last executing test programs:

9m17.907440756s ago: executing program 2 (id=1436):
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd00, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

9m17.738352271s ago: executing program 0 (id=1440):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="7ac7a7ba4710f269665120d37b2557729aa18d544f874e914b26d25cd2ab17c4ea4fc8f73875918191f98daebe5bc941145e6e01f8a20dbcefa5ae048ad991aea161d8e843ff20fa48743cf34083c99531ca", 0x52}, {&(0x7f0000000100)="f32624e9895fcfb034e0ec9c11f0792d02249ee1a53621a338e6787baf0996619435e1f8fe4a777737bc18a08db3dfff68a71dc017b62f", 0x37}, {&(0x7f00000003c0)="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", 0x524}], 0x3}, 0x4008000)

9m17.660910355s ago: executing program 0 (id=1441):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14301, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0)

9m17.660391876s ago: executing program 2 (id=1443):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80400000004000100fe8000000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

9m17.590693092s ago: executing program 2 (id=1445):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

9m17.590403536s ago: executing program 0 (id=1446):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @remote})

9m17.527830542s ago: executing program 2 (id=1448):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0)

9m17.527625068s ago: executing program 0 (id=1449):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

9m17.52664991s ago: executing program 2 (id=1450):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @rand_addr=0x64010100, @empty}}}], 0x20}, 0x20014804)

9m17.526223339s ago: executing program 0 (id=1451):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0xb702, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

9m17.14685046s ago: executing program 2 (id=1452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f", 0x0, 0x104, 0x6000000000000000, 0xce, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9", 0x0}, 0x50)

9m17.041199143s ago: executing program 32 (id=1452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f", 0x0, 0x104, 0x6000000000000000, 0xce, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9", 0x0}, 0x50)

9m17.000717944s ago: executing program 0 (id=1454):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000280)=r2, 0x4)

9m16.96453704s ago: executing program 33 (id=1454):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000280)=r2, 0x4)

2m44.006161093s ago: executing program 4 (id=7315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)

2m44.006037142s ago: executing program 4 (id=7316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f0000000780)=@abs, 0x6e, 0x0}, 0x40002000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

2m42.952484553s ago: executing program 4 (id=7320):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000340), 0x4)

2m42.854339875s ago: executing program 4 (id=7323):
perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10410, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0)

2m42.632323389s ago: executing program 4 (id=7330):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)

2m42.582261442s ago: executing program 4 (id=7333):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

2m27.542626664s ago: executing program 34 (id=7333):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x0, 0x0, 0x7, 0x20}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xd, 0x6, 0x5, 0xea, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xd, 0x9, 0x8, 0xffffffffffffff00, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xb, 0x80000000, 0xfffffff7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x5, 0x5, 0x1, 0x4}, {0x5, 0x2, 0xa, 0x4}], 0x10, 0xe1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='afs_dir_check_failed\x00', r1, 0x0, 0x7}, 0x18)

1m31.075881017s ago: executing program 3 (id=8225):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x1000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xaa96)

1m31.006722685s ago: executing program 5 (id=8227):
openat$tun(0xffffffffffffff9c, 0x0, 0x565000, 0x0)

1m31.006419277s ago: executing program 3 (id=8228):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x3, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001080)='GPL\x00', 0x6, 0x2a, &(0x7f00000010c0)=""/42, 0x41000, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1m31.006027732s ago: executing program 5 (id=8229):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x1b, 0x7, 0x40, 0x42, 0x1}, 0x50)
socketpair(0x1f, 0x3, 0xfff, 0x0)

1m31.005803382s ago: executing program 3 (id=8230):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x900}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, &(0x7f0000000340)=""/34}, 0x20)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000006c0)={r1})
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0xffff7fff, 0x0, 0x2, 0x300}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff0012fe00632f77fbac141416ac14141602089f034d2f87e5070c0cab845013f2", 0x0, 0xfe, 0x60000000}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)

1m30.827703982s ago: executing program 5 (id=8231):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

1m30.827312142s ago: executing program 5 (id=8232):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0xe04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, 0x0)
sendmsg$kcm(r8, 0x0, 0x10)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x4308, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)

1m30.567453126s ago: executing program 3 (id=8233):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e000600000000000000fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3b090000009dd33e438c", 0xd8}], 0x1}, 0x0)

1m29.917136863s ago: executing program 3 (id=8235):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x10000)

1m29.806885635s ago: executing program 5 (id=8236):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r1, 0x0, 0x40)
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40020)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004804}, 0x4044800)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x40094)
write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xc)

1m29.806380873s ago: executing program 3 (id=8237):
r0 = socket$kcm(0xa, 0x2, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)

1m29.610752162s ago: executing program 35 (id=8237):
r0 = socket$kcm(0xa, 0x2, 0x3a)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)

1m29.380956056s ago: executing program 5 (id=8239):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x10, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

1m29.380620087s ago: executing program 36 (id=8239):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x10, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r4, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid()
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

1m19.462605102s ago: executing program 6 (id=8342):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580), 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m19.455466483s ago: executing program 6 (id=8344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x4000810)

1m19.364193621s ago: executing program 6 (id=8346):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

1m19.267591585s ago: executing program 6 (id=8349):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0x9, 0x0, 0x4, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x7, 0x8, 0x2, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f00000003c0), &(0x7f0000001d40)=r7}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r8, 0xffffffffffffffff, 0x29, 0x2010, 0x0, @value, @void, @void, @void, r6}, 0x20)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2b70696473206aa4af0b"], 0x6)
r9 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100)
recvmsg$kcm(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19ac721e4479cae500000004000000000000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r10, 0x0, 0x0}, 0x20)

1m18.365270983s ago: executing program 6 (id=8358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x30}}]}]}, 0xc0}}, 0x0)

1m18.234944856s ago: executing program 6 (id=8359):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2f1, 0x0, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb702, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, r0}, 0x10)

1m3.242518248s ago: executing program 37 (id=8359):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2f1, 0x0, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00')
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb702, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, r0}, 0x10)

45.861595317s ago: executing program 7 (id=8671):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a80)=""/248, 0xf8}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000003ac0)=""/4110, 0x100e}, {&(0x7f0000000c80)=""/193, 0xc1}, {&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f0000000600)=""/53, 0x35}, {&(0x7f0000000640)=""/283, 0x11b}], 0x8}, 0x20)
write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

43.9305093s ago: executing program 7 (id=8693):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000003000000090001000700000041"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0x8, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

43.930041243s ago: executing program 7 (id=8694):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0xfffc, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a)

43.739442007s ago: executing program 7 (id=8696):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x2, 0x20000000, 0x8, 0x0, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

43.658458838s ago: executing program 7 (id=8700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x36, 0x107, 0x0, 0x400, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

43.573869155s ago: executing program 7 (id=8702):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, r2, 0x6, 0xffffffffffffffff, 0xe)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x11)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x48a, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x0, r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x29, 0x1, 0x6, &(0x7f0000000500))

27.888185419s ago: executing program 38 (id=8702):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0xb702, 0x0)
r2 = syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, r2, 0x6, 0xffffffffffffffff, 0xe)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x11)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x0, 0x48a, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x0, r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair(0x29, 0x1, 0x6, &(0x7f0000000500))

1.696702324s ago: executing program 9 (id=9075):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0e00000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000980e25ed6f8fa7954c71dd05ff6dd142566a90fc5704d02f24dce36ebe43e2d884a1dcc7066a26de4e58063f52", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001680)=ANY=[@ANYBLOB], 0x0, 0x88, 0x0, 0x0, 0x101}, 0x28)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x66, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

733.63924ms ago: executing program 9 (id=9081):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003900070125bd7000fcdbdf25027c0000100001800cdd40"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010)

680.994887ms ago: executing program 8 (id=9082):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

680.847866ms ago: executing program 9 (id=9083):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000e1ffffff8500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

680.488205ms ago: executing program 8 (id=9084):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

629.852995ms ago: executing program 1 (id=9085):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x10b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000001, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0)

629.522099ms ago: executing program 1 (id=9086):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20)

569.694854ms ago: executing program 9 (id=9087):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)={'veth0_virt_wifi', 0x32, 0x30}, 0x12)

569.171236ms ago: executing program 8 (id=9088):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088471b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

