last executing test programs:

3.602282986s ago: executing program 2 (id=1423):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) (async)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmsg(r1, &(0x7f00000013c0)={&(0x7f0000000d00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000d80)=""/249, 0xf9}, {&(0x7f0000000e80)=""/166, 0xa6}, {&(0x7f0000000f40)=""/152, 0x98}, {&(0x7f0000001000)=""/248, 0xf8}, {&(0x7f0000001100)=""/91, 0x5b}, {&(0x7f0000001180)=""/28, 0x1c}, {&(0x7f00000011c0)=""/104, 0x68}, {&(0x7f0000001240)=""/164, 0xa4}], 0x8, &(0x7f0000001380)=""/10, 0xa}, 0x2000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6800000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x6c}}, 0x20000881)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2)
close(r3)
close(r0)

3.480956056s ago: executing program 2 (id=1424):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x8, 0x32, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

3.467754734s ago: executing program 2 (id=1426):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x28, 0x6, 0x28, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000e40)="2470c9f3a7d4c01ed9431e23c4b8a4582a713e7e3b70909812594b3cbd85754d31d19527426ef56d9845e8f3fec93dca2c89308321949eda2e2679f4d6c4e23d8946fc714d9bd5b1cb2a7d2dce37faa890eacaffe7dc746bddc4f78b10728105d8ccb1d389300f48be3f116447d4829aca06a51390fa357f9fe1377f6eaa1aa52edaa09d280511c1d2756e3fb482f2c5af3f19f23d0d64efeec212406bcc83159a073a36bf0189a61026ee9099a489b6043c3039fc40504b429c", 0xba}, {&(0x7f0000000f00)="2348f033a754afa64f53e559a84f37c0838dd998915fdb433c78638255b2bef8789fff7d93c3913b1435570b599f4038e871a087982ada9a09b79847a4c6ffc6641ea4fa57c9750c1deaba34a9e9f5fb61dd22ba357818354c13c8afa794c51c8d1c88e196836374bf77ca3b650e0cc411d852b89694b72cdc99737ad2e7b1a7e15f0a9b4f8384ca1a9d256081", 0x8d}, {&(0x7f0000000780)="01109cceb963c96bc2b5920e230ec2cf21b24c84ca639ef76fe5149229ed035ba244c5b7b2267b12462635e0ed235e6867aa7155836cbab28c8d0a8806be4a1ee1c95675df6f814260b8166331fe1e74f9508ee1641065e73dc55c4b628c29a6a72b0e4ec222e580b0ead7783dec464f388373dbb7d9a97dfbc41c9da11f000ba6f2d94c1016c9df5d18", 0x8a}, {&(0x7f0000000280)="0497e0a7edc463c0de6381bcd32d4e49726df8f70c23f3de7095d3b8a254433c5c54fcf4bb2b063a36a307c51b7c231213", 0x31}, {&(0x7f0000000840)="175eae3c8cb6cfa9be99077b27d1f519940bc9cb1527fdb7102dfff9a94ea6493e22573b9cc6fe878721da7646d69bf582fbe1abcd2c4fb30d0e7d76e0f0b299a7ebf0b68facc7c0140f77901d8af186b1699af9a7a23eef332458a21b6654a95c8ab463363197e06cb2cc2ad8bb4f5ce110e08846866b737512977bc7e8b1c9bdf6959b0ce1e43e47ce7cd775b27cdd68300012856c441be552d44382cdd14a71e71795aca2c936e3256bc1232aff57ce2fc4c65d7f5fe1461325888a6ce4dfd6742a4a87474a0421f55db2624ace1825d90389b106909799cfc72672a4bbf0e64570a0354bfc5e9da6973812", 0xed}, {&(0x7f00000009c0)="d176aaf65a5870facbc7c40c2f0429bc13946f245dfb5cac1e46edae07a1b6e6de4a0502ec3306238e184257b3e75482f22c9d28a65863761b9282b1b8a2c74549bbb61acdd8da34de937a7ab67ebf0d9609940b866835074b55b24475a754d13ea142b92b9bcab17a49b9618518ebcea96b9f1311ddef52b7e3cbed6838f370313d2138c7abf10eaaa818db369ccd28ae99a7743f736304e7efe47f2c6fc910d358451920d7fb8264a850fe8e00b48c7937e963dbf12ef9aef375e20651ef8497f6b17b33a311af4b754f58c47ecc441d85e1eb4170c58516270048e7f2", 0xde}], 0x6, 0x0, 0x0, 0x7a000000}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x3, 0x1, 0x3fd, 0x7fffffff}, 0x0, 0xf, r0, 0xa)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x4, 0xb}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x84, 0x18, &(0x7f0000000000), 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="188000000000000000000000002c886f328500e6f45049000089c08200009ca1c44d477de7001e0210a611e0aee482c319364902b92db106ef5a05429b000000"], &(0x7f0000000980)='GPL\x00', 0xc7, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x42, 0x0, 0x0, 0x9, 0x3fe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8000000000000004}, 0x0, 0x5, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1eb, 0x10001}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000100000000eb3b59113886bdefe6df4a43847f710100000000000095", @ANYRES16=r3, @ANYRESDEC=r1, @ANYRESDEC=r1], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfd, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x1, 0x8, 0x2, 0x9, 0x8, 0x4, 0x4, 0x8d, 0x7, 0x6, 0x4, 0x7, 0x6000000, 0x6, 0x1, 0x2, 0x8, 0x1, 0x2d7f, 0xffff12a3, 0x3, 0xffffffff, 0xe000, 0x5, 0x3ff, 0x0, 0x1e5, 0x0, 0xd6, 0x3, 0x5, 0x6, 0xb, 0x10, 0x8001, 0x10, 0xdc, 0x0, 0x401, 0x0, 0x3, 0x4be4e83a, 0x2, 0xec, 0x8, 0x3b, 0x8, 0x7fff, 0x1, 0x9d, 0x8, 0x4, 0x5, 0x3, 0x2, 0x3, 0x9, 0x5, 0x9, 0x4, 0x10001, 0xfffff948, 0x43b5, 0x9, 0x101, 0x0, 0x9841, 0x5, 0x1, 0x7, 0xf, 0x401, 0x2, 0xfff, 0x6, 0x7, 0x0, 0x22, 0x67d0, 0x6, 0x2, 0x8001, 0x9, 0x0, 0x10000, 0x2, 0x10, 0x48, 0xf0, 0x1c3, 0xac23, 0x0, 0x5, 0xd, 0x5, 0xc0, 0x100, 0x0, 0x40, 0x9, 0x957, 0x0, 0x7, 0x4, 0x5, 0x0, 0x80000000, 0xfffffff4, 0x1ff, 0x0, 0x8, 0x6, 0x2, 0x1, 0x400, 0xfffffffe, 0x2, 0x5, 0x231f7c56, 0x6, 0x6, 0x3, 0x3, 0x0, 0x4cb1, 0x3, 0xfffffff7, 0x9, 0x7, 0xfffffffc, 0x20000000, 0xd, 0xb95, 0x80000000, 0xc6, 0x7, 0xce, 0x8, 0x7, 0xa141, 0x6, 0xdd2, 0xe05, 0x3, 0xfffffffa, 0x10b39f1b, 0x1, 0x1d8d, 0x38e8, 0xffff7fff, 0xfffffff4, 0xfffffffc, 0x1, 0x9, 0x8, 0x3e5, 0xffffffff, 0xfffffff8, 0x8, 0x1, 0xe3a5, 0x2, 0x1c00, 0xa416, 0x2, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x40, 0x856, 0x6, 0x7, 0x3, 0xfffffff7, 0x6, 0x1ff, 0x9, 0x200, 0x1, 0x9, 0x8, 0xfffffffb, 0xfffffffc, 0x51, 0x2, 0x9, 0x6, 0x1, 0x401, 0x3, 0xf, 0x7, 0x5, 0x80000001, 0x8, 0x4, 0x11bca77f, 0x7ff, 0x1000, 0x3, 0x800, 0x2, 0x10, 0x1, 0x2, 0x0, 0x3, 0x5, 0x4, 0x2, 0x5, 0xd, 0xad, 0x3, 0x2, 0x9, 0xffffffff, 0x4b6, 0xaf88, 0x9, 0x2, 0x6, 0x7, 0x3, 0x8, 0x9, 0x10001, 0xac7, 0x7f, 0x1, 0x7, 0x1, 0xffff, 0x1000, 0x2, 0x9, 0x7fffffff, 0x606, 0x9, 0x81, 0x2, 0x4, 0x6, 0x4, 0x0, 0x2299, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x80000008, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x7, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xa, 0x2, 0xfffffffa, 0x200, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x9, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x7fffffff, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8002, 0xf0000000, 0x8, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x2, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x3, 0x4, 0x8, 0x0, {0x8, 0x0, 0x6, 0x1, 0x1, 0x5}, {0xe, 0x0, 0x1000, 0xde4e, 0x0, 0x6}, 0x1, 0x400, 0x6d}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0x144}}, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x206002, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r8})
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)

3.272255739s ago: executing program 2 (id=1429):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x8}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, &(0x7f0000000200)={[{@gid}, {@uid={'uid', 0x3d, 0xee01}}]}) (async)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, &(0x7f0000000200)={[{@gid}, {@uid={'uid', 0x3d, 0xee01}}]})
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.126734978s ago: executing program 2 (id=1432):
r0 = socket$kcm(0xa, 0x2, 0x73)
close(r0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x808, 0x10001}, 0x0, 0x9, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000009e00)={0x0, 0x0, &(0x7f0000009dc0)={&(0x7f0000009a00)={0x14, 0x36, 0x201, 0x70bd27, 0x25dfdbff, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40040)
mkdir(&(0x7f0000000140)='./file0\x00', 0xd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.859615768s ago: executing program 2 (id=1436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8942, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000301010100000000000000000200000910001700060000000000000000000000040019805d2c4490e49d29fb296149a4d0788adbece54c793e995f9592d4330bba84f8b492c9feaa05f7181c9aecac29c1f2806fffb54828d35b"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = getpid()
r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28}, 0x28)

2.670367817s ago: executing program 1 (id=1439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="30000000000000000000000000050000"], 0x10}, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000010000000000ac1414aa00000000000005000000000a0000ddb92da8596905e8cc18221ab9c2d676383bf53570f799691b25312291c116fb820ecb6cabdd516d8ed06418bfb068f75adaf26144b4dc4dd205550d241823045887935f01efe32945cb708933d97bd527758322941eb9996642a7b49b7a862b03ec49fa463ab89a1ade8fd7b586c68cf25c7d8f66502ac8f14663e0444c0b89a0e201809ddce895f9717e0875db1fc72b221e6d9015742c3014b7a88dd018b9bde49617b2ef1f08470000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33030009020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000800"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x60)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x1c1)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x305, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000810)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, 'wg1\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, '}#-\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x2000001efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x2, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wg1\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8927, &(0x7f0000000080))

