 removed
[  203.173461][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.190017][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.198100][ T5927] bond0 (unregistering): Released all slaves
[  203.426413][ T9977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.470281][T10002] __nla_validate_parse: 4 callbacks suppressed
[  203.470294][T10002] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1740'.
[  203.664600][T10009] netlink: 294 bytes leftover after parsing attributes in process `syz.4.1743'.
[  203.668243][T10009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.288113][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1747'.
[  204.612880][ T5927] hsr_slave_0: left promiscuous mode
[  204.697251][ T5927] hsr_slave_1: left promiscuous mode
[  205.055352][ T5927] veth1_macvtap: left promiscuous mode
[  205.067517][ T5927] veth0_macvtap: left promiscuous mode
[  205.079267][ T5927] veth1_vlan: left promiscuous mode
[  205.082183][ T5927] veth0_vlan: left promiscuous mode
[  205.223686][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'.
[  205.391766][T10035] netlink: 'syz.4.1754': attribute type 1 has an invalid length.
[  206.362788][T10042] netlink: 'syz.4.1757': attribute type 16 has an invalid length.
[  206.365946][T10042] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1757'.
[  206.610493][ T5927] team0 (unregistering): Port device team_slave_1 removed
[  206.656984][ T5927] team0 (unregistering): Port device team_slave_0 removed
[  207.308022][ T5895] lo speed is unknown, defaulting to 1000
[  207.311835][ T5895] infiniband syz1: ib_query_port failed (-19)
[  207.597813][T10058] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1764'.
[  207.600561][ T5927] ------------[ cut here ]------------
[  207.603367][ T5927] WARNING: CPU: 0 PID: 5927 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0
[  207.607847][ T5927] Modules linked in:
[  207.609633][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  207.613404][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.618941][ T5927] Workqueue: netns cleanup_net
[  207.621249][ T5927] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  207.623518][ T5927] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 7a 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 5e 1a f8 e8 a4 57 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 57 d4 f7 90 0f 0b 90 e9 60 fe ff ff
[  207.631488][ T5927] RSP: 0018:ffffc90005257878 EFLAGS: 00010293
[  207.633444][ T5927] RAX: ffffffff89ebaf3c RBX: ffff888172174900 RCX: ffff88816b241d00
[  207.636730][ T5927] RDX: 0000000000000000 RSI: ffffffff8d8f5dfe RDI: ffff88816b241d00
[  207.639284][ T5927] RBP: ffffc90005257990 R08: ffffffff8f7cf077 R09: 1ffffffff1ef9e0e
[  207.639340][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1767'.
[  207.641784][ T5927] R10: dffffc0000000000 R11: fffffbfff1ef9e0f R12: ffffffff8f3c7040
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  207.641802][ T5927] R13: 1ffff92000a4af3c R14: ffff888172175dc0 R15: dffffc0000000000
[  207.641807][ T5927] FS:  0000000000000000(0000) GS:ffff88818eb38000(0000) knlGS:0000000000000000
[  207.641813][ T5927] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  207.641818][ T5927] CR2: 000055559087a5c8 CR3: 00000001732ac000 CR4: 00000000000006f0
[  207.641847][ T5927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  207.641854][ T5927] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  207.641859][ T5927] Call Trace:
[  207.641865][ T5927]  <TASK>
[  207.668389][ T5927]  xfrm_net_exit+0x2d/0x70
[  207.669819][ T5927]  ops_undo_list+0x49a/0x990
[  207.671338][ T5927]  ? __pfx_ops_undo_list+0x10/0x10
[  207.672936][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  207.675012][ T5927]  cleanup_net+0x4d8/0x820
[  207.676863][ T5927]  ? __pfx_cleanup_net+0x10/0x10
[  207.678522][ T5927]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.680200][ T5927]  ? process_scheduled_works+0x9ef/0x17b0
[  207.682041][ T5927]  ? process_scheduled_works+0x9ef/0x17b0
[  207.683844][ T5927]  process_scheduled_works+0xae1/0x17b0
[  207.685951][ T5927]  ? __pfx_process_scheduled_works+0x10/0x10
[  207.689483][ T5927]  worker_thread+0x8a0/0xda0
[  207.691336][ T5927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  207.693867][ T5927]  ? __kthread_parkme+0x7b/0x200
[  207.695874][ T5927]  kthread+0x711/0x8a0