514.324787ms ago: executing program 8 (id=9089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000404000000000000000000611233000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xf, 0x6, 0x200}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0xd, 0x8}, {0x1, 0x4, 0xd, 0x8}, {0x3, 0x2, 0x10, 0xc}, {0x5, 0x2, 0xb, 0x1}, {0x1, 0x2, 0xe, 0x2}, {0x1, 0x4, 0x10, 0x8}, {0x0, 0x2, 0x3, 0x4}, {0x2, 0x3, 0xb}, {0x5, 0x4, 0x1, 0xc}, {0x0, 0x5, 0x8, 0x9}], 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000410000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
socket$kcm(0x29, 0x7, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000008000000010000008000000096c709b16707be355d6a49d11ed0fe29c6bc4fd2953dfe525a731595e6f2c6641666decbbaa436acadd29bd407ed07f6146787f0d84b3aa0f7df", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x159300, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
close(0x3)

513.897803ms ago: executing program 9 (id=9090):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380)}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x5c, 0xf8, 0x9, 0x0, 0xd, 0x0, 0x4, 0x19180, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x60, 0x2}, 0x10, 0xf9a7, 0x8, 0x3, 0x8000, 0x6, 0xbb25, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x9, r0, 0x2)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)=ANY=[])
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000003600fb50e3d0f15185e981db175d3c4a", 0x14}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, 0x0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x3106, 0x7, 0x3ad4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
r6 = getpid()
r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x10000, 0x8000000, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, r6, 0x0, r4, 0x2)
socket$kcm(0x2, 0x5, 0x84)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

513.518754ms ago: executing program 1 (id=9091):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

378.432619ms ago: executing program 1 (id=9092):
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x0, 0x8, 0x40103fe, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xbd, 0x2, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x4}, 0x1000, 0x7fff, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2000000000000378, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, 0x0}, 0x4c810)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000680)=""/100, 0x64, <r3=>0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x6, &(0x7f0000000b00)=ANY=[@ANYRES32], &(0x7f0000000440)='GPL\x00', 0x3, 0x6b, &(0x7f0000000480)=""/107, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})

290.273563ms ago: executing program 9 (id=9093):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xcb47f0b37d3315e9)
perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r3, 0x4004743c, 0xf0ff1f00000000)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90235fc60", 0x14}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x4000})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

230.704414ms ago: executing program 8 (id=9094):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0x0)

160.36681ms ago: executing program 1 (id=9095):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000880), 0x12)
write$cgroup_int(r1, &(0x7f00000003c0)=0x103, 0x12)

60.744743ms ago: executing program 1 (id=9096):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)

0s ago: executing program 8 (id=9097):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x4c}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000fcff000000000000000000850000002200000085000000070000009500000000000000e3b791f4a4a3972200e1d2acd44498f2cfbf4ae21867953463a9211404aa0e942d2460473901162b5db03303d2731c0e8ff5f76396f3a69ef52a00e8ae396de506de923c26c5bc87e3461c93cca3b186787c11d06d49d19896534d476fb6550cd031867572ce45503f6f46284b1ce64c582ae6c0e66319f800991ca2b186824cd560affec254ea32ac97873b303fdaa7cdbd52b2f10fc45beb3b5eb9b866fea3b1d06ecc"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203}, 0x25)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002480)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x2a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff26ba, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x0, 0x7, 0x0, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x63b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x8, 0xb, 0x5, 0xfffffffffffffe7b, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001440)='syzkaller\x00', 0x2, 0x27, &(0x7f0000001480)=""/39, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002300)={0x3, 0xe, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002500)=[r4, 0xffffffffffffffff, r5], &(0x7f0000002540)=[{0x1, 0x2, 0x10}], 0x10, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

kernel console output (not intermixed with test programs):