1.942286354s ago: executing program 0 (id=1441):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async, rerun: 32)
r0 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x2bd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x6, 0x6, 0xc7e14cde375b0671, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x100800, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x10000)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x15)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x10) (async, rerun: 32)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)="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", 0x2ec}, {&(0x7f0000002b40)="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", 0x1fd}], 0x2}, 0x8400) (async, rerun: 32)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x10a}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24004090) (async)
r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
perf_event_open(0x0, 0x0, 0x5, r7, 0x1) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbd6d7593ca29acb", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.801297913s ago: executing program 0 (id=1442):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"})
r1 = socket$kcm(0x2d, 0x2, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e", 0x9}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async)
recvmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000340)=@vsock, 0x80, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, &(0x7f0000000140)=""/12, 0xc}, 0x40000040) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4000000}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='tlb_flush\x00', r6, 0x0, 0x3e}, 0x18) (async)
close(r5) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540)=r7, 0x12) (async)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00}, 0x94) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

1.800569195s ago: executing program 1 (id=1443):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x7, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c9d}, [@generic={0x4, 0x1, 0x7}, @generic={0x82, 0x2, 0x1, 0x6, 0x2a50deb1}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xc, 0xe0, 0x8000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x3, 0x5, 0xc, 0xa}, {0x5, 0x1, 0x2, 0x3}, {0x3, 0x5, 0x5, 0x2}, {0x5, 0x4, 0xa}], 0x10, 0x3ff}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2, 0x2, 0x73) (async)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x11) (async)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
r3 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0)
recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/206, 0xce}], 0x6, &(0x7f0000000700)=""/239, 0xef}, 0x40000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000018008001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb7020000080000007b03000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)

1.681711496s ago: executing program 1 (id=1444):
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="e93b08006758e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000)
mkdir(&(0x7f0000000800)='./file0\x00', 0x9) (async)
mount$bpf(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x1003, 0x0) (async)
syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000000)=0x4000008000) (async)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000340300f10400000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000b044d00ccfc296e60100000080000000", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000300"/28], 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[], 0x0, 0x36, 0x0, 0x80001}, 0x28) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) (async)
r3 = socket$kcm(0xa, 0x2, 0x3a) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @empty, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0) (async)
sendmsg$kcm(r4, &(0x7f00000008c0)={&(0x7f0000000380)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}, 0x891)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c00000500009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0)

1.628944072s ago: executing program 1 (id=1445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c001880"], 0xa0}}, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0xac20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x7, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)=ANY=[@ANYRESOCT=r2], 0xffffffffffffffff, 0x3e, 0x0, 0xd, 0x2}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000c40)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010020f8ffffff000008000100b70300000000000000000600000095000000004869dc5dc5a0db843816359a7c8ec1660df0cc7653f38e6d6a9bc8017fbbf7155f0e21a76a87493071f2d03ba1c83d93a9d0324e0af95011d58cee57be508ccaddd84001e920c67a2a9734e524c4447a3e4e19a4641eb259e124db7ff50f"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x94)
syz_clone(0x60c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x5, 0x12)
sendmsg$kcm(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="8dfcdd5e019416da4cae4111375eb2d7d1cde69d4362e9fce9e7a12d0f6f7e596e0e94be273dc52ae4aff475bf6ba1d721265cec77353ca9e36109b8fd8df5754e693481f47972e287f4388cc02b765830d61e813db9455f264e3bb223463a04aa7671c7f7645178c024b12dedd0436b83c76faffd967408a69ed44fd42e3ed8bf2a4beb88eb635152e9beaaa9e22fb2cff9daabfa27c1d5f89bfcc37d75258f8cfbf59abb6732ce4d7fcd31a7be4d07a8ee375ab3bc80", 0xb7}, {&(0x7f0000000640)="11a22470c7463a7cc7eae293f86002e590ca23b99642f433289b68019a3057f7c36ffa7e0e69cd7060cb83e9e41f9b778a7fea39016de5f52edd0f06fd7303d87fd74b8201f7b03666521d7f20fd9ca2b0472d0c02ca6608284fd4d262fb108488b5f009c331fa242f378b40a2e3d83672306eb71123e52cd36968d00e88e0b430d9bad667e5f53e523cefa648ef20f5cf7d99a8608eff2e76009cec3bb23458a5f0077e24", 0xa5}, {&(0x7f0000001040)="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", 0x1000}], 0x3, &(0x7f0000003a00)=ANY=[], 0x1010}, 0x10040000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000b00)=""/222, 0xde}, {&(0x7f00000001c0)=""/54, 0x36}], 0x2, 0x0, 0x0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004000)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4)

1.471965767s ago: executing program 0 (id=1446):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')

1.391842408s ago: executing program 0 (id=1447):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)

501.280776ms ago: executing program 1 (id=1448):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000b40)=""/157, 0x9d}, {&(0x7f0000000c00)=""/156, 0x9c}, {&(0x7f0000000cc0)=""/132, 0x84}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f0000000d80)=""/183, 0xb7}], 0xa, &(0x7f0000000f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x40010041)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de089022000aaa696ec000aac14140ce000000d49e832f0", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x24)

370.540331ms ago: executing program 0 (id=1449):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
openat$cgroup_subtree(r0, &(0x7f0000000580), 0x2, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
write$cgroup_int(r0, &(0x7f0000000440)=0xc00, 0x12) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x2}, 0x0) (async)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000076009544c350dd951bbf8f7f27c8270f", 0x14}], 0x1}, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="0d6def311a200dc8cd524801818704b3ea851fb35c817dfdaf3060b7775165550487ea2bae45f5be4c121a869b3bc22d2fa517abe0f7c0b9fe116e93b99e8212579a4283ef39b1959d5a2111b4bce2aa7d8f6c7e8420b4a1022792cecaafdde4e612bd182ce9508b84debe55be2a72617ca0ab62729a6d3aac21e16a7d2c1d9bc7a3b6a8d123c41b37c7b81533859132f1c3027f878a7cb2ed1ac45f14e48b765dc966fa22bfb5e82484bba570ee2dc18b4e02034df3a83229c58da581cdbd3023f974e368e3f6e398917a6d37132d087a2808b32ae4134fc4563d368d3dedd97165a4d63fc0fd07ae2b03244153704c27f319b87179c7", 0xf7}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7800000000002e51c244107c6d64000085b8566497d38be9e7f793c9e41a603f3307b2c4b9812ecefef6261186d7a293d9f2154914886012c3dff0f91d6d364ab5176a5c0a62b04c16ff21f93c53f6f55da65f5a02ff17698dbde3a6445f3cebabf74a46c511"], 0x78}, 0xc800) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10801, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x30, 0x0, 0x0}, 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r7=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000680)={r0})
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1804000005000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c9000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000300)="5d6f00957eae432c1c778438bab09d03ce5e9ee56a789cb79fab7109d4760ef14ccf322901a1b512251866611dd119df34a44f2cf5a95864f64641cbafd310a7bd650d801a729446a1575406c416d83be8e1ecbcfaec0cca3fa37522b457f7b8e548a016176ca3b50b60cb3639f9da08653937228a7b936b3496b1", &(0x7f0000001980)=""/4096}, 0x20)

251.866771ms ago: executing program 0 (id=1450):
r0 = getpid()
r1 = socket$kcm(0x18, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
r3 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0xb, 0x9e, 0x5, 0x0, 0x0, 0x11, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x100000000}, 0x40, 0x7, 0x9, 0x0, 0x7fffffff, 0xfffffffe, 0x3d, 0x0, 0x7, 0x0, 0x7}, r3, 0xffffffffffffffff, r4, 0xa)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)=0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x5, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8"], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_fd, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @exit]}, &(0x7f0000001300)='GPL\x00'}, 0x94)