[  207.697914][ T5927]  ? __pfx_worker_thread+0x10/0x10
[  207.699956][ T5927]  ? __pfx_kthread+0x10/0x10
[  207.701837][ T5927]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.703924][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.706041][ T5927]  ? __pfx_kthread+0x10/0x10
[  207.708367][ T5927]  ret_from_fork+0x4bc/0x870
[  207.710211][ T5927]  ? __pfx_ret_from_fork+0x10/0x10
[  207.712242][ T5927]  ? __switch_to_asm+0x39/0x70
[  207.714196][ T5927]  ? __switch_to_asm+0x33/0x70
[  207.715915][ T5927]  ? __pfx_kthread+0x10/0x10
[  207.717660][ T5927]  ret_from_fork_asm+0x1a/0x30
[  207.719629][ T5927]  </TASK>
[  207.720820][ T5927] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  207.723724][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  207.727746][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.731638][ T5927] Workqueue: netns cleanup_net
[  207.733510][ T5927] Call Trace:
[  207.734720][ T5927]  <TASK>
[  207.735859][ T5927]  dump_stack_lvl+0x99/0x250
[  207.737599][ T5927]  ? __asan_memcpy+0x40/0x70
[  207.739194][ T5927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.740897][ T5927]  ? __pfx__printk+0x10/0x10
[  207.742451][ T5927]  vpanic+0x237/0x6d0
[  207.743772][ T5927]  ? __pfx_vpanic+0x10/0x10
[  207.745289][ T5927]  panic+0xb9/0xc0
[  207.746568][ T5927]  ? __pfx_panic+0x10/0x10
[  207.748256][ T5927]  __warn+0x31b/0x4b0
[  207.749565][ T5927]  ? xfrm_state_fini+0x26d/0x2f0
[  207.751199][ T5927]  ? xfrm_state_fini+0x26d/0x2f0
[  207.752801][ T5927]  report_bug+0x2be/0x4f0
[  207.754220][ T5927]  ? xfrm_state_fini+0x26d/0x2f0
[  207.755879][ T5927]  ? xfrm_state_fini+0x26d/0x2f0
[  207.757660][ T5927]  ? xfrm_state_fini+0x26f/0x2f0
[  207.759567][ T5927]  handle_bug+0x84/0x160
[  207.761130][ T5927]  exc_invalid_op+0x1a/0x50
[  207.762681][ T5927]  asm_exc_invalid_op+0x1a/0x20
[  207.764273][ T5927] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  207.766095][ T5927] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 7a 3a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 5e 1a f8 e8 a4 57 d4 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 57 d4 f7 90 0f 0b 90 e9 60 fe ff ff
[  207.773669][ T5927] RSP: 0018:ffffc90005257878 EFLAGS: 00010293
[  207.776243][ T5927] RAX: ffffffff89ebaf3c RBX: ffff888172174900 RCX: ffff88816b241d00
[  207.779535][ T5927] RDX: 0000000000000000 RSI: ffffffff8d8f5dfe RDI: ffff88816b241d00
[  207.782763][ T5927] RBP: ffffc90005257990 R08: ffffffff8f7cf077 R09: 1ffffffff1ef9e0e
[  207.785946][ T5927] R10: dffffc0000000000 R11: fffffbfff1ef9e0f R12: ffffffff8f3c7040
[  207.789181][ T5927] R13: 1ffff92000a4af3c R14: ffff888172175dc0 R15: dffffc0000000000
[  207.792514][ T5927]  ? xfrm_state_fini+0x26c/0x2f0
[  207.794653][ T5927]  ? xfrm_state_fini+0x26c/0x2f0
[  207.796739][ T5927]  xfrm_net_exit+0x2d/0x70
[  207.798647][ T5927]  ops_undo_list+0x49a/0x990
[  207.800664][ T5927]  ? __pfx_ops_undo_list+0x10/0x10
[  207.802689][ T5927]  ? do_raw_spin_unlock+0x4d/0x240
[  207.804769][ T5927]  cleanup_net+0x4d8/0x820
[  207.806593][ T5927]  ? __pfx_cleanup_net+0x10/0x10
[  207.808686][ T5927]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.810867][ T5927]  ? process_scheduled_works+0x9ef/0x17b0
[  207.813300][ T5927]  ? process_scheduled_works+0x9ef/0x17b0
[  207.815698][ T5927]  process_scheduled_works+0xae1/0x17b0
[  207.818056][ T5927]  ? __pfx_process_scheduled_works+0x10/0x10
[  207.820652][ T5927]  worker_thread+0x8a0/0xda0
[  207.822632][ T5927]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  207.825260][ T5927]  ? __kthread_parkme+0x7b/0x200
[  207.826881][ T5927]  kthread+0x711/0x8a0
[  207.828236][ T5927]  ? __pfx_worker_thread+0x10/0x10
[  207.829876][ T5927]  ? __pfx_kthread+0x10/0x10
[  207.831367][ T5927]  ? _raw_spin_unlock_irq+0x23/0x50
[  207.833074][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.834728][ T5927]  ? __pfx_kthread+0x10/0x10
[  207.836247][ T5927]  ret_from_fork+0x4bc/0x870
[  207.837789][ T5927]  ? __pfx_ret_from_fork+0x10/0x10
[  207.839494][ T5927]  ? __switch_to_asm+0x39/0x70
[  207.841107][ T5927]  ? __switch_to_asm+0x33/0x70
[  207.842674][ T5927]  ? __pfx_kthread+0x10/0x10
[  207.844164][ T5927]  ret_from_fork_asm+0x1a/0x30
[  207.845693][ T5927]  </TASK>
[  207.847404][ T5927] Kernel Offset: disabled
[  207.849142][ T5927] Rebooting in 86400 seconds..