on all matching packets.
[  438.287803][T18287] netlink: 'syz.4.5185': attribute type 1 has an invalid length.
[  438.290954][T18287] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5185'.
[  438.371992][T18289] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5186'.
[  439.624512][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  439.627175][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  441.643542][T18388] netlink: 'syz.3.5219': attribute type 1 has an invalid length.
[  441.719872][T18394] __nla_validate_parse: 1 callbacks suppressed
[  441.719885][T18394] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5224'.
[  441.969948][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5228'.
[  442.015783][T18405] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.5229'.
[  442.520099][T18425] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.5238'.
[  442.561234][T18431] sit0: entered allmulticast mode
[  442.583634][T18431] sit0: entered promiscuous mode
[  443.471036][T18453] netlink: 147608 bytes leftover after parsing attributes in process `syz.1.5251'.
[  443.477640][T18453] netlink: 62239 bytes leftover after parsing attributes in process `syz.1.5251'.
[  443.583036][T18461] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5254'.
[  444.120246][T18497] : entered promiscuous mode
[  445.139452][T18543] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5292'.
[  445.144837][T18543] hsr0: entered promiscuous mode
[  445.148167][T18543] hsr0: entered allmulticast mode
[  445.152705][T18543] hsr_slave_0: entered allmulticast mode
[  445.159122][T18543] hsr_slave_1: entered allmulticast mode
[  445.922345][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5297'.
[  446.000481][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5302'.
[  446.199455][T18581] netlink: 'syz.3.5311': attribute type 2 has an invalid length.
[  446.202531][T18581] netlink: 'syz.3.5311': attribute type 8 has an invalid length.
[  447.829269][T18584] __nla_validate_parse: 1 callbacks suppressed
[  447.829285][T18584] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5312'.
[  447.917547][T18589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5314'.
[  448.386390][T18607] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5322'.
[  448.531013][T18613] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5325'.
[  448.558574][T18615] netlink: 'syz.3.5326': attribute type 10 has an invalid length.
[  449.220252][T18634] netlink: 'syz.1.5335': attribute type 10 has an invalid length.
[  449.223643][T18634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5335'.
[  449.411519][T18644] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.5340'.
[  449.612556][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5346'.
[  449.616081][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5346'.
[  450.212198][T18687] netlink: 'syz.3.5359': attribute type 29 has an invalid length.
[  450.217353][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5359'.
[  452.186464][T18718] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5373'.
[  452.546872][T18741] netlink: 'syz.4.5382': attribute type 39 has an invalid length.
[  453.440008][T18751] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5387'.
[  453.481425][T18753] netlink: 'syz.4.5388': attribute type 21 has an invalid length.
[  453.484792][T18753] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5388'.
[  453.488691][T18753] netlink: 'syz.4.5388': attribute type 5 has an invalid length.
[  453.491928][T18753] netlink: 'syz.4.5388': attribute type 6 has an invalid length.
[  453.496376][T18753] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5388'.
[  454.668425][T18806] netlink: 'syz.1.5413': attribute type 2 has an invalid length.
[  454.712676][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5414'.
[  455.190285][T18832] netlink: 'syz.4.5426': attribute type 29 has an invalid length.
[  455.193121][T18832] netlink: 'syz.4.5426': attribute type 3 has an invalid length.
[  455.200194][T18832] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5426'.
[  455.903445][   T33] audit: type=1107 audit(1756273290.741:9): pid=18854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  456.057045][T18863] syzkaller0: entered promiscuous mode
[  456.133945][T18863] syzkaller0: entered allmulticast mode
[  456.199021][T18870] netlink: 'syz.4.5444': attribute type 10 has an invalid length.
[  456.420087][T18873] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  457.627011][T18870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.637185][T18870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.739108][T18894] TCP: TCP_TX_DELAY enabled
[  457.986940][T18915] netlink: 'syz.1.5462': attribute type 13 has an invalid length.
[  457.989988][T18915] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.5462'.
[  459.126407][T18979] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5478'.
[  459.239104][T18983] netlink: 'syz.3.5491': attribute type 27 has an invalid length.
[  459.241889][T18983] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5491'.
[  459.404965][T18993] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5494'.
[  459.436326][T18995] netlink: 'syz.4.5496': attribute type 11 has an invalid length.
[  459.438962][T18995] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.5496'.
[  459.508070][T19001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.512845][T19002] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5499'.
[  460.076692][T19006] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5498'.
[  460.081413][T19006] netlink: 'syz.1.5498': attribute type 10 has an invalid length.
[  460.085216][T19006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5498'.
[  460.088835][T19006] team0: entered promiscuous mode
[  460.090908][T19006] team_slave_0: entered promiscuous mode
[  460.094911][T19006] team_slave_1: entered promiscuous mode
[  460.097620][T19006] team0: entered allmulticast mode
[  460.099881][T19006] team_slave_0: entered allmulticast mode
[  460.102198][T19006] team_slave_1: entered allmulticast mode
[  460.144109][T19006] bridge0: port 3(team0) entered blocking state
[  460.148838][T19006] bridge0: port 3(team0) entered disabled state
[  460.156691][T19006] bridge0: port 3(team0) entered blocking state
[  460.159461][T19006] bridge0: port 3(team0) entered forwarding state
[  460.382503][T19008] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5501'.
[  460.431286][T19010] netlink: 'syz.1.5502': attribute type 12 has an invalid length.
[  460.440889][T19010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5502'.
[  460.640897][T19026] netlink: 'syz.3.5510': attribute type 64 has an invalid length.
[  460.746624][T19036] netlink: 'syz.4.5514': attribute type 3 has an invalid length.
[  460.985715][T19048] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5519'.
[  461.262483][T19054] tun0: tun_chr_ioctl cmd 1074025677
[  461.264957][T19054] tun0: linktype set to 270
[  461.677103][T19071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.539769][T19126] IPv6: NLM_F_CREATE should be specified when creating new route
[  462.762190][T19128] syzkaller0: entered promiscuous mode
[  462.767910][T19128] syzkaller0: entered allmulticast mode
[  463.242181][T19154] openvswitch: : Dropping previously announced user features
[  463.404195][T19161] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  463.549583][T19177] netlink: 'syz.1.5575': attribute type 28 has an invalid length.
[  463.556476][T19177] netlink: 'syz.1.5575': attribute type 4 has an invalid length.
[  463.747460][T19189] netlink: 'syz.1.5582': attribute type 22 has an invalid length.
[  463.781259][T19193] netlink: 'syz.4.5584': attribute type 1 has an invalid length.
[  464.126805][T19226] netlink: 'syz.3.5600': attribute type 1 has an invalid length.
[  464.129899][T19226] netlink: 'syz.3.5600': attribute type 4 has an invalid length.
[  464.134518][T19226] __nla_validate_parse: 12 callbacks suppressed
[  464.134531][T19226] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5600'.
[  464.430210][T19251] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5613'.
[  464.432322][T19254] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.5612'.
[  465.586952][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5624'.
[  465.799608][T19289] netlink: 11382 bytes leftover after parsing attributes in process `syz.4.5630'.
[  465.858770][T19294] validate_nla: 3 callbacks suppressed
[  465.858783][T19294] netlink: 'syz.4.5632': attribute type 21 has an invalid length.
[  465.873079][T19295] netlink: 211 bytes leftover after parsing attributes in process `syz.3.5628'.
[  466.680283][T19330] netlink: 'syz.3.5648': attribute type 4 has an invalid length.
[  466.684576][T19330] netlink: 'syz.3.5648': attribute type 10 has an invalid length.
[  466.750362][T19336] netlink: zone id is out of range
[  466.752010][T19336] netlink: zone id is out of range
[  466.753947][T19336] netlink: zone id is out of range
[  466.755671][T19336] netlink: zone id is out of range
[  466.757269][T19336] netlink: zone id is out of range
[  466.758855][T19336] netlink: zone id is out of range
[  466.760517][T19336] netlink: zone id is out of range
[  466.762107][T19336] netlink: zone id is out of range
[  466.763793][T19336] netlink: zone id is out of range
[  466.765601][T19336] netlink: zone id is out of range
[  466.835217][T19345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5655'.
[  467.558546][T19367] netlink: 'syz.3.5665': attribute type 1 has an invalid length.
[  469.800327][T19394] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5676'.
[  472.919470][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5682'.
[  473.256010][T19440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5694'.
[  473.262705][T19440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5694'.
[  473.403087][T19446] net_ratelimit: 78 callbacks suppressed
[  473.403102][T19446] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  474.165789][T19476] netlink: 'syz.1.5704': attribute type 13 has an invalid length.
[  474.483015][T19491] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5711'.
[  475.634806][T19529] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5727'.
[  475.697451][T19533] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5729'.
[  475.742937][T19533] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5729'.
[  475.807642][T19535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5730'.
[  475.814355][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5730'.
[  475.979307][T19538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5730'.
[  476.016867][T19538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5730'.
[  476.021497][T19538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5730'.
[  476.366641][ T5849] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  476.415363][T19562] openvswitch: netlink: Missing valid actions attribute.
[  476.426331][T19562] openvswitch: netlink: Actions may not be safe on all matching packets
[  477.280115][T19592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5755'.
[  477.286396][T19592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5755'.
[  477.288392][T19586] netlink: 'syz.4.5752': attribute type 10 has an invalid length.
[  478.033080][T19623] netlink: 'syz.3.5766': attribute type 4 has an invalid length.
[  478.393454][ T5849] Bluetooth: hci1: command tx timeout
[  478.651045][T19649] netlink: 'syz.4.5778': attribute type 10 has an invalid length.
[  479.040892][T19680] netlink: 'syz.3.5792': attribute type 39 has an invalid length.
[  479.290879][T19707] netlink: 'syz.4.5805': attribute type 6 has an invalid length.
[  480.974020][T19732] __nla_validate_parse: 10 callbacks suppressed
[  480.974037][T19732] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5816'.