0s ago: executing program 1 (id=1451):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081024e81f783db4cb9040a1d080006207c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94177134cf2a2fbff912216efb8000a007a290457fe288d44235fb2e0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000", 0xd8}], 0x1}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x8, &(0x7f00000000c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000140)='GPL\x00', 0xfffffbff, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x9, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x4, 0x1, 0xc, 0x4}, {0x4, 0x5, 0xe, 0x8}], 0x10, 0x800}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r0, 0x2, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback=r0, r1, 0x36, 0x0, 0x0, @void, @value=r4, @void, @void, r2}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000040001000500000000000000", @ANYRES32, @ANYBLOB="00000000000000002b592dac872f3e9900000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0xa, 0x3, 0x87)
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$unix(r10, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x188}, 0x81)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12101' (ED25519) to the list of known hosts.
syzkaller login: [   48.635386][ T5808] cgroup: Unknown subsys name 'net'
[   48.727024][ T5808] cgroup: Unknown subsys name 'cpuset'
[   48.733148][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.451315][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.813689][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.816524][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.819098][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.821827][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.833448][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.860908][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.865184][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.868270][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.873454][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.876925][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.986954][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.991028][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.994312][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.997074][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.999720][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.016620][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   55.160928][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.164080][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.166813][ T5842] bridge_slave_0: entered allmulticast mode
[   55.170013][ T5842] bridge_slave_0: entered promiscuous mode
[   55.176179][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.178566][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.181510][ T5842] bridge_slave_1: entered allmulticast mode
[   55.184820][ T5842] bridge_slave_1: entered promiscuous mode
[   55.209197][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.217217][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.227251][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.281868][ T5842] team0: Port device team_slave_0 added
[   55.299568][ T5842] team0: Port device team_slave_1 added
[   55.376961][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.379754][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.388831][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.393602][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.396285][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.398989][ T5847] bridge_slave_0: entered allmulticast mode
[   55.402133][ T5847] bridge_slave_0: entered promiscuous mode
[   55.410138][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.412940][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.426416][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.438142][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.440726][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.445241][ T5847] bridge_slave_1: entered allmulticast mode
[   55.448017][ T5847] bridge_slave_1: entered promiscuous mode
[   55.474030][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.477856][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.497632][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.527342][ T5842] hsr_slave_0: entered promiscuous mode
[   55.529653][ T5842] hsr_slave_1: entered promiscuous mode
[   55.561052][ T5847] team0: Port device team_slave_0 added
[   55.594106][ T5847] team0: Port device team_slave_1 added
[   55.658241][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.661280][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.670123][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.675101][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.678066][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.688676][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.727699][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.731259][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.734607][ T5852] bridge_slave_0: entered allmulticast mode
[   55.738487][ T5852] bridge_slave_0: entered promiscuous mode
[   55.748748][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.752024][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.755852][ T5852] bridge_slave_1: entered allmulticast mode
[   55.759800][ T5852] bridge_slave_1: entered promiscuous mode
[   55.832725][ T5847] hsr_slave_0: entered promiscuous mode
[   55.836324][ T5847] hsr_slave_1: entered promiscuous mode
[   55.839140][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   55.841658][ T5847] Cannot create hsr debugfs directory
[   55.846825][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.855180][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.894258][ T5852] team0: Port device team_slave_0 added
[   55.897358][ T5852] team0: Port device team_slave_1 added
[   55.969999][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.974779][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.986488][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.006338][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.009392][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.020994][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.072288][ T5852] hsr_slave_0: entered promiscuous mode
[   56.076185][ T5852] hsr_slave_1: entered promiscuous mode
[   56.079113][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.081602][ T5852] Cannot create hsr debugfs directory
[   56.130478][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.164121][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.177843][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.196688][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.268194][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.275868][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.285013][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.291776][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.358868][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.378277][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.384435][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.388736][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.425969][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.449492][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.455557][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   56.464990][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.467788][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.495746][  T665] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.498423][  T665] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.507115][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.523321][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.526102][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.541420][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.543914][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.565311][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.597273][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.602861][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.613945][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.616405][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.620693][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.623124][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.668737][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.672369][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.739164][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.782374][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.805919][ T5842] veth0_vlan: entered promiscuous mode
[   56.810599][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.825846][ T5842] veth1_vlan: entered promiscuous mode
[   56.853799][   T55] Bluetooth: hci0: command tx timeout
[   56.863789][ T5842] veth0_macvtap: entered promiscuous mode
[   56.871002][ T5842] veth1_macvtap: entered promiscuous mode
[   56.885234][ T5847] veth0_vlan: entered promiscuous mode
[   56.909067][ T5852] veth0_vlan: entered promiscuous mode
[   56.915035][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.921120][ T5847] veth1_vlan: entered promiscuous mode
[   56.927751][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.933345][   T55] Bluetooth: hci1: command tx timeout
[   56.945893][ T5852] veth1_vlan: entered promiscuous mode
[   56.949436][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.956797][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.959757][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.971470][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.002007][ T5847] veth0_macvtap: entered promiscuous mode
[   57.011151][ T5852] veth0_macvtap: entered promiscuous mode
[   57.013576][   T55] Bluetooth: hci2: command tx timeout
[   57.024840][ T5847] veth1_macvtap: entered promiscuous mode
[   57.027915][ T5852] veth1_macvtap: entered promiscuous mode
[   57.051308][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.055953][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.063187][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.069515][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.078589][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.094133][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.096607][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.109283][ T5904] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.119364][ T5904] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.119845][  T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.123959][ T5904] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.128620][  T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.137944][ T5904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.147545][ T5904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.151054][ T5904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.171112][ T5904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.221240][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.229016][  T665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.231971][  T665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.263781][  T665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.273193][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.273651][  T665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.276254][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.307253][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.310257][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.372131][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.521645][ T5923] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.639596][    C1] hrtimer: interrupt took 55138 ns
[   57.915305][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   57.937392][ T5939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'.
[   57.941635][ T5940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'.
[   57.950665][ T5939] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   57.958631][ T5940] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   58.420304][ T5942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   58.423210][ T5942] IPv6: NLM_F_CREATE should be set when creating new route
[   58.425936][ T5942] IPv6: NLM_F_CREATE should be set when creating new route
[   58.933182][   T55] Bluetooth: hci0: command tx timeout
[   59.013794][   T55] Bluetooth: hci1: command tx timeout
[   59.095328][   T55] Bluetooth: hci2: command tx timeout
[   60.916570][ T5950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13'.
[   61.013382][   T55] Bluetooth: hci0: command tx timeout
[   61.017733][ T5961] veth0_vlan: entered allmulticast mode
[   61.034833][ T5961] veth0_vlan: left promiscuous mode
[   61.037867][ T5961] veth0_vlan: entered promiscuous mode
[   61.094059][   T55] Bluetooth: hci1: command tx timeout
[   61.197304][   T55] Bluetooth: hci2: command tx timeout
[   61.918633][ T5972] netlink: 'syz.2.19': attribute type 21 has an invalid length.
[   61.930226][ T5971] netlink: 'syz.2.19': attribute type 21 has an invalid length.
[   62.015323][ T5975] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.20'.
[   62.022791][ T5975] netlink: 300 bytes leftover after parsing attributes in process `syz.1.20'.
[   62.415169][ T5988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'.
[   62.422641][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'.
[   62.591400][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.596966][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.604716][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.607471][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.055132][ T5998] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   63.064885][ T5998] netlink: 'syz.2.27': attribute type 21 has an invalid length.
[   63.067618][ T5998] netlink: 144 bytes leftover after parsing attributes in process `syz.2.27'.
[   63.094087][   T55] Bluetooth: hci0: command tx timeout
[   63.175832][   T55] Bluetooth: hci1: command tx timeout
[   63.253928][   T55] Bluetooth: hci2: command tx timeout