[  480.980926][T19732] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  481.134655][T19742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5818'.
[  481.427719][T19748] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5822'.
[  482.418228][T19787] openvswitch: netlink: Flow actions attr not present in new flow.
[  482.427004][T19787] syzkaller0: entered promiscuous mode
[  482.830720][T19813] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5852'.
[  482.838342][T19813] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  482.841460][T19813] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  482.910132][T19821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5856'.
[  483.011067][ T5849] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  483.031887][T19822] netlink: zone id is out of range
[  483.064901][T19831] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5860'.
[  483.152353][T19835] netlink: 'syz.4.5862': attribute type 21 has an invalid length.
[  483.152376][T19835] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5862'.
[  483.238512][T19822] netlink: zone id is out of range
[  483.248688][T19822] netlink: zone id is out of range
[  484.062925][T19865] netlink: 'syz.3.5874': attribute type 3 has an invalid length.
[  484.066683][T19865] netlink: 'syz.3.5874': attribute type 1 has an invalid length.
[  484.069877][T19865] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5874'.
[  484.217073][T19871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5876'.
[  484.220674][T19871] netlink: 46 bytes leftover after parsing attributes in process `syz.3.5876'.
[  484.704616][T19888] netlink: 'syz.1.5885': attribute type 10 has an invalid length.
[  484.709093][T19888] bridge0: port 3(team0) entered disabled state
[  484.715166][T19888] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.721771][T19888] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.806998][T19888] bridge0: port 3(team0) entered blocking state
[  484.809588][T19888] bridge0: port 3(team0) entered forwarding state
[  484.812247][T19888] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.814910][T19888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.818060][T19888] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.820602][T19888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.848963][T19888] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  485.277582][T19918] netlink: 'syz.1.5898': attribute type 2 has an invalid length.
[  485.280616][ T5849] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  485.280696][T19918] netlink: 'syz.1.5898': attribute type 8 has an invalid length.
[  485.461082][T19936] nftables ruleset with unbound set
[  485.632189][T19949] netlink: 'syz.4.5913': attribute type 30 has an invalid length.
[  485.737334][T19959] tap0: tun_chr_ioctl cmd 1074025677
[  485.739639][T19959] tap0: linktype set to 0
[  485.936566][T19966] netlink: 'syz.4.5921': attribute type 1 has an invalid length.
[  486.302125][T19974] netlink: 'syz.3.5925': attribute type 10 has an invalid length.
[  486.311416][T19974] __nla_validate_parse: 6 callbacks suppressed
[  486.311433][T19974] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5925'.
[  486.388224][T19983] veth0_vlan: entered allmulticast mode
[  486.837120][T20010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5938'.
[  486.844412][T20010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5938'.
[  486.848200][T20010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5938'.
[  486.962906][ T5849] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  487.097857][T20023] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5945'.
[  489.027671][T20066] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5963'.
[  489.046436][ T5849] Bluetooth: hci1: command tx timeout
[  489.394606][T20082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5970'.
[  489.423734][T20084] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5971'.
[  489.470847][T20084] netlink: 'syz.4.5971': attribute type 11 has an invalid length.
[  489.479579][T20084] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.5971'.
[  489.488790][T20088] netlink: 'syz.1.5973': attribute type 2 has an invalid length.
[  489.491401][T20088] netlink: 'syz.1.5973': attribute type 7 has an invalid length.
[  489.498554][T20088] netlink: 85 bytes leftover after parsing attributes in process `syz.1.5973'.
[  489.501688][T20088] netlink: 'syz.1.5973': attribute type 2 has an invalid length.
[  489.506258][T20088] netlink: 'syz.1.5973': attribute type 7 has an invalid length.
[  489.542588][T20090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  489.922845][T20127] sock: sock_set_timeout: `syz.1.5992' (pid 20127) tries to set negative timeout
[  489.992559][T20131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.072467][T20138] netlink: 'syz.1.5997': attribute type 1 has an invalid length.
[  490.307297][T20148] netlink: 'syz.1.6002': attribute type 29 has an invalid length.
[  490.311562][T20150] netlink: 'syz.3.6003': attribute type 32 has an invalid length.
[  490.324771][T20148] netlink: 'syz.1.6002': attribute type 10 has an invalid length.
[  490.361095][T20148] team0: Device bond0 is already an upper device of the team interface
[  491.269864][T20215] netlink: 'syz.1.6030': attribute type 4 has an invalid length.
[  491.373116][T20220] netlink: 'syz.4.6031': attribute type 10 has an invalid length.
[  491.376224][T20220] __nla_validate_parse: 5 callbacks suppressed
[  491.376233][T20220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6031'.
[  491.536399][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'.
[  491.571215][T20237] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6039'.
[  491.649165][T20244] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6042'.
[  492.639688][T20283] netlink: 'syz.4.6059': attribute type 21 has an invalid length.
[  492.642543][T20283] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6059'.
[  492.938779][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6067'.
[  492.941594][T20299] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6067'.
[  493.037163][T20305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.391206][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6075'.
[  493.519925][T20331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.176002][T20374] netlink: 'syz.4.6103': attribute type 23 has an invalid length.
[  494.221536][T20383] netlink: 202232 bytes leftover after parsing attributes in process `syz.1.6107'.
[  494.230687][T20383] netlink: zone id is out of range
[  494.233031][T20383] netlink: zone id is out of range
[  494.815346][ T5849] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  494.820071][ T5849] Bluetooth: hci1: Invalid handle: 0x85b0 > 0x0eff
[  495.228172][T20446] netlink: 'syz.1.6135': attribute type 2 has an invalid length.
[  495.874054][T20481] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6151'.
[  495.881131][T20481] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  496.479633][T20499] netlink: 'syz.4.6159': attribute type 12 has an invalid length.
[  496.485168][T20499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6159'.
[  496.565060][T20510] netlink: 'syz.3.6163': attribute type 21 has an invalid length.
[  496.567925][T20510] netlink: 14532 bytes leftover after parsing attributes in process `syz.3.6163'.
[  496.674987][T20520] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6168'.
[  496.712154][T20524] netlink: 'syz.1.6169': attribute type 1 has an invalid length.
[  496.776652][T20526] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6171'.
[  496.877745][T20536] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6174'.
[  497.678277][T20569] bpf: Bad value for 'mode'
[  497.778545][T20577] netlink: 'syz.3.6194': attribute type 29 has an invalid length.
[  498.287633][T20587] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6197'.
[  498.424796][T20599] netlink: 'syz.4.6203': attribute type 11 has an invalid length.
[  498.427855][T20599] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6203'.
[  498.488391][T20603] netlink: 'syz.4.6205': attribute type 13 has an invalid length.
[  498.492599][T20601] netlink: 'syz.1.6204': attribute type 2 has an invalid length.
[  498.497527][T20601] netlink: 8196 bytes leftover after parsing attributes in process `syz.1.6204'.
[  498.535747][T20607] netlink: 'syz.4.6206': attribute type 1 has an invalid length.
[  498.608985][T20612] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6209'.
[  498.900320][T20626] netlink: 'syz.1.6215': attribute type 1 has an invalid length.
[  498.967386][T20631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.126045][T20646] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6225'.
[  499.316689][T20650] syzkaller1: tun_chr_ioctl cmd 1074025677
[  499.321372][T20650] syzkaller1: linktype set to 780
[  499.806273][T20691] option changes via remount are deprecated (pid=20688 comm=syz.3.6245)
[  499.903431][T20695] tap0: tun_chr_ioctl cmd 21731
[  499.960375][T20702] tap0: tun_chr_ioctl cmd 2147767521
[  500.320100][T20725] netlink: 'syz.4.6261': attribute type 1 has an invalid length.
[  500.419299][T20719] !: renamed from bond_slave_0 (while UP)
[  501.069692][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  501.073066][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  502.223341][T20825] netlink: 'syz.1.6305': attribute type 21 has an invalid length.
[  502.226312][T20825] __nla_validate_parse: 5 callbacks suppressed
[  502.226325][T20825] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6305'.
[  503.196371][T20833] netlink: 'syz.3.6308': attribute type 5 has an invalid length.
[  503.199035][T20833] netlink: 'syz.3.6308': attribute type 5 has an invalid length.
[  503.285205][T20835] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  503.582879][T20843] openvswitch: netlink: VXLAN extension 233 out of range max 1
[  504.447159][T20825] netlink: 'syz.1.6305': attribute type 4 has an invalid length.
[  504.508653][T20846] syzkaller0: entered promiscuous mode
[  504.510861][T20846] syzkaller0: entered allmulticast mode
[  505.212185][T20890] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6331'.
[  506.184616][T20861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6319'.
[  506.217345][T20900] syzkaller0: entered promiscuous mode
[  506.219199][T20900] syzkaller0: entered allmulticast mode
[  508.033852][T20914] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6340'.
[  508.661759][T20941] netlink: 'syz.4.6353': attribute type 3 has an invalid length.
[  508.667567][T20941] netlink: 'syz.4.6353': attribute type 1 has an invalid length.
[  508.670796][T20941] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.6353'.
[  508.682297][T20941] netlink: 'syz.4.6353': attribute type 8 has an invalid length.
[  508.922437][T20951] netlink: 'syz.4.6358': attribute type 2 has an invalid length.
[  508.926250][T20951] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6358'.
[  508.930098][T20951] nbd: must specify a device to reconfigure
[  510.212185][T20992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.246321][T20996] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6380'.
[  510.249816][T20996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6380'.
[  511.712836][ T5849] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  511.798118][T21044] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  511.851260][T21046] netlink: 'syz.1.6403': attribute type 21 has an invalid length.
[  511.934026][T21054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6407'.
[  512.296967][T21069] netlink: 'syz.1.6413': attribute type 21 has an invalid length.
[  512.300379][T21069] netlink: 'syz.1.6413': attribute type 1 has an invalid length.
[  512.381751][T21073] sit0: left promiscuous mode
[  512.383472][T21073] sit0: entered allmulticast mode
[  512.387329][T21073] sit0: entered promiscuous mode
[  513.437529][T21108] netlink: 'syz.1.6428': attribute type 5 has an invalid length.
[  513.440447][T21108] netlink: 'syz.1.6428': attribute type 15 has an invalid length.
[  513.704548][T21123] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6434'.
[  513.708249][T21123] netlink: 'syz.4.6434': attribute type 1 has an invalid length.
[  514.052600][T21138] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  514.104867][T21142] netlink: 'syz.1.6443': attribute type 1 has an invalid length.
[  514.230036][T21146] netlink: 'syz.1.6445': attribute type 29 has an invalid length.
[  514.274058][T21146] netlink: 'syz.1.6445': attribute type 10 has an invalid length.
[  514.278186][T21146] team0: Device bond0 is already an upper device of the team interface
[  514.420839][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6450'.
[  514.520222][T21162] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6453'.
[  515.481373][T21200] netlink: 703 bytes leftover after parsing attributes in process `syz.1.6468'.
[  515.739133][T21219] netlink: 'syz.1.6475': attribute type 33 has an invalid length.
[  515.756747][T21219] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6475'.
[  515.769637][T21219] mac80211_hwsim hwsim30 : renamed from wlan1 (while UP)
[  515.990672][T21223] netlink: 'syz.4.6477': attribute type 39 has an invalid length.
[  516.067338][T21219] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  516.252476][T21226] netlink: 'syz.3.6478': attribute type 21 has an invalid length.
[  516.340466][T21228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6479'.
[  516.348086][T21228] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6479'.
[  517.385653][T21271] netlink: 'syz.4.6497': attribute type 2 has an invalid length.
[  517.389752][T21271] netlink: 'syz.4.6497': attribute type 1 has an invalid length.
[  517.404788][T21271] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.6497'.
[  517.408237][T21271] block nbd5: not configured, cannot reconfigure
[  517.745666][T21277] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6500'.
[  517.843479][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  518.085345][T21301] netlink: 'syz.4.6507': attribute type 6 has an invalid length.
[  518.088520][T21301] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6507'.
[  519.220505][T21374] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  519.223561][T21374] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  519.303894][T21381] __nla_validate_parse: 3 callbacks suppressed
[  519.303912][T21381] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6548'.
[  519.309734][T21382] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6546'.
[  519.315362][T21377] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6546'.
[  519.389920][T21389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6551'.
[  519.407550][T21384] validate_nla: 4 callbacks suppressed
[  519.407562][T21384] netlink: 'syz.4.6549': attribute type 10 has an invalid length.
[  519.550501][T21404] netlink: 'syz.4.6558': attribute type 2 has an invalid length.
[  519.552983][T21404] netlink: 119 bytes leftover after parsing attributes in process `syz.4.6558'.
[  519.610997][T21408] delete_channel: no stack
[  519.612483][T21408] delete_channel: no stack
[  519.887024][T21427] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6569'.
[  519.987818][T21429] netlink: 'syz.3.6570': attribute type 21 has an invalid length.
[  520.081288][T21439] netlink: 'syz.1.6575': attribute type 4 has an invalid length.
[  520.220330][T21448] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.6579'.
[  520.929230][T21460] tmpfs: Bad value for 'mode'
[  520.942875][T21463] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6587'.
[  521.021333][T21470] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6590'.
[  521.270419][T21494] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  522.167413][T21505] netlink: 'syz.4.6606': attribute type 39 has an invalid length.
[  522.870729][T21523] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6615'.
[  522.879346][T21523] netlink: zone id is out of range
[  522.881242][T21523] netlink: zone id is out of range
[  522.883109][T21523] netlink: zone id is out of range
[  522.888136][T21523] netlink: zone id is out of range
[  522.892195][T21523] netlink: zone id is out of range
[  522.896789][T21523] netlink: zone id is out of range
[  522.899006][T21523] netlink: zone id is out of range
[  522.902124][T21523] netlink: zone id is out of range
[  522.907212][T21523] netlink: zone id is out of range
[  524.676715][T21544] __nla_validate_parse: 1 callbacks suppressed
[  524.676727][T21544] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6620'.
[  524.769405][T21564] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.6629'.
[  524.779132][T21561] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.6629'.
[  524.784695][T21561] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.6629'.
[  524.986721][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6641'.
[  525.055269][T21592] netlink: 'syz.3.6643': attribute type 6 has an invalid length.
[  525.058401][T21592] netlink: 'syz.3.6643': attribute type 1 has an invalid length.
[  525.061484][T21592] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6643'.
[  525.151190][T21591] netlink: 'syz.1.6642': attribute type 4 has an invalid length.
[  525.159639][T21591] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6642'.
[  525.165467][T21599] delete_channel: no stack
[  525.166000][T21591] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6642'.
[  525.167432][T21599] delete_channel: no stack
[  525.384947][T21611] delete_channel: no stack
[  525.458066][ T5849] Bluetooth: hci2: Unable to find connection for big 0x00
[  525.670963][T21626] netlink: 'syz.4.6658': attribute type 4 has an invalid length.
[  525.891899][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6665'.
[  525.894939][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6665'.
[  526.105864][ T5849] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  527.961197][ T5847] Bluetooth: hci2: Malformed LE Event: 0x0d
[  528.313083][T21718] net_ratelimit: 76 callbacks suppressed
[  528.313100][T21718] openvswitch: netlink: IP tunnel dst address not specified
[  528.619056][T21732] netlink: 'syz.1.6706': attribute type 21 has an invalid length.
[  528.986229][T21752] netlink: 'syz.1.6715': attribute type 2 has an invalid length.
[  528.991396][T21752] netlink: 'syz.1.6715': attribute type 8 has an invalid length.
[  529.415855][T21776] netlink: 'syz.3.6724': attribute type 29 has an invalid length.
[  529.422352][T21776] netlink: 'syz.3.6724': attribute type 29 has an invalid length.
[  529.688615][T21794] siw: device registration error -23
[  529.865873][T21800] netlink: set zone limit has 4 unknown bytes
[  531.793155][T21885] __nla_validate_parse: 7 callbacks suppressed
[  531.793173][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6773'.
[  531.925522][T21899] syzkaller1: tun_chr_ioctl cmd 1074812117
[  532.326532][T21927] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6792'.
[  532.407909][T21938] netlink: 'syz.4.6797': attribute type 4 has an invalid length.
[  532.489786][T21947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6802'.
[  532.516453][T21947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6802'.
[  532.622960][T21960] netlink: 'syz.3.6807': attribute type 9 has an invalid length.
[  532.824991][T21975] tap0: tun_chr_ioctl cmd 2147767521
[  532.902118][T21978] netlink: 'syz.3.6814': attribute type 10 has an invalid length.
[  532.917139][T21982] netlink: 'syz.4.6816': attribute type 2 has an invalid length.
[  532.920155][T21982] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6816'.
[  532.934237][T21982] netlink: 'syz.4.6816': attribute type 2 has an invalid length.
[  532.936819][T21982] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6816'.
[  532.974233][T21984] netlink: 'syz.3.6817': attribute type 12 has an invalid length.
[  532.977365][T21984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6817'.
[  533.030393][T21992] netlink: 'syz.3.6821': attribute type 10 has an invalid length.
[  533.038997][T21992] syz_tun: entered promiscuous mode
[  533.052305][T21992] .`: (slave syz_tun): Enslaving as an active interface with an up link
[  533.107143][T21994] bridge_slave_1: left allmulticast mode
[  533.109734][T21994] bridge_slave_1: left promiscuous mode
[  533.111686][T21994] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.318893][T22010] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6827'.
[  533.377795][T22015] netlink: 'syz.1.6829': attribute type 1 has an invalid length.
[  533.678568][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6835'.
[  533.707351][T22031] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6836'.
[  533.837085][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  533.875313][T22046] netlink: 'syz.1.6843': attribute type 29 has an invalid length.
[  533.879396][T22046] netlink: 'syz.1.6843': attribute type 29 has an invalid length.
[  536.042592][ T5847] Bluetooth: hci1: Malformed LE Event: 0x0d
[  536.081149][T22116] bond_slave_1: mtu less than device minimum
[  536.217381][T22122] syzkaller0: entered promiscuous mode
[  536.219628][T22122] syzkaller0: entered allmulticast mode
[  536.517072][ T5847] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  537.181833][T22134] __nla_validate_parse: 5 callbacks suppressed
[  537.181884][T22134] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.6878'.
[  538.011348][T22148] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6885'.
[  538.177703][T22155] : renamed from gre0 (while UP)
[  538.382120][T22172] validate_nla: 5 callbacks suppressed
[  538.382139][T22172] netlink: 'syz.3.6895': attribute type 3 has an invalid length.
[  538.393742][T22172] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6895'.
[  538.665594][T22182] netlink: 'syz.1.6900': attribute type 1 has an invalid length.
[  538.791363][T22203] netlink: 'syz.4.6910': attribute type 22 has an invalid length.
[  538.791978][T22201] netlink: 'syz.3.6909': attribute type 3 has an invalid length.
[  538.797469][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6910'.
[  538.800383][T22201] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.6909'.
[  538.949202][T22218] netlink: 'syz.3.6917': attribute type 1 has an invalid length.
[  538.951791][T22218] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6917'.
[  538.957178][T22215] netlink: 'syz.1.6916': attribute type 2 has an invalid length.
[  538.959770][T22215] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6916'.
[  539.296724][T22242] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6928'.
[  539.441108][T22245] delete_channel: no stack
[  539.576891][T22251] veth1_to_bond: entered allmulticast mode
[  539.688082][T22258] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6933'.
[  539.732926][T22260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6934'.
[  539.887150][T22270] netlink: 'syz.4.6936': attribute type 1 has an invalid length.
[  539.891552][T22270] netlink: 'syz.4.6936': attribute type 4 has an invalid length.
[  539.901129][T22265] netlink: 'syz.4.6936': attribute type 1 has an invalid length.
[  539.904075][T22265] netlink: 'syz.4.6936': attribute type 4 has an invalid length.
[  542.948855][T22354] __nla_validate_parse: 7 callbacks suppressed
[  542.948867][T22354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6974'.
[  543.179934][T22385] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6985'.
[  543.183845][T22374] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6985'.