[   63.483920][ T6010] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.30'.
[   63.488654][ T6010] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.30'.
[   63.729773][ T6012] netlink: 144 bytes leftover after parsing attributes in process `syz.1.32'.
[   64.851109][ T6019] Zero length message leads to an empty skb
[   65.074930][ T6033] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET)
[   65.592286][ T6035] syz.2.39 (6035) used greatest stack depth: 18408 bytes left
[   65.843627][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   65.847951][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'.
[   65.850990][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'.
[   65.940480][ T6065] Driver unsupported XDP return value 0 on prog  (id 55) dev N/A, expect packet loss!
[   66.057916][ T6069] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.47'.
[   66.194431][ T6077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.306736][ T6083] : renamed from dummy0 (while UP)
[   66.326626][ T6076] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   66.335764][ T6076] netlink: 'syz.1.50': attribute type 3 has an invalid length.
[   66.506173][   T55] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[   66.626158][ T6105] netlink: 'syz.2.57': attribute type 4 has an invalid length.
[   66.634736][ T6104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.679622][ T6105] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.487425][ T6131] __nla_validate_parse: 5 callbacks suppressed
[   67.487502][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'.
[   67.497239][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'.
[   67.516740][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.531782][ T6137] netlink: 'syz.2.69': attribute type 10 has an invalid length.
[   67.543674][ T6137] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   67.549861][ T6137] bond0: (slave hsr0): Error -95 calling set_mac_address
[   68.126073][ T6139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   68.133661][ T6143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   68.143702][ T6141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.70'.
[   69.504517][ T6176] lo: entered promiscuous mode
[   69.807131][ T6198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.89'.
[   70.578575][ T6204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.988015][ T6202] netlink: 'syz.1.90': attribute type 2 has an invalid length.
[   71.181140][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.183578][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.740529][ T6251] netlink: 'syz.2.104': attribute type 21 has an invalid length.
[   71.749311][ T6251] netlink: 128 bytes leftover after parsing attributes in process `syz.2.104'.
[   71.757770][ T6251] netlink: 'syz.2.104': attribute type 5 has an invalid length.
[   71.761252][ T6251] netlink: 3 bytes leftover after parsing attributes in process `syz.2.104'.
[   72.038345][ T6260] dummy0: entered promiscuous mode
[   72.040673][ T6260] dummy0: entered allmulticast mode
[   72.080860][   T55] Bluetooth: hci1: unexpected event 0x2c length: 15 < 17
[   72.094601][   T55] Bluetooth: hci1: unexpected event 0x2c length: 15 < 17
[   72.294280][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   72.449507][ T6269] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.110'.
[   72.634112][ T6291] netlink: 'syz.0.116': attribute type 11 has an invalid length.
[   72.654441][ T6291] netlink: 168 bytes leftover after parsing attributes in process `syz.0.116'.
[   72.709327][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.112'.
[   72.820651][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'.
[   72.844554][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.119'.
[   73.521547][ T6309] netlink: 2 bytes leftover after parsing attributes in process `syz.2.122'.
[   73.593584][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.617636][ T6320] netlink: 14 bytes leftover after parsing attributes in process `syz.1.124'.
[   73.621406][ T6320] hsr0: entered promiscuous mode
[   73.626443][ T6320] hsr0: entered allmulticast mode
[   73.629682][ T6320] hsr_slave_0: entered allmulticast mode
[   73.634995][ T6320] hsr_slave_1: entered allmulticast mode
[   74.096405][ T6346] netlink: 56 bytes leftover after parsing attributes in process `syz.1.133'.
[   74.100441][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'.
[   74.105856][ T6346] netlink: 31 bytes leftover after parsing attributes in process `syz.1.133'.
[   74.109724][ T6346] netlink: 'syz.1.133': attribute type 2 has an invalid length.
[   74.115963][ T6346] netlink: 31 bytes leftover after parsing attributes in process `syz.1.133'.
[   74.598192][ T6356] netlink: 'syz.1.136': attribute type 1 has an invalid length.
[   74.601907][ T6356] netlink: 'syz.1.136': attribute type 1 has an invalid length.
[   74.610590][ T6356] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   75.396315][   T55] Bluetooth: hci0: ACL packet for unknown connection handle 0
[   75.593731][ T6415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.596840][ T6415] IPv6: NLM_F_CREATE should be set when creating new route
[   75.599533][ T6415] IPv6: NLM_F_CREATE should be set when creating new route
[   75.602036][ T6415] IPv6: NLM_F_CREATE should be set when creating new route
[   76.609957][ T6467] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   76.616115][ T6467] netlink: 'syz.1.166': attribute type 3 has an invalid length.
[   77.364038][ T6477] netlink: 'syz.0.170': attribute type 33 has an invalid length.
[   78.782175][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.837809][ T6510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.840980][ T6510] IPv6: NLM_F_CREATE should be set when creating new route
[   78.844454][ T6510] IPv6: NLM_F_CREATE should be set when creating new route
[   78.847594][ T6510] IPv6: NLM_F_CREATE should be set when creating new route
[   79.616174][ T6535] __nla_validate_parse: 6 callbacks suppressed
[   79.616188][ T6535] netlink: 148 bytes leftover after parsing attributes in process `syz.1.188'.
[   79.912516][ T6550] netlink: 'syz.1.192': attribute type 4 has an invalid length.
[   79.956817][ T6552] veth0_vlan: entered allmulticast mode
[   80.111756][ T6564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.195'.
[   80.116154][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.195'.
[   80.120796][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.195'.
[   80.179242][ T6566] netlink: 'syz.0.197': attribute type 1 has an invalid length.
[   80.179317][ T6567] netlink: 'syz.0.197': attribute type 1 has an invalid length.
[   81.416695][  T794] cfg80211: failed to load regulatory.db
[   81.564792][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'.
[   81.568367][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'.
[   81.571905][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'.
[   81.661599][ T6622] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   81.666756][ T6622] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   81.671092][ T6620] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.215'.
[   81.675379][ T6620] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   81.675503][ T6622] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   81.685995][ T6622] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   81.746415][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[   81.750240][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'.
[   81.753968][ T6626] netlink: 'syz.0.216': attribute type 2 has an invalid length.
[   81.786528][ T6626] netlink: 'syz.0.216': attribute type 9 has an invalid length.
[   81.879018][ T6628] netlink: 'syz.1.218': attribute type 2 has an invalid length.
[   83.202572][ T6656] sock: sock_timestamping_bind_phc: sock not bind to device
[   85.186432][ T6732] __nla_validate_parse: 6 callbacks suppressed
[   85.186441][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'.
[   85.191773][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'.
[   85.378928][ T6745] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   85.390849][ T6745] netlink: 32 bytes leftover after parsing attributes in process `syz.2.251'.
[   85.925724][ T6757] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.257'.
[   85.931744][ T6757] validate_nla: 5 callbacks suppressed
[   85.931756][ T6757] netlink: 'syz.0.257': attribute type 6 has an invalid length.
[   85.940003][ T6757] netlink: 'syz.0.257': attribute type 3 has an invalid length.
[   85.944097][ T6757] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.257'.
[   86.357167][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'.
[   86.360290][ T6777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'.
[   86.872083][ T6791] syzkaller0: entered promiscuous mode
[   86.874833][ T6791] syzkaller0: entered allmulticast mode
[   86.879079][ T6791] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[   87.586590][ T6823] netlink: 'syz.0.279': attribute type 3 has an invalid length.
[   87.589532][ T6823] netlink: 152 bytes leftover after parsing attributes in process `syz.0.279'.
[   88.373389][ T6836] netlink: 198328 bytes leftover after parsing attributes in process `syz.0.282'.
[   88.376513][ T6836] netlink: 'syz.0.282': attribute type 1 has an invalid length.
[   88.380053][ T6836] netlink: 'syz.0.282': attribute type 2 has an invalid length.
[   88.517074][ T6849] xt_time: unknown flags 0xf4
[   88.517528][ T6840] netlink: 72 bytes leftover after parsing attributes in process `syz.1.283'.
[   89.411031][ T6877] =======================================================
[   89.411031][ T6877] WARNING: The mand mount option has been deprecated and
[   89.411031][ T6877]          and is ignored by this kernel. Remove the mand
[   89.411031][ T6877]          option from the mount to silence this warning.
[   89.411031][ T6877] =======================================================
[   89.917874][ T6894] lo speed is unknown, defaulting to 1000
[   89.920342][ T6894] lo speed is unknown, defaulting to 1000
[   89.939698][ T6894] lo speed is unknown, defaulting to 1000
[   90.047783][ T6894] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   90.115506][ T6894] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   90.662433][ T6894] lo speed is unknown, defaulting to 1000
[   90.666661][ T6926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.677531][ T6894] lo speed is unknown, defaulting to 1000
[   90.681505][ T6894] lo speed is unknown, defaulting to 1000
[   90.690404][ T6926] __nla_validate_parse: 2 callbacks suppressed
[   90.690462][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'.
[   90.903508][ T6932] netlink: 'syz.0.309': attribute type 5 has an invalid length.
[   91.592018][ T6956] netlink: 'syz.2.316': attribute type 2 has an invalid length.
[   91.712483][ T6967] netlink: 'syz.2.320': attribute type 21 has an invalid length.
[   91.884736][ T6974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.323'.
[   91.892205][ T6976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'.
[   91.924677][ T6976] netlink: 798 bytes leftover after parsing attributes in process `syz.2.324'.
[   92.320065][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'.
[   92.323596][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'.
[   92.932005][ T7031] netlink: 'syz.0.340': attribute type 21 has an invalid length.
[   92.941320][ T7031] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[   93.073943][ T7042] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.344'.
[   93.167979][ T7057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.209918][ T7057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.214376][ T7057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.281137][ T7062] netlink: 'syz.0.350': attribute type 16 has an invalid length.
[   93.286219][ T7062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.350'.
[   93.294669][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.420269][ T7076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'.
[   93.424022][ T7076] netlink: 60 bytes leftover after parsing attributes in process `syz.0.353'.
[   93.479010][ T7074] openvswitch: netlink: Missing key (keys=40, expected=100)
[   94.073691][   T55] Bluetooth: hci2: ISO packet for unknown connection handle 3
[   94.175662][   T33] audit: type=1107 audit(1758659829.606:2): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   95.131938][ T7127] netlink: 'syz.2.368': attribute type 5 has an invalid length.
[   95.224996][ T7138] netlink: 'syz.2.371': attribute type 10 has an invalid length.
[   95.228178][ T7138] netlink: 'syz.2.371': attribute type 19 has an invalid length.
[   95.231203][ T7138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.723610][ T7146] __nla_validate_parse: 8 callbacks suppressed
[   97.723624][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'.
[   97.836178][ T7153] netlink: 830 bytes leftover after parsing attributes in process `syz.0.377'.
[   97.909555][ T7165] wlan1 speed is unknown, defaulting to 1000
[   97.911539][ T7165] wlan1 speed is unknown, defaulting to 1000
[   97.920822][ T7165] wlan1 speed is unknown, defaulting to 1000
[   97.931272][ T7165] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   97.953778][ T7165] wlan1 speed is unknown, defaulting to 1000
[   97.958232][ T7165] wlan1 speed is unknown, defaulting to 1000
[   97.962194][ T7165] wlan1 speed is unknown, defaulting to 1000
[   97.975698][ T7164] xt_socket: unknown flags 0x20
[   99.609116][ T7228] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.612868][ T7228] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.708137][ T7229] netlink: 'syz.0.399': attribute type 25 has an invalid length.
[  100.469293][ T7249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.404'.
[  100.550910][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'.
[  100.554695][ T7258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.407'.
[  100.619295][ T7260] netlink: 'syz.0.408': attribute type 3 has an invalid length.
[  100.621833][ T7260] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.408'.
[  100.867879][ T7256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.879317][ T7256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.160682][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'.