[  543.229170][T22390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6989'.
[  543.233122][T22384] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6989'.
[  543.237638][T22390] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6989'.
[  543.319342][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6991'.
[  543.440103][T22402] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  543.673960][T22429] validate_nla: 4 callbacks suppressed
[  543.673971][T22429] netlink: 'syz.4.7008': attribute type 1 has an invalid length.
[  543.678828][T22429] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.7008'.
[  544.672683][T22441] netlink: 'syz.1.7014': attribute type 2 has an invalid length.
[  544.692625][T22441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7014'.
[  544.839505][T22454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7019'.
[  544.845509][T22454] netlink: 'syz.3.7019': attribute type 5 has an invalid length.
[  545.349919][T22489] netlink: 'syz.1.7035': attribute type 2 has an invalid length.
[  545.381682][T22491] netlink: 'syz.4.7036': attribute type 9 has an invalid length.
[  546.176604][T22495] netlink: 'syz.4.7038': attribute type 21 has an invalid length.
[  546.179652][T22495] netlink: 'syz.4.7038': attribute type 15 has an invalid length.
[  546.182557][T22495] IPv6: NLM_F_CREATE should be specified when creating new route
[  546.187054][T22495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  546.189312][T22495] IPv6: NLM_F_CREATE should be set when creating new route
[  546.191665][T22495] IPv6: NLM_F_CREATE should be set when creating new route
[  546.193957][T22495] IPv6: NLM_F_CREATE should be set when creating new route
[  546.216653][T22497] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  546.220356][T22497] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  546.268363][T22503] netlink: 'syz.3.7039': attribute type 21 has an invalid length.
[  546.334582][T22503] netlink: 'syz.3.7039': attribute type 5 has an invalid length.
[  547.470845][T22551] netlink: 'syz.4.7062': attribute type 21 has an invalid length.
[  548.347655][T22575] __nla_validate_parse: 7 callbacks suppressed
[  548.347725][T22575] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7071'.
[  548.468874][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7076'.
[  548.472458][T22583] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7076'.
[  549.818761][T22607] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  550.582463][T22642] validate_nla: 1 callbacks suppressed
[  550.582534][T22642] netlink: 'syz.1.7104': attribute type 29 has an invalid length.
[  550.598131][T22642] netlink: 'syz.1.7104': attribute type 29 has an invalid length.
[  550.632241][T22642] netlink: 'syz.1.7104': attribute type 29 has an invalid length.
[  550.684367][T22642] netlink: 'syz.1.7104': attribute type 29 has an invalid length.
[  551.514326][ T5847] Bluetooth: hci2: Opcode 0x206a failed: -110
[  551.523560][ T5847] Bluetooth: hci2: command 0x206a tx timeout
[  551.606994][T22682] netlink: 'syz.3.7121': attribute type 11 has an invalid length.
[  551.610853][T22682] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7121'.
[  552.301941][T22742] netlink: 212 bytes leftover after parsing attributes in process `syz.4.7145'.
[  552.531568][T22760] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7155'.
[  552.569949][T22764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7157'.
[  552.655719][T22773] netlink: 'syz.4.7161': attribute type 1 has an invalid length.
[  552.658863][T22773] netlink: 'syz.4.7161': attribute type 4 has an invalid length.
[  552.661947][T22773] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7161'.
[  553.602111][T22783] netlink: 'syz.1.7165': attribute type 4 has an invalid length.
[  553.605298][T22783] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7165'.
[  553.909776][T22806] netlink: 'syz.1.7176': attribute type 15 has an invalid length.
[  553.916085][T22806] netlink: 'syz.1.7176': attribute type 7 has an invalid length.
[  553.920214][T22806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7176'.
[  554.447352][T22831] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  554.451276][T22831] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  554.582575][T22848] netlink: 'syz.1.7194': attribute type 2 has an invalid length.
[  554.596758][T22848] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.7194'.
[  554.600906][T22848] block nbd5: not configured, cannot reconfigure
[  554.920844][T22874] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7205'.
[  556.097035][T22907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7221'.
[  556.183153][T22915] validate_nla: 1 callbacks suppressed
[  556.188535][T22915] netlink: 'syz.4.7225': attribute type 29 has an invalid length.
[  556.192769][T22915] netlink: 'syz.4.7225': attribute type 29 has an invalid length.
[  556.199772][T22915] netlink: 'syz.4.7225': attribute type 29 has an invalid length.
[  556.313662][T22929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7232'.
[  556.719094][T22960] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7247'.
[  560.399582][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7295'.
[  560.406238][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7295'.
[  560.410773][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7295'.
[  561.269675][T23123] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  561.297929][T23123] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  561.864783][ T5847] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  562.390407][T23158] lo speed is unknown, defaulting to 1000
[  562.405982][T23158] lo speed is unknown, defaulting to 1000
[  562.425869][T23158] lo speed is unknown, defaulting to 1000
[  562.517628][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  562.519833][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  562.610719][T23158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  562.816217][T23158] lo speed is unknown, defaulting to 1000
[  562.838369][T23158] lo speed is unknown, defaulting to 1000
[  562.857252][T23158] lo speed is unknown, defaulting to 1000
[  563.988155][T23215] netlink: 'syz.3.7357': attribute type 2 has an invalid length.
[  564.417887][T23237] netlink: 'syz.1.7368': attribute type 21 has an invalid length.
[  564.420356][T23237] netlink: 'syz.1.7368': attribute type 4 has an invalid length.
[  564.423087][T23237] netlink: 14453 bytes leftover after parsing attributes in process `syz.1.7368'.
[  564.566387][ T5847] Bluetooth: hci1: Unable to find connection for big 0x00
[  567.043459][T23281] netlink: 'syz.1.7387': attribute type 10 has an invalid length.
[  567.062875][T23281] bridge0: port 3(team0) entered disabled state
[  567.185841][T23281] bridge0: port 3(team0) entered disabled state
[  567.192704][T23281] team_slave_0: left promiscuous mode
[  567.196667][T23281] team_slave_0: left allmulticast mode
[  567.201434][T23281] team0 (unregistering): Port device team_slave_0 removed
[  567.205781][T23281] team_slave_1: left promiscuous mode
[  567.208689][T23281] team_slave_1: left allmulticast mode
[  567.222979][T23281] team0 (unregistering): Port device team_slave_1 removed
[  569.344940][T23304] netlink: 'syz.3.7398': attribute type 21 has an invalid length.
[  569.557123][T23316] lo speed is unknown, defaulting to 1000
[  569.586410][T23322] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  569.622571][T23322] lo speed is unknown, defaulting to 1000
[  569.642673][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7408'.
[  570.051463][T23340] netlink: 'syz.1.7413': attribute type 13 has an invalid length.
[  570.054865][T23340] netlink: 'syz.1.7413': attribute type 17 has an invalid length.
[  570.340871][T23340] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.387056][T23340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  570.742525][T23372] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7427'.
[  570.750436][T23372] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  570.756807][T23373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  571.810245][T23391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7435'.
[  571.828193][T23391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7435'.
[  572.832317][T23406] netlink: 'syz.3.7442': attribute type 5 has an invalid length.
[  573.921452][T23422] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7448'.
[  574.479766][T23429] syzkaller0: entered promiscuous mode
[  574.481671][T23429] syzkaller0: entered allmulticast mode
[  575.478719][T23460] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7466'.
[  577.131953][T23501] netlink: 'syz.3.7484': attribute type 21 has an invalid length.
[  577.221426][T23507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7487'.
[  577.229006][T23507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7487'.
[  577.737588][T23520] netlink: 'syz.1.7494': attribute type 21 has an invalid length.
[  577.740136][T23520] IPv6: NLM_F_CREATE should be specified when creating new route
[  577.742801][T23520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  577.745159][T23520] IPv6: NLM_F_CREATE should be set when creating new route
[  577.747439][T23520] IPv6: NLM_F_CREATE should be set when creating new route
[  577.749650][T23520] IPv6: NLM_F_CREATE should be set when creating new route
[  577.817352][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  577.824176][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  577.830974][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  577.842997][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  577.846830][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  577.876928][T23521] lo speed is unknown, defaulting to 1000
[  578.139740][T23521] chnl_net:caif_netlink_parms(): no params data found
[  579.913405][ T5842] Bluetooth: hci3: command tx timeout
[  580.851095][T23521] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.856314][T23521] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.860397][T23521] bridge_slave_0: entered allmulticast mode
[  580.864432][T23521] bridge_slave_0: entered promiscuous mode
[  580.869065][T23521] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.872070][T23521] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.885404][T23521] bridge_slave_1: entered allmulticast mode
[  580.889333][T23521] bridge_slave_1: entered promiscuous mode
[  580.969852][T23521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.988280][T23521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.035829][T23547] netlink: 'syz.1.7501': attribute type 10 has an invalid length.
[  581.059937][T23521] team0: Port device team_slave_0 added
[  581.067280][T23521] team0: Port device team_slave_1 added
[  581.102723][T23521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.106192][T23521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.117712][T23521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.127086][T23521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.130011][T23521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.141487][T23521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.252051][T23521] hsr_slave_0: entered promiscuous mode
[  581.254950][T23521] hsr_slave_1: entered promiscuous mode
[  581.257195][T23521] debugfs: 'hsr0' already exists in 'hsr'
[  581.259203][T23521] Cannot create hsr debugfs directory
[  581.414956][T23521] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  581.441693][T23521] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  581.442602][ T5842] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1