[  101.309772][ T7289] netlink: 'syz.0.415': attribute type 39 has an invalid length.
[  101.312823][ T7290] netlink: 'syz.0.415': attribute type 39 has an invalid length.
[  102.271645][ T7314] netlink: 'syz.1.421': attribute type 10 has an invalid length.
[  102.442630][ T7314] team0: Port device geneve1 added
[  102.690234][ T7335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.426'.
[  102.755539][ T7339] netlink: 'syz.2.426': attribute type 21 has an invalid length.
[  102.758882][ T7339] netlink: 'syz.2.426': attribute type 1 has an invalid length.
[  103.204214][ T7360] lo speed is unknown, defaulting to 1000
[  103.221268][ T7360] wlan1 speed is unknown, defaulting to 1000
[  103.675135][ T5904] tipc: Subscription rejected, illegal request
[  103.893071][   T33] audit: type=1107 audit(1758659839.316:3): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  103.899830][ T7386] netlink: 'syz.1.442': attribute type 3 has an invalid length.
[  103.902675][ T7386] netlink: 150428 bytes leftover after parsing attributes in process `syz.1.442'.
[  104.010356][ T7395] netlink: 'syz.2.446': attribute type 1 has an invalid length.
[  104.010779][ T7396] netlink: 'syz.2.446': attribute type 1 has an invalid length.
[  104.013359][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.064743][ T7396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.990342][ T7439] netlink: 'syz.0.461': attribute type 21 has an invalid length.
[  105.007114][ T7439] netlink: 168 bytes leftover after parsing attributes in process `syz.0.461'.
[  105.178564][ T7447] netlink: 1018 bytes leftover after parsing attributes in process `syz.0.462'.
[  105.441504][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'.
[  105.619297][ T7469] netlink: 'syz.2.468': attribute type 2 has an invalid length.
[  105.622405][ T7469] netlink: 164 bytes leftover after parsing attributes in process `syz.2.468'.
[  106.649091][ T7498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.477'.
[  107.403729][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'.
[  107.532689][ T7545] sit0: entered allmulticast mode
[  107.680984][ T7561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.755348][ T7569] netlink: 'syz.1.497': attribute type 10 has an invalid length.
[  107.931706][ T7573] netlink: 'syz.0.499': attribute type 23 has an invalid length.
[  107.935382][ T7573] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.133770][ T7585] netlink: 'syz.1.502': attribute type 10 has an invalid length.
[  108.138447][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.502'.
[  108.158431][ T7585] batman_adv: batadv0: Adding interface: hsr_slave_1
[  108.160631][ T7585] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.170346][ T7585] batman_adv: batadv0: Interface activated: hsr_slave_1
[  108.306898][ T7597] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.508'.
[  108.319862][ T7597] nbd: must specify a size in bytes for the device
[  108.713613][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'.
[  108.822087][   T33] audit: type=1107 audit(1758659844.236:4): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  108.921354][ T7622] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[  108.958587][ T7622] __nla_validate_parse: 2 callbacks suppressed
[  108.958601][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[  109.214674][ T7631] rdma_rxe: rxe_newlink: failed to add lo
[  109.510874][ T7645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.645541][ T7648] netlink: 'syz.2.525': attribute type 11 has an invalid length.
[  109.827605][ T7655] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  109.834382][ T7657] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  109.837513][ T7657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.527'.
[  109.842268][ T7655] netlink: 'syz.0.527': attribute type 3 has an invalid length.
[  109.853501][ T7655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.527'.
[  110.910323][ T7686] tQ6\bY4: renamed from lo (while UP)
[  111.276856][ T7693] validate_nla: 1 callbacks suppressed
[  111.276865][ T7693] netlink: 'syz.1.540': attribute type 29 has an invalid length.
[  111.282287][ T7693] netlink: 'syz.1.540': attribute type 29 has an invalid length.
[  111.563273][ T7704] netlink: 'syz.0.544': attribute type 1 has an invalid length.
[  111.695091][ T7712] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  112.261175][ T7727] A link change request failed with some changes committed already. Interface tQ6\bY4 may have been left with an inconsistent configuration, please check.
[  112.614959][ T7734] syzkaller0: entered promiscuous mode
[  112.617317][ T7734] syzkaller0: entered allmulticast mode
[  117.161781][ T7805] veth0_vlan: left promiscuous mode
[  117.176546][ T7805] veth0_vlan: entered promiscuous mode
[  118.741362][ T7848] netlink: 68 bytes leftover after parsing attributes in process `syz.2.588'.
[  118.764614][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.095762][ T7859] netlink: 104 bytes leftover after parsing attributes in process `syz.2.591'.
[  119.118911][ T7859] netlink: 'syz.2.591': attribute type 10 has an invalid length.
[  119.216901][ T7859] bond0: (slave bond_slave_0): Releasing backup interface
[  119.723371][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.595'.
[  119.892152][ T7873] netlink: 'syz.0.595': attribute type 3 has an invalid length.
[  120.002724][ T7880] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.598'.
[  120.036453][ T7859] syz.2.591 (7859) used greatest stack depth: 18176 bytes left
[  120.039627][ T7880] netlink: zone id is out of range
[  120.041765][ T7880] netlink: zone id is out of range
[  120.052446][ T7880] netlink: get zone limit has 8 unknown bytes
[  120.194192][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'.
[  120.241192][ T7891] proc: Unknown parameter '0x0000000000000000ˤ8ܧ:CI	GrLLD!gOLs!恛wroܟ'
[  120.270252][ T7889] netlink: 128 bytes leftover after parsing attributes in process `syz.1.600'.
[  120.274314][ T7889] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  120.907009][ T7893] tap0: tun_chr_ioctl cmd 1074025678
[  120.909043][ T7893] tap0: group set to 0
[  121.330229][ T7913] netlink: 'syz.2.609': attribute type 13 has an invalid length.
[  121.340513][ T7913] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.609'.
[  121.582405][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.610'.
[  121.786978][ T7934] netlink: 68 bytes leftover after parsing attributes in process `syz.0.617'.
[  122.068247][   T33] audit: type=1107 audit(1758659857.496:5): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  122.532131][ T7969] netlink: 'syz.0.628': attribute type 10 has an invalid length.
[  122.682397][ T7969] hsr_slave_0: left promiscuous mode
[  122.687403][ T7969] hsr_slave_1: left promiscuous mode
[  122.789100][ T7979] raw_sendmsg: syz.1.629 forgot to set AF_INET. Fix it!
[  122.830668][ T7979] netlink: 180 bytes leftover after parsing attributes in process `syz.1.629'.
[  123.173639][ T8007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.397694][ T8015] netlink: 'syz.0.642': attribute type 1 has an invalid length.
[  125.750403][ T8077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.754013][ T8077] IPv6: NLM_F_CREATE should be set when creating new route
[  125.757496][ T8077] IPv6: NLM_F_CREATE should be set when creating new route
[  126.115656][ T8100] __nla_validate_parse: 2 callbacks suppressed
[  126.115670][ T8100] netlink: 182 bytes leftover after parsing attributes in process `syz.0.672'.
[  126.132100][ T8101] netlink: 'syz.1.673': attribute type 21 has an invalid length.
[  126.506874][ T8113] openvswitch: netlink: Multiple metadata blocks provided
[  126.630280][ T8115] netlink: 'syz.0.678': attribute type 2 has an invalid length.
[  126.951612][ T8122] netlink: 168 bytes leftover after parsing attributes in process `syz.0.679'.
[  126.997740][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'.
[  127.014748][ T8134] netlink: 'syz.0.683': attribute type 3 has an invalid length.
[  127.347040][ T8148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.688'.
[  127.502514][ T8155] netlink: 'syz.0.691': attribute type 2 has an invalid length.
[  127.805435][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'.
[  127.805752][ T8166] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.693'.
[  128.576663][ T8203] netlink: 'syz.1.702': attribute type 11 has an invalid length.
[  128.583791][ T8203] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.702'.
[  128.599888][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.631521][ T8209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.706'.
[  128.877256][ T8230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.711'.
[  128.981770][ T8237] delete_channel: no stack
[  128.983608][ T8237] delete_channel: no stack
[  129.046387][ T8240] netlink: 68 bytes leftover after parsing attributes in process `syz.0.713'.
[  129.502134][ T8253] netlink: 'syz.1.718': attribute type 27 has an invalid length.
[  129.726243][ T8257] delete_channel: no stack
[  129.729652][ T8257] delete_channel: no stack
[  130.057480][ T8268] netlink: 'syz.2.723': attribute type 7 has an invalid length.
[  130.484786][ T8297] veth1_to_bond: entered allmulticast mode
[  130.956109][ T8331] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  131.273352][ T8350] __nla_validate_parse: 9 callbacks suppressed
[  131.273396][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.747'.
[  131.278799][ T8350] openvswitch: netlink: Missing key (keys=40, expected=100)
[  131.315341][   T55] Bluetooth: hci0: ISO packet for unknown connection handle 3870
[  131.340599][ T8355] veth0_vlan: entered allmulticast mode
[  131.429075][ T8364] netlink: 7 bytes leftover after parsing attributes in process `syz.0.750'.
[  131.433068][ T8364] netlink: 7 bytes leftover after parsing attributes in process `syz.0.750'.
[  131.456259][ T8366] lo speed is unknown, defaulting to 1000
[  131.458849][ T8366] wlan1 speed is unknown, defaulting to 1000
[  132.802556][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.805956][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.809495][ T8400] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.760'.
[  132.812565][ T8400] nbd: must specify a size in bytes for the device
[  133.127403][ T8399] delete_channel: no stack
[  133.201048][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.210926][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.214027][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.221241][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.224238][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.227041][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.229053][ T8417] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[  133.232785][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.238238][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.245721][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.248664][ T8415] xt_l2tp: wrong L2TP version: 0
[  133.325924][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'.
[  133.752117][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'.
[  133.779532][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'.
[  133.884215][ T8453] netlink: 'syz.1.774': attribute type 46 has an invalid length.
[  133.886933][ T8453] netlink: 'syz.1.774': attribute type 19 has an invalid length.
[  133.889696][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'.
[  133.977578][ T8455] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  134.007973][ T8457] netlink: 'syz.1.776': attribute type 16 has an invalid length.
[  134.011292][ T8457] netlink: 'syz.1.776': attribute type 17 has an invalid length.
[  134.056582][ T8457] sit0: left allmulticast mode
[  134.406448][ T8457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.532382][ T8485] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.785'.
[  134.574063][ T8488] siw: device registration error -23
[  134.656010][   T33] audit: type=1107 audit(1758659870.086:6): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  134.730597][ T8500] netlink: 160 bytes leftover after parsing attributes in process `syz.2.791'.
[  134.745541][ T8500] netlink: 'syz.2.791': attribute type 10 has an invalid length.
[  134.805240][ T8500] batman_adv: batadv0: Adding interface: netdevsim0
[  134.808178][ T8500] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.820217][ T8500] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  135.199862][ T8514] sctp: [Deprecated]: syz.2.793 (pid 8514) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.199862][ T8514] Use struct sctp_sack_info instead
[  136.230945][ T8552] netlink: 'syz.2.810': attribute type 10 has an invalid length.
[  136.234536][ T8552] team0: entered promiscuous mode
[  136.236454][ T8552] team_slave_0: entered promiscuous mode
[  136.238812][ T8552] team_slave_1: entered promiscuous mode
[  136.241519][ T8552] team0: entered allmulticast mode
[  136.248989][ T8552] team_slave_0: entered allmulticast mode
[  136.251500][ T8552] team_slave_1: entered allmulticast mode
[  136.256851][ T8552] bridge0: port 3(team0) entered blocking state
[  136.260667][ T8552] bridge0: port 3(team0) entered disabled state
[  136.268739][ T8552] bridge0: port 3(team0) entered blocking state
[  136.271595][ T8552] bridge0: port 3(team0) entered forwarding state
[  136.730335][ T8564] netlink: 'syz.2.813': attribute type 21 has an invalid length.
[  136.736054][ T8564] __nla_validate_parse: 4 callbacks suppressed
[  136.736065][ T8564] netlink: 152 bytes leftover after parsing attributes in process `syz.2.813'.
[  137.212549][ T8592] sctp: [Deprecated]: syz.1.823 (pid 8592) Use of int in max_burst socket option deprecated.
[  137.212549][ T8592] Use struct sctp_assoc_value instead
[  137.350779][ T8596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.431512][ T8600] netlink: 'syz.1.826': attribute type 3 has an invalid length.
[  137.992209][ T8610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'.
[  137.996438][ T8610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'.
[  138.113441][ T8615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'.