[  581.464278][T23521] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  581.479627][T23521] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  581.528915][T23521] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.531762][T23521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.534908][T23521] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.537704][T23521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.598675][T23521] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.611206][T19467] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.618296][T19467] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.635250][T23521] 8021q: adding VLAN 0 to HW filter on device team0
[  581.643665][T19467] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.646074][T19467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.656385][T19467] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.659334][T19467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.806685][T23521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.988198][T23594] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  581.993622][ T5842] Bluetooth: hci3: command tx timeout
[  582.036833][T23521] veth0_vlan: entered promiscuous mode
[  582.046949][T23521] veth1_vlan: entered promiscuous mode
[  582.080011][T23521] veth0_macvtap: entered promiscuous mode
[  582.096953][T23521] veth1_macvtap: entered promiscuous mode
[  582.117209][T23599] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7516'.
[  582.146249][T23521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.153038][T23521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.160484][ T5876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.172197][ T5876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.182151][ T5876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.203705][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.268993][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.273920][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.302246][T19467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.306797][T19467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.698919][T23631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.186048][T23645] delete_channel: no stack
[  584.083598][ T5842] Bluetooth: hci3: command tx timeout
[  585.112962][T23709] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  585.682480][T23750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7581'.
[  585.723624][T23753] tun0: tun_chr_ioctl cmd 2147767507
[  586.156828][ T5842] Bluetooth: hci3: command tx timeout
[  586.703885][T23764] netlink: 'syz.1.7586': attribute type 29 has an invalid length.
[  586.708937][T23764] netlink: 'syz.1.7586': attribute type 29 has an invalid length.
[  586.713682][T23764] netlink: 500 bytes leftover after parsing attributes in process `syz.1.7586'.
[  586.717014][T23764] unsupported nla_type 58
[  586.896444][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7594'.
[  586.900681][T23781] netlink: 6 bytes leftover after parsing attributes in process `syz.5.7594'.
[  587.023517][T23788] netlink: 'syz.5.7598': attribute type 41 has an invalid length.
[  587.587890][T23805] syzkaller0: create flow: hash 1634950241 index 1
[  587.698472][T23802] syzkaller0: delete flow: hash 1634950241 index 1
[  589.167392][T23844] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7620'.
[  589.238275][T23851] netlink: 'syz.5.7623': attribute type 29 has an invalid length.
[  589.242784][T23851] netlink: 'syz.5.7623': attribute type 29 has an invalid length.
[  589.248219][T23851] netlink: 'syz.5.7623': attribute type 29 has an invalid length.
[  589.540997][T23865] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  590.767961][T23887] syzkaller0: entered promiscuous mode
[  590.784708][T23887] syzkaller0: entered allmulticast mode
[  595.004720][T23920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7654'.
[  595.011271][T23923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  595.018521][T23926] C: renamed from team_slave_0
[  595.022069][T23926] netlink: 'syz.1.7655': attribute type 2 has an invalid length.
[  595.025076][T23926] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7655'.
[  595.028619][T23926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  595.077599][T23930] netlink: 'syz.1.7657': attribute type 126 has an invalid length.
[  595.208383][T23946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7664'.
[  595.341680][T23952] netlink: 'syz.1.7667': attribute type 10 has an invalid length.
[  595.432610][T23957] netlink: 'syz.1.7670': attribute type 1 has an invalid length.
[  595.499990][T23962] netlink: 'syz.3.7672': attribute type 13 has an invalid length.
[  595.797986][T23983] Dead loop on virtual device ip6_vti0, fix it urgently!
[  596.022506][T23986] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.7683'.
[  596.599749][T23992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7686'.
[  596.605816][T23992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7686'.
[  597.221849][T24027] netlink: 'syz.3.7703': attribute type 1 has an invalid length.
[  597.224558][T24027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7703'.
[  597.580645][T24052] netlink: 'syz.3.7715': attribute type 15 has an invalid length.
[  598.202347][T24081] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7728'.
[  598.574657][T24105] netlink: 'syz.1.7739': attribute type 39 has an invalid length.
[  598.656426][T24110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7742'.
[  598.860143][T24120] : renamed from dummy0 (while UP)
[  598.968860][T24126] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7748'.
[  598.983687][T24126] hsr0: entered promiscuous mode
[  598.986629][T24126] hsr0: entered allmulticast mode
[  598.989037][T24126] hsr_slave_0: entered allmulticast mode
[  598.999894][T24126] hsr_slave_1: entered allmulticast mode
[  599.706705][T24170] syzkaller0: entered promiscuous mode
[  599.712419][T24170] syzkaller0: entered allmulticast mode
[  602.366993][T24194] delete_channel: no stack
[  602.670166][T24215] netlink: 'syz.3.7781': attribute type 11 has an invalid length.
[  602.971675][T24229] netlink: 'syz.5.7789': attribute type 1 has an invalid length.
[  602.977399][T24229] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.7789'.
[  603.096507][T24235] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.7791'.
[  603.249249][T24243] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7795'.
[  603.437690][T24253] sctp: [Deprecated]: syz.1.7799 (pid 24253) Use of int in max_burst socket option deprecated.
[  603.437690][T24253] Use struct sctp_assoc_value instead
[  604.010482][T24270] netlink: 'syz.3.7807': attribute type 29 has an invalid length.
[  604.016288][T24270] netlink: 'syz.3.7807': attribute type 29 has an invalid length.
[  604.046029][T24270] netlink: 'syz.3.7807': attribute type 29 has an invalid length.
[  604.211469][T24274] netlink: 'syz.3.7807': attribute type 29 has an invalid length.
[  604.326491][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7813'.
[  604.330565][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7813'.
[  604.401148][T24286] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7814'.
[  604.534006][T24296] netlink: 'syz.1.7818': attribute type 10 has an invalid length.
[  604.537132][T24296] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.7818'.
[  604.866524][T24309] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.7824'.
[  604.928442][T24314] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7826'.
[  604.947328][T24314] netlink: zone id is out of range
[  604.949517][T24314] netlink: zone id is out of range
[  604.951620][T24314] netlink: zone id is out of range
[  604.959400][T24314] netlink: zone id is out of range
[  604.961597][T24314] netlink: zone id is out of range
[  604.979395][T24314] netlink: zone id is out of range
[  604.981589][T24314] netlink: zone id is out of range
[  604.994089][T24314] netlink: zone id is out of range
[  605.002937][T24314] netlink: zone id is out of range
[  605.014047][T24314] netlink: zone id is out of range
[  605.180114][T24329] siw: device registration error -23
[  605.193674][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7834'.
[  606.923041][T24411] netlink: 'syz.3.7871': attribute type 29 has an invalid length.
[  606.927622][T24411] netlink: 'syz.3.7871': attribute type 29 has an invalid length.
[  606.930352][T24411] netlink: 'syz.3.7871': attribute type 29 has an invalid length.
[  607.391711][T24429] netlink: 'syz.5.7878': attribute type 19 has an invalid length.
[  607.462340][T24431] net veth1_virt_wifi : renamed from virt_wifi0 (while UP)
[  607.519982][T24431] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  607.745999][ T5842] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  608.222897][T24462] __nla_validate_parse: 3 callbacks suppressed
[  608.222911][T24462] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.7893'.
[  608.542692][T24478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7901'.
[  608.913654][T24505] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7914'.
[  609.063689][T24520] netlink: 'syz.1.7921': attribute type 1 has an invalid length.
[  609.343166][T24527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7924'.
[  609.366143][T24525] siw: device registration error -23
[  609.619508][T24551] netlink: 'syz.1.7937': attribute type 21 has an invalid length.
[  609.622269][T24551] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7937'.
[  609.627442][T24551] netlink: 'syz.1.7937': attribute type 4 has an invalid length.
[  609.633880][T24551] netlink: 'syz.1.7937': attribute type 5 has an invalid length.
[  609.636319][T24551] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7937'.
[  610.657226][T24591] rdma_rxe: rxe_newlink: failed to add lo
[  611.341969][T24643] netlink: 'syz.3.7974': attribute type 2 has an invalid length.
[  611.348873][T24643] netlink: 'syz.3.7974': attribute type 1 has an invalid length.
[  611.357780][T24643] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7974'.
[  611.366127][T24643] nbd: couldn't find device at index 16
[  611.502855][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  611.511429][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  611.514857][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  611.518177][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  611.520904][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  611.552122][T24652] lo speed is unknown, defaulting to 1000
[  611.681964][T24652] chnl_net:caif_netlink_parms(): no params data found
[  611.938971][T24652] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.941814][T24652] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.945420][T24652] bridge_slave_0: entered allmulticast mode
[  611.948472][T24652] bridge_slave_0: entered promiscuous mode
[  611.952344][T24652] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.956010][T24652] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.959822][T24652] bridge_slave_1: entered allmulticast mode
[  611.963060][T24652] bridge_slave_1: entered promiscuous mode
[  611.992582][T24652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.998876][T24652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  612.041797][T24652] team0: Port device team_slave_0 added
[  612.048512][T24652] team0: Port device team_slave_1 added
[  612.111499][T24652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  612.116048][T24652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.127236][T24652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  612.137251][T24652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  612.140074][T24652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.150412][T24652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.159585][T24680] netlink: 'syz.3.7987': attribute type 2 has an invalid length.