[  138.117745][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.831'.
[  138.767081][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'.
[  138.882249][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'.
[  139.070753][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'.
[  139.126552][ T8687] netlink: 'syz.1.845': attribute type 1 has an invalid length.
[  139.127637][ T8690] netlink: 172 bytes leftover after parsing attributes in process `syz.2.846'.
[  139.133396][ T8689] netlink: 124 bytes leftover after parsing attributes in process `syz.1.845'.
[  139.133420][ T8689] netlink: 'syz.1.845': attribute type 1 has an invalid length.
[  139.235456][ T8694] netlink: 'syz.2.847': attribute type 3 has an invalid length.
[  139.558273][ T8716] netlink: 'syz.1.854': attribute type 10 has an invalid length.
[  139.653586][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 3849
[  139.814094][ T8747] netlink: 'syz.0.864': attribute type 21 has an invalid length.
[  139.835551][ T8747] netlink: 'syz.0.864': attribute type 5 has an invalid length.
[  140.686806][ T8770] siw: device registration error -23
[  141.446138][ T8795] sctp: [Deprecated]: syz.0.880 (pid 8795) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.446138][ T8795] Use struct sctp_sack_info instead
[  141.953202][ T8801] netlink: 'syz.2.882': attribute type 3 has an invalid length.
[  141.957513][ T8801] __nla_validate_parse: 5 callbacks suppressed
[  141.957589][ T8801] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.882'.
[  142.369836][ T8811] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.374128][ T8811] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.009334][ T8833] netlink: 'syz.1.892': attribute type 1 has an invalid length.
[  143.034301][ T8834] ipvlan1: entered promiscuous mode
[  143.036299][ T8834] ipvlan1: entered allmulticast mode
[  143.067858][ T8839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.894'.
[  143.148214][ T8849] netlink: 2 bytes leftover after parsing attributes in process `syz.0.898'.
[  143.229340][ T8857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.367353][ T8861] lo speed is unknown, defaulting to 1000
[  143.372752][ T8861] wlan1 speed is unknown, defaulting to 1000
[  143.815970][ T8869] netlink: 176 bytes leftover after parsing attributes in process `syz.0.904'.
[  144.062780][ T8868] netlink: 'syz.0.904': attribute type 5 has an invalid length.
[  144.066326][ T8868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.904'.
[  144.076094][ T8869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.904'.
[  144.080612][ T8869] netlink: 46 bytes leftover after parsing attributes in process `syz.0.904'.
[  144.160284][ T8869] netlink: 46 bytes leftover after parsing attributes in process `syz.0.904'.
[  144.265887][ T8872] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.905'.
[  144.269069][ T8874] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.907'.
[  144.403051][ T8886] netlink: 'syz.0.909': attribute type 12 has an invalid length.
[  144.543650][ T8903] IPv6: NLM_F_REPLACE set, but no existing node found!
[  145.451585][ T8923] netlink: 'syz.2.920': attribute type 21 has an invalid length.
[  147.635032][ T9024] netlink: 'syz.2.949': attribute type 10 has an invalid length.
[  147.641258][ T9024] geneve0: entered promiscuous mode
[  147.689059][ T9033] ref_ctr_offset mismatch. inode: 0x45 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  147.715994][ T9024] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  147.719607][ T9030] netlink: 'syz.1.952': attribute type 3 has an invalid length.
[  148.844935][ T9115] __nla_validate_parse: 3 callbacks suppressed
[  148.844945][ T9115] netlink: 830 bytes leftover after parsing attributes in process `syz.0.976'.
[  148.890048][ T9123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.978'.
[  149.043851][ T9131] netlink: 'syz.1.980': attribute type 8 has an invalid length.
[  149.447211][ T9137] netlink: zone id is out of range
[  149.464592][ T9148] netlink: del zone limit has 4 unknown bytes
[  149.486226][ T9154] netlink: 'syz.0.987': attribute type 9 has an invalid length.
[  149.490837][ T9154] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.987'.
[  149.512195][ T9137] netlink: zone id is out of range
[  149.517146][ T9137] netlink: zone id is out of range
[  149.634221][ T9152] netlink: 'syz.2.986': attribute type 3 has an invalid length.
[  149.637920][ T9152] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.986'.
[  149.645628][ T9137] netlink: set zone limit has 4 unknown bytes
[  152.840049][ T9177] netlink: 'syz.1.995': attribute type 10 has an invalid length.
[  152.842777][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.995'.
[  153.185982][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  153.280370][ T9198] netlink: 'syz.1.1002': attribute type 3 has an invalid length.
[  153.283315][ T9198] netlink: 'syz.1.1002': attribute type 1 has an invalid length.
[  153.286806][ T9198] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1002'.
[  153.292913][ T9198] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1002'.
[  153.528085][ T9200] netlink: 'syz.1.1003': attribute type 22 has an invalid length.
[  153.544790][ T9200] netlink: 'syz.1.1003': attribute type 1 has an invalid length.
[  153.549247][ T9200] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1003'.
[  153.648671][ T9207] netlink: 'syz.0.1004': attribute type 29 has an invalid length.
[  153.652463][ T9207] netlink: 'syz.0.1004': attribute type 29 has an invalid length.
[  153.657341][ T9207] netlink: 'syz.0.1004': attribute type 29 has an invalid length.
[  153.663307][ T9207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1004'.
[  154.278323][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.349486][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.471620][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.524330][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.593332][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.597533][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.601488][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.609087][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.615463][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.637053][ T5859] bridge_slave_1: left allmulticast mode
[  154.639692][ T5859] bridge_slave_1: left promiscuous mode
[  154.643037][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.662737][ T5859] bridge_slave_0: left allmulticast mode
[  154.666350][ T5859] bridge_slave_0: left promiscuous mode
[  154.669055][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.867012][ T5859] team0: Port device geneve1 removed
[  155.061530][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.069254][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.076244][ T5859] bond0 (unregistering): Released all slaves
[  155.111538][ T9232] lo speed is unknown, defaulting to 1000
[  155.121776][ T9232] wlan1 speed is unknown, defaulting to 1000
[  155.386423][ T9232] chnl_net:caif_netlink_parms(): no params data found
[  155.580363][ T5859] hsr_slave_0: left promiscuous mode
[  155.582813][ T5859] hsr_slave_1: left promiscuous mode
[  155.585458][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.588277][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.591341][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.596733][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.599682][ T5859] batman_adv: batadv0: Interface deactivated: hsr_slave_1
[  155.602116][ T5859] batman_adv: batadv0: Removing interface: hsr_slave_1
[  155.612738][ T5859] veth1_macvtap: left promiscuous mode
[  155.615857][ T5859] veth0_macvtap: left promiscuous mode
[  155.618882][ T5859] veth1_vlan: left promiscuous mode
[  155.873755][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  155.893799][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  156.193198][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.203125][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.205775][ T9232] bridge_slave_0: entered allmulticast mode
[  156.216546][ T9232] bridge_slave_0: entered promiscuous mode
[  156.225455][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.227894][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.230965][ T9232] bridge_slave_1: entered allmulticast mode
[  156.235526][ T9232] bridge_slave_1: entered promiscuous mode
[  156.301888][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.315213][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.363630][ T9232] team0: Port device team_slave_0 added
[  156.367266][ T9232] team0: Port device team_slave_1 added
[  156.430073][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.434281][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.447851][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.456511][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.460759][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.474683][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.706948][   T55] Bluetooth: hci0: command tx timeout
[  156.774466][ T9232] hsr_slave_0: entered promiscuous mode
[  156.777885][ T9232] hsr_slave_1: entered promiscuous mode
[  157.598768][ T9309] __nla_validate_parse: 1 callbacks suppressed
[  157.598778][ T9309] netlink: 42496 bytes leftover after parsing attributes in process `syz.0.1031'.
[  157.629462][ T9232] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  157.634056][ T9232] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  157.639233][ T9232] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  157.644709][ T9232] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  157.718128][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.730230][ T9232] 8021q: adding VLAN 0 to HW filter on device team0
[  157.738291][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.741394][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.755601][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.758325][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.912705][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.966085][ T9232] veth0_vlan: entered promiscuous mode
[  157.977512][ T9232] veth1_vlan: entered promiscuous mode
[  158.004559][ T9232] veth0_macvtap: entered promiscuous mode
[  158.009786][ T9232] veth1_macvtap: entered promiscuous mode
[  158.030563][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.044753][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.052155][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.060660][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.065519][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.069120][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.127976][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.130793][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.158859][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.162222][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.545693][ T9349] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1037'.
[  158.708457][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'.
[  158.718639][ T9361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'.
[  158.790384][   T55] Bluetooth: hci0: command tx timeout
[  159.460701][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1050'.
[  159.962769][ T9394] lo speed is unknown, defaulting to 1000
[  159.966025][ T9394] wlan1 speed is unknown, defaulting to 1000
[  160.028463][ T9408] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1056'.
[  160.297747][ T9437] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1063'.
[  160.302214][ T9437] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1063'.
[  160.459993][ T9447] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  160.469015][ T9446] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  160.615166][ T9451] lo speed is unknown, defaulting to 1000
[  160.617978][ T9451] wlan1 speed is unknown, defaulting to 1000
[  160.708721][ T9448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1062'.
[  160.853115][   T55] Bluetooth: hci0: command tx timeout
[  161.099031][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'.
[  162.542766][ T9494] lo speed is unknown, defaulting to 1000
[  162.549667][ T9494] wlan1 speed is unknown, defaulting to 1000
[  162.943743][   T55] Bluetooth: hci0: command tx timeout
[  163.274530][ T9516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.279071][ T9517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.397158][ T9520] siw: device registration error -23
[  163.461268][ T9523] __nla_validate_parse: 4 callbacks suppressed
[  163.461308][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'.
[  163.470086][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'.
[  163.474823][ T9523] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1086'.
[  163.479435][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'.
[  163.486255][ T9523] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1086'.
[  163.665812][ T9539] validate_nla: 3 callbacks suppressed
[  163.665825][ T9539] netlink: 'syz.2.1090': attribute type 1 has an invalid length.
[  163.781388][ T9543] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1088'.
[  163.917779][ T9552] lo speed is unknown, defaulting to 1000
[  163.921960][ T9552] wlan1 speed is unknown, defaulting to 1000
[  163.992114][ T9552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1093'.
[  164.034978][ T9562] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1095'.
[  164.321658][ T9578] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1098'.
[  164.329931][ T9562] infiniband syz1: set down
[  164.332169][ T9562] infiniband syz1: added ipvlan0
[  164.368381][ T9562] RDS/IB: syz1: added
[  164.369998][ T9562] smc: adding ib device syz1 with port count 1
[  164.372211][ T9562] smc:    ib device syz1 port 1 has pnetid 
[  164.376886][ T9577] netlink: 'syz.0.1098': attribute type 1 has an invalid length.
[  164.380580][ T9577] netlink: 'syz.0.1098': attribute type 2 has an invalid length.
[  164.789914][ T9591] netlink: 'syz.2.1102': attribute type 13 has an invalid length.
[  164.795718][ T9591] netlink: 'syz.2.1102': attribute type 58 has an invalid length.
[  164.799495][ T9591] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1102'.
[  165.187704][ T9619] netlink: 'syz.0.1111': attribute type 7 has an invalid length.
[  165.191015][ T9619] netlink: 'syz.0.1111': attribute type 8 has an invalid length.
[  165.207740][ T9619] netlink: 'syz.0.1111': attribute type 10 has an invalid length.
[  165.223948][ T9619] : entered promiscuous mode
[  165.232446][ T9619] bridge0: port 3() entered blocking state
[  165.249465][ T9619] bridge0: port 3() entered disabled state
[  165.253980][ T9619] : entered allmulticast mode
[  165.265102][ T9619] bridge0: port 3() entered blocking state
[  165.267934][ T9619] bridge0: port 3() entered forwarding state
[  165.377723][ T9622] netlink: 'syz.2.1110': attribute type 2 has an invalid length.
[  165.626498][ T9642] netlink: 'syz.1.1114': attribute type 12 has an invalid length.
[  166.754633][ T9670] lo speed is unknown, defaulting to 1000
[  166.807311][ T9670] wlan1 speed is unknown, defaulting to 1000
[  167.461458][ T9695] delete_channel: no stack
[  167.563048][ T9704] lo speed is unknown, defaulting to 1000
[  167.566172][ T9704] wlan1 speed is unknown, defaulting to 1000
[  168.824917][ T9735] __nla_validate_parse: 8 callbacks suppressed
[  168.824931][ T9735] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1146'.
[  168.831537][ T9735] tc_dump_action: action bad kind
[  169.798908][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  169.805275][ T9751] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  169.809374][ T9751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.008467][ T9755] validate_nla: 3 callbacks suppressed
[  170.008523][ T9755] netlink: 'syz.0.1152': attribute type 1 has an invalid length.
[  170.015734][ T9755] netlink: 'syz.0.1152': attribute type 1 has an invalid length.
[  170.078231][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1154'.
[  170.114239][ T9761] netlink: 'syz.2.1153': attribute type 21 has an invalid length.
[  170.592682][ T9772] netlink: 'syz.0.1156': attribute type 1 has an invalid length.
[  170.936541][ T9784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.120718][ T9792] tap0: tun_chr_ioctl cmd 1074025672
[  171.123462][ T9792] tap0: ignored: set checksum enabled
[  171.435440][   T55] Bluetooth: hci0: Dropping invalid advertising data
[  171.438649][   T55] Bluetooth: hci0: Malformed LE Event: 0x02
[  171.468391][ T9805] delete_channel: no stack
[  171.842669][ T9833] netlink: 'syz.1.1174': attribute type 27 has an invalid length.
[  171.850016][ T9833] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1174'.
[  171.916233][ T9839] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1176'.
[  172.147624][ T9842] netlink: 'syz.0.1177': attribute type 13 has an invalid length.
[  172.215713][ T9848] netlink: 'syz.0.1179': attribute type 4 has an invalid length.
[  175.429284][ T9877] netlink: 'syz.2.1188': attribute type 1 has an invalid length.
[  175.432855][ T9877] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1188'.
[  175.472184][ T9879] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1189'.
[  175.985497][ T9909] xt_socket: unknown flags 0x20
[  176.010819][ T9908] lo speed is unknown, defaulting to 1000
[  176.024502][ T9908] wlan1 speed is unknown, defaulting to 1000
[  176.595965][ T9950] netlink: 147608 bytes leftover after parsing attributes in process `syz.2.1208'.
[  176.601336][ T9950] netlink: 61831 bytes leftover after parsing attributes in process `syz.2.1208'.
[  176.628402][ T9952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1209'.
[  176.711108][ T9958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1210'.
[  176.716864][ T9958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1210'.
[  177.011261][ T9970] openvswitch: netlink: IP tunnel TTL not specified.
[  177.132774][ T9984] netlink: 'syz.1.1218': attribute type 21 has an invalid length.
[  177.136930][ T9984] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1218'.
[  177.299181][ T9999] netlink: 'syz.1.1223': attribute type 21 has an invalid length.
[  177.302185][ T9999] netlink: 'syz.1.1223': attribute type 4 has an invalid length.
[  177.406805][T10005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.477412][T10008] netlink: 'syz.0.1227': attribute type 10 has an invalid length.
[  177.527473][T10008] bridge0: port 3() entered disabled state
[  177.533530][T10008] : left allmulticast mode
[  177.540342][T10008] : left promiscuous mode
[  177.543464][T10008] bridge0: port 3() entered disabled state
[  177.590994][T10008] bond0: (slave ): Enslaving as an active interface with an up link
[  177.621179][T10019] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  177.629826][T10017] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  177.633271][T10017] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  177.642289][T10017] netlink: 'syz.1.1231': attribute type 29 has an invalid length.
[  178.123448][T10048] netlink: 'syz.0.1238': attribute type 19 has an invalid length.
[  178.126137][T10048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1238'.
[  179.006251][T10070] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1244'.
[  179.351668][T10082] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  179.355774][T10082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.803267][T10104] syzkaller0: entered promiscuous mode
[  179.805184][T10104] syzkaller0: entered allmulticast mode
[  180.669123][T10107] validate_nla: 3 callbacks suppressed
[  180.669133][T10107] netlink: 'syz.1.1258': attribute type 4 has an invalid length.
[  180.773879][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  180.783324][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  180.903806][T10138] __nla_validate_parse: 5 callbacks suppressed
[  180.903819][T10138] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1264'.
[  180.910574][T10137] netlink: 'syz.2.1264': attribute type 21 has an invalid length.
[  180.991235][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'.
[  181.007012][T10145] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  181.064984][T10152] tc_dump_action: action bad kind
[  181.481898][T10165] lo speed is unknown, defaulting to 1000
[  182.434444][T10192] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1283'.
[  182.439190][T10192] netlink: zone id is out of range
[  182.441263][T10192] netlink: zone id is out of range
[  182.447526][T10192] netlink: zone id is out of range
[  182.449932][T10192] netlink: zone id is out of range
[  182.452859][T10192] netlink: zone id is out of range
[  182.456675][T10192] netlink: zone id is out of range
[  182.458493][T10192] netlink: zone id is out of range
[  182.460374][T10192] netlink: zone id is out of range
[  182.462204][T10192] netlink: zone id is out of range
[  182.464745][T10192] netlink: zone id is out of range
[  182.476225][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  182.480503][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  182.486086][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1285'.
[  182.603160][T10204] syz.2.1283 (10204) used obsolete PPPIOCDETACH ioctl
[  183.047262][T10225] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1292'.
[  183.050702][T10218] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1292'.
[  183.054241][T10225] xt_l2tp: v2 sid > 0xffff: 1114112
[  183.057627][T10224] netlink: 798 bytes leftover after parsing attributes in process `syz.2.1293'.
[  183.102644][T10229] bpf: Bad value for 'uid'
[  183.388204][T10251] netlink: 'syz.2.1301': attribute type 1 has an invalid length.
[  183.391657][T10251] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1301'.
[  185.371462][T10281] netlink: 'syz.0.1309': attribute type 2 has an invalid length.
[  185.502214][T10286] netlink: 'syz.0.1312': attribute type 2 has an invalid length.
[  185.513708][T10286] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  185.517386][T10286] block nbd5: not configured, cannot reconfigure
[  185.758474][T10304] veth1_macvtap: left promiscuous mode
[  185.760436][T10304] macsec0: entered allmulticast mode
[  185.768166][T10305] veth1_macvtap: entered promiscuous mode
[  185.770374][T10305] veth1_macvtap: entered allmulticast mode
[  185.772581][T10305] macsec0: entered promiscuous mode
[  185.911237][   T33] audit: type=1107 audit(1758659921.336:7): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  186.555933][T10321] rdma_rxe: rxe_newlink: failed to add lo
[  189.111372][T10403] netlink: 'syz.0.1348': attribute type 3 has an invalid length.
[  189.117416][T10403] __nla_validate_parse: 9 callbacks suppressed
[  189.117489][T10403] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1348'.
[  189.152002][T10405] netlink: 'syz.2.1346': attribute type 3 has an invalid length.
[  189.156105][T10405] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.1346'.
[  189.160085][T10406] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1348'.
[  189.196311][T10406] bond0: (slave ): Releasing backup interface
[  189.317070][T10416] netlink: 'syz.2.1352': attribute type 2 has an invalid length.
[  189.433459][T10423] lo speed is unknown, defaulting to 1000
[  189.437661][T10423] wlan1 speed is unknown, defaulting to 1000
[  189.534682][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1353'.
[  189.570659][T10431] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1353'.
[  189.630711][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1353'.
[  189.636894][T10431] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1353'.
[  189.651521][T10431] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1353'.
[  190.787724][T10474] netlink: 'syz.1.1368': attribute type 1 has an invalid length.
[  190.790457][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'.
[  190.802354][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'.
[  191.753423][T10480] syzkaller0: entered promiscuous mode
[  191.755862][T10480] syzkaller0: entered allmulticast mode
[  192.877485][T10505] netlink: 'syz.2.1374': attribute type 3 has an invalid length.
[  192.920986][T10507] tc_dump_action: action bad kind
[  193.662821][T10500] syzkaller0: entered promiscuous mode
[  193.665354][T10500] syzkaller0: entered allmulticast mode
[  193.680764][T10508] tc_dump_action: action bad kind
[  194.056044][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.059110][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.109439][T10565] __nla_validate_parse: 3 callbacks suppressed
[  195.109448][T10565] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1393'.
[  195.366126][T10581] netlink: 'syz.1.1396': attribute type 33 has an invalid length.
[  195.368817][T10581] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1396'.
[  195.447133][T10572] delete_channel: no stack
[  195.450650][T10572] delete_channel: no stack
[  195.702069][T10594] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1403'.
[  195.740207][T10594] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1403'.
[  195.781237][T10598] net_ratelimit: 75 callbacks suppressed
[  195.781247][T10598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.792397][T10594] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1403'.
[  195.919355][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1407'.
[  196.381689][T10636] netlink: 'syz.2.1416': attribute type 1 has an invalid length.
[  196.388178][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1416'.
[  196.619983][T10647] netlink: 'syz.2.1420': attribute type 13 has an invalid length.
[  196.622593][T10647] netlink: 'syz.2.1420': attribute type 58 has an invalid length.
[  196.625138][T10647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1420'.
[  196.657415][T10650] netlink: 'syz.1.1421': attribute type 4 has an invalid length.
[  196.660250][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'.
[  197.009786][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  197.063456][T10674] netlink: 'syz.1.1428': attribute type 10 has an invalid length.
[  197.075435][T10674] bond0: (slave bond_slave_0): Releasing backup interface
[  197.296820][T10681] lo speed is unknown, defaulting to 1000
[  197.299608][T10681] wlan1 speed is unknown, defaulting to 1000
[  197.557965][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.646348][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.714856][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.780108][ T5859] batman_adv: batadv0: Removing interface: netdevsim0
[  197.785243][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.796316][T10712] netlink: 'syz.1.1439': attribute type 10 has an invalid length.
[  197.910667][T10714] nft_compat: unsupported protocol 0
[  197.939964][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  197.948302][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  197.953675][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  197.958376][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  197.967669][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.139961][T10712] team0 (unregistering): Port device team_slave_0 removed
[  198.170331][T10712] team0 (unregistering): Port device team_slave_1 removed
[  198.356800][T10715] lo speed is unknown, defaulting to 1000
[  198.371715][T10715] wlan1 speed is unknown, defaulting to 1000
[  198.401250][ T5859] bridge0: port 3(team0) entered disabled state
[  198.440711][ T5859] bridge_slave_1: left allmulticast mode
[  198.442687][ T5859] bridge_slave_1: left promiscuous mode
[  198.445180][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.454683][ T5859] bridge_slave_0: left promiscuous mode
[  198.459391][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.647947][ T5859] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  198.799828][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.805024][ T5859] bond0 (unregistering): Released all slaves
[  199.452748][  T794] wlan1 speed is unknown, defaulting to 1000
[  199.465926][T10715] chnl_net:caif_netlink_parms(): no params data found
[  199.571691][T10715] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.575511][T10715] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.578711][T10715] bridge_slave_0: entered allmulticast mode
[  199.582648][T10715] bridge_slave_0: entered promiscuous mode
[  199.616333][T10715] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.619481][T10715] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.622755][T10715] bridge_slave_1: entered allmulticast mode
[  199.628956][T10715] bridge_slave_1: entered promiscuous mode
[  199.709645][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.751301][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.916564][T10715] team0: Port device team_slave_0 added
[  199.921103][T10715] team0: Port device team_slave_1 added
[  199.949655][ T5859] hsr_slave_0: left promiscuous mode
[  199.952772][ T5859] hsr_slave_1: left promiscuous mode
[  199.955614][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.958658][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.972037][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.975325][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.992221][ T5859] veth1_macvtap: left promiscuous mode
[  199.996462][ T5859] veth0_macvtap: left promiscuous mode
[  199.999528][ T5859] veth1_vlan: left promiscuous mode
[  200.002263][ T5859] veth0_vlan: left promiscuous mode
[  200.053198][ T5238] Bluetooth: hci2: command tx timeout
[  200.169598][  T133] smc: removing ib device syz1
[  200.332645][T10773] netlink: 'syz.1.1451': attribute type 21 has an invalid length.
[  200.335695][T10773] netlink: 'syz.1.1451': attribute type 15 has an invalid length.
[  200.338410][T10773] __nla_validate_parse: 4 callbacks suppressed
[  200.338416][T10773] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1451'.
[  200.345117][T10773] IPv6: NLM_F_CREATE should be specified when creating new route
[  200.348752][T10773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.352013][T10773] IPv6: NLM_F_CREATE should be set when creating new route
[  200.355704][T10773] IPv6: NLM_F_CREATE should be set when creating new route
[  200.358830][T10773] IPv6: NLM_F_CREATE should be set when creating new route
[  200.366013][ T5859] team_slave_1 (unregistering): left promiscuous mode
[  200.368490][ T5859] team_slave_1 (unregistering): left allmulticast mode
[  200.371443][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  200.392011][ T5859] team_slave_0 (unregistering): left promiscuous mode
[  200.394872][ T5859] team_slave_0 (unregistering): left allmulticast mode
[  200.400549][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  200.680888][   T47] ==================================================================
[  200.684371][   T47] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  200.688166][   T47] Read of size 8 at addr ffff88811afbe2e8 by task kworker/1:1/47
[  200.692057][   T47] 
[  200.693126][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  200.693141][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.693149][   T47] Workqueue: events smc_ib_port_event_work
[  200.693164][   T47] Call Trace:
[  200.693170][   T47]  <TASK>
[  200.693175][   T47]  dump_stack_lvl+0x189/0x250
[  200.693190][   T47]  ? rcu_is_watching+0x15/0xb0
[  200.693201][   T47]  ? __kasan_check_byte+0x12/0x40
[  200.693217][   T47]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.693229][   T47]  ? rcu_is_watching+0x15/0xb0
[  200.693239][   T47]  ? lock_release+0x4b/0x3e0
[  200.693255][   T47]  ? __virt_addr_valid+0x1c8/0x5c0
[  200.693269][   T47]  ? __virt_addr_valid+0x4a5/0x5c0
[  200.693283][   T47]  print_report+0xca/0x240
[  200.693293][   T47]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  200.693308][   T47]  kasan_report+0x118/0x150
[  200.693319][   T47]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  200.693335][   T47]  __ethtool_get_link_ksettings+0x6e/0x190
[  200.693351][   T47]  ib_get_eth_speed+0x15e/0x7b0
[  200.693366][   T47]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  200.693383][   T47]  ? do_raw_spin_unlock+0x4d/0x240
[  200.693398][   T47]  rxe_query_port+0x93/0x3b0
[  200.693412][   T47]  ib_query_port+0x170/0x830
[  200.693428][   T47]  smc_ib_port_event_work+0x15a/0x940
[  200.693442][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.693453][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  200.693464][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  200.693475][   T47]  process_scheduled_works+0xae1/0x17b0
[  200.693493][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  200.693508][   T47]  worker_thread+0x8a0/0xda0
[  200.693525][   T47]  kthread+0x711/0x8a0
[  200.693537][   T47]  ? __pfx_worker_thread+0x10/0x10
[  200.693547][   T47]  ? __pfx_kthread+0x10/0x10
[  200.693560][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.693570][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.693582][   T47]  ? __pfx_kthread+0x10/0x10
[  200.693594][   T47]  ret_from_fork+0x439/0x7d0
[  200.693607][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  200.693619][   T47]  ? __switch_to_asm+0x39/0x70
[  200.693631][   T47]  ? __switch_to_asm+0x33/0x70
[  200.693643][   T47]  ? __pfx_kthread+0x10/0x10
[  200.693656][   T47]  ret_from_fork_asm+0x1a/0x30
[  200.693673][   T47]  </TASK>
[  200.693676][   T47] 
[  200.789293][   T47] Allocated by task 5852:
[  200.791159][   T47]  kasan_save_track+0x3e/0x80
[  200.793145][   T47]  __kasan_kmalloc+0x93/0xb0
[  200.795093][   T47]  __kvmalloc_node_noprof+0x30d/0x5f0
[  200.797409][   T47]  alloc_netdev_mqs+0xa3/0x11b0
[  200.799541][   T47]  rtnl_create_link+0x31f/0xd10
[  200.801674][   T47]  rtnl_newlink_create+0x25c/0xb00
[  200.803887][   T47]  rtnl_newlink+0x16d6/0x1c70
[  200.805918][   T47]  rtnetlink_rcv_msg+0x7cf/0xb70
[  200.808058][   T47]  netlink_rcv_skb+0x208/0x470
[  200.810170][   T47]  netlink_unicast+0x82f/0x9e0
[  200.812223][   T47]  netlink_sendmsg+0x805/0xb30
[  200.814267][   T47]  __sock_sendmsg+0x21c/0x270
[  200.816301][   T47]  __sys_sendto+0x3bd/0x520
[  200.818243][   T47]  __x64_sys_sendto+0xde/0x100
[  200.820272][   T47]  do_syscall_64+0xfa/0x3b0
[  200.822241][   T47]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.824741][   T47] 
[  200.825772][   T47] Freed by task 5859:
[  200.827488][   T47]  kasan_save_track+0x3e/0x80
[  200.829451][   T47]  kasan_save_free_info+0x46/0x50
[  200.831557][   T47]  __kasan_slab_free+0x5b/0x80
[  200.833557][   T47]  kfree+0x18e/0x440
[  200.835176][   T47]  device_release+0x9c/0x1c0
[  200.837065][   T47]  kobject_put+0x22b/0x480
[  200.838979][   T47]  netdev_run_todo+0xd2e/0xea0
[  200.841042][   T47]  default_device_exit_batch+0x81e/0x890
[  200.843445][   T47]  ops_undo_list+0x525/0x990
[  200.845430][   T47]  cleanup_net+0x4c5/0x800
[  200.847314][   T47]  process_scheduled_works+0xae1/0x17b0
[  200.849634][   T47]  worker_thread+0x8a0/0xda0
[  200.851640][   T47]  kthread+0x711/0x8a0
[  200.853417][   T47]  ret_from_fork+0x439/0x7d0
[  200.855408][   T47]  ret_from_fork_asm+0x1a/0x30
[  200.857492][   T47] 
[  200.858570][   T47] The buggy address belongs to the object at ffff88811afbe000
[  200.858570][   T47]  which belongs to the cache kmalloc-cg-4k of size 4096
[  200.864589][   T47] The buggy address is located 744 bytes inside of
[  200.864589][   T47]  freed 4096-byte region [ffff88811afbe000, ffff88811afbf000)
[  200.870364][   T47] 
[  200.871207][   T47] The buggy address belongs to the physical page:
[  200.873953][   T47] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11afb8
[  200.877727][   T47] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  200.881022][   T47] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  200.883724][   T47] page_type: f5(slab)
[  200.885422][   T47] raw: 057ff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  200.888694][   T47] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  200.892255][   T47] head: 057ff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  200.895585][   T47] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  200.898887][   T47] head: 057ff00000000003 ffffea00046bee01 00000000ffffffff 00000000ffffffff
[  200.902239][   T47] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  200.905755][   T47] page dumped because: kasan: bad access detected
[  200.908402][   T47] page_owner tracks the page as allocated
[  200.910619][   T47] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5852, tgid 5852 (syz-executor), ts 56148301512, free_ts 0
[  200.918140][   T47]  post_alloc_hook+0x240/0x2a0
[  200.919978][   T47]  get_page_from_freelist+0x21e4/0x22c0
[  200.922229][   T47]  __alloc_frozen_pages_noprof+0x181/0x370
[  200.924733][   T47]  alloc_pages_mpol+0x232/0x4a0
[  200.926899][   T47]  allocate_slab+0x8a/0x370
[  200.928921][   T47]  ___slab_alloc+0xbeb/0x1420
[  200.930814][   T47]  __kmalloc_cache_noprof+0x296/0x3d0
[  200.933193][   T47]  ipv6_add_dev+0x6ca/0x1370
[  200.935200][   T47]  addrconf_notify+0x794/0x1010
[  200.937223][   T47]  notifier_call_chain+0x1b6/0x3e0
[  200.939398][   T47]  register_netdevice+0x1608/0x1ae0
[  200.941630][   T47]  virt_wifi_newlink+0x428/0x860
[  200.943759][   T47]  rtnl_newlink_create+0x310/0xb00
[  200.946037][   T47]  rtnl_newlink+0x16d6/0x1c70
[  200.948111][   T47]  rtnetlink_rcv_msg+0x7cf/0xb70
[  200.950277][   T47]  netlink_rcv_skb+0x208/0x470
[  200.952363][   T47] page_owner free stack trace missing
[  200.954622][   T47] 
[  200.955666][   T47] Memory state around the buggy address:
[  200.957759][   T47]  ffff88811afbe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.960800][   T47]  ffff88811afbe200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.963921][   T47] >ffff88811afbe280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.967014][   T47]                                                           ^
[  200.969780][   T47]  ffff88811afbe300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.972599][   T47]  ffff88811afbe380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.975232][   T47] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  200.987061][   T47] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  200.989650][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  200.992607][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.996343][   T47] Workqueue: events smc_ib_port_event_work
[  200.998704][   T47] Call Trace:
[  201.000124][   T47]  <TASK>
[  201.001378][   T47]  dump_stack_lvl+0x99/0x250
[  201.003315][   T47]  ? __asan_memcpy+0x40/0x70
[  201.005263][   T47]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.007335][   T47]  ? __pfx__printk+0x10/0x10
[  201.009138][   T47]  vpanic+0x281/0x750
[  201.010628][   T47]  ? preempt_schedule+0xae/0xc0
[  201.012653][   T47]  ? __pfx_vpanic+0x10/0x10
[  201.014593][   T47]  ? preempt_schedule_common+0x83/0xd0
[  201.016807][   T47]  ? preempt_schedule+0xae/0xc0
[  201.018943][   T47]  ? __pfx_preempt_schedule+0x10/0x10
[  201.021192][   T47]  panic+0xb9/0xc0
[  201.022779][   T47]  ? __pfx_panic+0x10/0x10
[  201.024698][   T47]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  201.027209][   T47]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  201.029664][   T47]  check_panic_on_warn+0x89/0xb0
[  201.031549][   T47]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  201.034062][   T47]  end_report+0x78/0x160
[  201.035910][   T47]  kasan_report+0x129/0x150
[  201.037791][   T47]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  201.040249][   T47]  __ethtool_get_link_ksettings+0x6e/0x190
[  201.042695][   T47]  ib_get_eth_speed+0x15e/0x7b0
[  201.044736][   T47]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  201.047031][   T47]  ? do_raw_spin_unlock+0x4d/0x240
[  201.049187][   T47]  rxe_query_port+0x93/0x3b0
[  201.051162][   T47]  ib_query_port+0x170/0x830
[  201.053136][   T47]  smc_ib_port_event_work+0x15a/0x940
[  201.055388][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.057584][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  201.060006][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  201.062408][   T47]  process_scheduled_works+0xae1/0x17b0
[  201.064728][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  201.067270][   T47]  worker_thread+0x8a0/0xda0
[  201.069109][   T47]  kthread+0x711/0x8a0
[  201.070745][   T47]  ? __pfx_worker_thread+0x10/0x10
[  201.072790][   T47]  ? __pfx_kthread+0x10/0x10
[  201.074667][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.076780][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.078781][   T47]  ? __pfx_kthread+0x10/0x10
[  201.080356][   T47]  ret_from_fork+0x439/0x7d0
[  201.081909][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  201.083713][   T47]  ? __switch_to_asm+0x39/0x70
[  201.085681][   T47]  ? __switch_to_asm+0x33/0x70
[  201.087582][   T47]  ? __pfx_kthread+0x10/0x10
[  201.089469][   T47]  ret_from_fork_asm+0x1a/0x30
[  201.091435][   T47]  </TASK>
[  201.093231][   T47] Kernel Offset: disabled
[  201.094639][   T47] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:38:56  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110040b2000 RBX=ffffffff8f53ab30 RCX=ffffffff819cf2f8 RDX=0000000000000000
RSI=0000000000000008 RDI=0000000000000001 RBP=1ffffffff1ea755c RSP=ffffc9000405f408
R8 =ffffffff8f53aae7 R9 =1ffffffff1ea755c R10=dffffc0000000000 R11=fffffbfff1ea755d
R12=ffffffff8f53aae0 R13=ffffffff8f53ab30 R14=dffffc0000000000 R15=ffff888104a98000
RIP=ffffffff819cf2eb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f55b674bfc8 CR3=0000000039f98000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f55b5ba7498 00007f55b5ba7470 XMM03=00007f55b5ba74a8 00007f55b5ba74a0
XMM04=00007f55b670d100 00007f55b5ba7460 XMM05=00007f55b5ba7478 00007f55b5ba74c0
XMM06=00007f55b5ba74b8 00007f55b5ba74b0 XMM07=00007f55b5ba74a8 00007f55b5ba74a0
XMM08=0000000000000000 00007f55b5a12f0f XMM09=0000000000000000 00007f55b5a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000075f0b0
R8 =ffff888107500237 R9 =1ffff11020ea0046 R10=dffffc0000000000 R11=ffffffff85501440
R12=dffffc0000000000 R13=ffffffff99b038ff R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff855014bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001e80 CR3=000000011f3b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000305f6576616c 735f766461746162
XMM02=00007ffcb52994f7 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000000000 XMM05=0000000000000000 00007ff56b212e7b
XMM06=0000000000000000 00007ff56b212e75 XMM07=0000000000000000 00007ff56b212e89
XMM08=0000000000000000 00007ff56b212f0f XMM09=0000000000000000 00007ff56b212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