[  612.174291][T24680] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7987'.
[  612.190446][T24680] netlink: 'syz.3.7987': attribute type 2 has an invalid length.
[  612.201568][T24680] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7987'.
[  612.220147][T24652] hsr_slave_0: entered promiscuous mode
[  612.230705][T24652] hsr_slave_1: entered promiscuous mode
[  612.232911][T24652] debugfs: 'hsr0' already exists in 'hsr'
[  612.239666][T24652] Cannot create hsr debugfs directory
[  612.403948][T24652] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.469301][T24652] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.551892][T24652] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.671086][T24652] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.731713][T24704] pim6reg0: tun_chr_ioctl cmd 1074025681
[  612.841425][T24652] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  612.861358][T24652] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  612.867753][ T5847] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  612.867774][ T5847] Bluetooth: unknown link type 8
[  612.872139][ T5847] Bluetooth: hci2: connection err: -111
[  612.881009][T24652] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  612.888624][T24652] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  612.925609][T24715] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8002'.
[  612.956107][T24652] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.968771][T24652] 8021q: adding VLAN 0 to HW filter on device team0
[  613.028664][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.031620][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.081522][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.084528][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.151966][T24722] netlink: 'syz.1.8004': attribute type 10 has an invalid length.
[  613.155183][T24724] netlink: 'syz.3.8005': attribute type 21 has an invalid length.
[  613.312181][T24722] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  613.319946][T24724] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8005'.
[  613.337913][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8005'.
[  613.473902][T24732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8006'.
[  613.569118][T24652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.593829][ T5847] Bluetooth: hci3: command tx timeout
[  614.050623][T24750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8012'.
[  614.066669][T24749] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8012'.
[  614.081594][T24750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8012'.
[  614.140517][T24652] veth0_vlan: entered promiscuous mode
[  614.171911][T24652] veth1_vlan: entered promiscuous mode
[  614.225975][T24652] veth0_macvtap: entered promiscuous mode
[  614.230462][T24652] veth1_macvtap: entered promiscuous mode
[  614.242582][T24652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.264458][T24652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.273080][ T5855] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.276843][ T5855] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.279634][ T5855] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.282330][ T5855] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.359834][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.362746][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.396202][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.398844][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.632572][T24773] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8021'.
[  614.674527][T24775] validate_nla: 3 callbacks suppressed
[  614.674543][T24775] netlink: 'syz.5.8018': attribute type 4 has an invalid length.
[  614.691372][T24775] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8018'.
[  615.673555][ T5847] Bluetooth: hci3: command tx timeout
[  616.629092][T24775] net_ratelimit: 13 callbacks suppressed
[  616.629111][T24775] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  617.243447][T24797] netlink: 'syz.1.8029': attribute type 4 has an invalid length.
[  617.246626][T24797] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8029'.
[  617.260242][T24797] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  617.304422][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8031'.
[  617.768691][ T5847] Bluetooth: hci3: command tx timeout
[  618.000947][T24831] netlink: set zone limit has 4 unknown bytes
[  618.145026][T24837] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[  618.147906][T24837] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  619.847386][ T5847] Bluetooth: hci3: command tx timeout
[  620.175718][T24879] __nla_validate_parse: 2 callbacks suppressed
[  620.175730][T24879] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8063'.
[  620.184038][T24876] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8063'.
[  620.188287][T24879] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.8063'.
[  621.158747][T24892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8070'.
[  621.161824][T24892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8070'.
[  621.253487][T24898] openvswitch: netlink: IP tunnel dst address not specified
[  621.312822][T24901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8074'.
[  621.374961][T24901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8074'.
[  621.380713][T24901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8074'.
[  621.478702][T24916] netlink: 'syz.1.8083': attribute type 10 has an invalid length.
[  621.484216][T24916] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8083'.
[  621.811610][T24932] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8088'.
[  623.960055][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  623.962780][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  626.251934][T25007] IPv6: NLM_F_CREATE should be specified when creating new route
[  626.301144][T25009] __nla_validate_parse: 2 callbacks suppressed
[  626.301161][T25009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8120'.
[  626.306875][T25009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'.
[  626.350592][ T5847] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  626.403488][T25015] netlink: 294 bytes leftover after parsing attributes in process `syz.5.8123'.
[  627.014853][T25046] netlink: 'syz.5.8136': attribute type 10 has an invalid length.
[  627.028464][T25046] 8021q: adding VLAN 0 to HW filter on device team0
[  627.041223][T25046] bond0: (slave team0): Enslaving as an active interface with an up link
[  627.082494][T25046] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  627.118967][T25046] can: request_module (can-proto-0) failed.
[  627.322965][T25049] netlink: 'syz.5.8137': attribute type 16 has an invalid length.
[  627.326209][T25049] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8137'.
[  627.332634][T25049] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.853109][T25069] netlink: 'syz.5.8146': attribute type 1 has an invalid length.
[  628.538489][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  629.140014][T25118] netlink: 'syz.1.8167': attribute type 2 has an invalid length.
[  629.512071][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8172'.
[  632.416590][T25180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.431522][T25182] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode
[  632.442806][T25182] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  632.960372][T25215] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8209'.
[  633.740908][T25248] netlink: 'syz.3.8223': attribute type 3 has an invalid length.
[  633.743855][T25248] netlink: 'syz.3.8223': attribute type 1 has an invalid length.
[  634.024305][T25267] netlink: 'syz.3.8230': attribute type 10 has an invalid length.
[  634.129211][T25267] .`: (slave ): Releasing backup interface
[  634.132867][T25267] netdevsim netdevsim3 : left promiscuous mode
[  634.142960][T25267] netdevsim netdevsim3 : entered promiscuous mode
[  634.145999][T25267] team0: Port device  added
[  634.148652][T25268] bridge_slave_1: left allmulticast mode
[  634.150773][T25268] bridge_slave_1: left promiscuous mode
[  634.153099][T25268] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.261422][T25268] bridge_slave_0: left promiscuous mode
[  634.265818][T25268] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.304154][T25270] netlink: 'syz.3.8233': attribute type 10 has an invalid length.
[  634.307151][T25270] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8233'.
[  635.009837][T25275] .`: (slave syz_tun): Releasing backup interface
[  636.221654][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  636.226899][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  636.240221][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  636.242956][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  636.245743][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  636.275999][T25294] lo speed is unknown, defaulting to 1000
[  636.402990][T25294] chnl_net:caif_netlink_parms(): no params data found
[  636.458719][T25294] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.461001][T25294] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.464801][T25294] bridge_slave_0: entered allmulticast mode
[  636.467553][T25294] bridge_slave_0: entered promiscuous mode
[  636.471092][T25294] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.473795][T25294] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.475986][T25294] bridge_slave_1: entered allmulticast mode
[  636.478778][T25294] bridge_slave_1: entered promiscuous mode
[  636.502729][T25294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  636.509025][T25294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  636.543131][T25294] team0: Port device team_slave_0 added
[  636.549841][T25294] team0: Port device team_slave_1 added
[  636.580930][T25294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.583680][T25294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.594088][T25294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.599983][T25294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.602703][T25294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.613686][T25294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.671165][T25294] hsr_slave_0: entered promiscuous mode
[  636.672866][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8241'.
[  636.684530][T25294] hsr_slave_1: entered promiscuous mode
[  636.687406][T25294] debugfs: 'hsr0' already exists in 'hsr'
[  636.689691][T25294] Cannot create hsr debugfs directory
[  636.925942][T25294] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  636.930392][T25294] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  636.936963][T25294] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  636.942150][T25294] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  636.955377][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  636.960837][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  636.966919][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  636.973715][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  636.977029][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  637.009601][T25294] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.012527][T25294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.015690][T25294] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.017978][T25294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.039261][T19467] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.043131][T19467] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.045471][T25321] netlink: 'syz.1.8245': attribute type 21 has an invalid length.
[  637.061928][T25310] lo speed is unknown, defaulting to 1000
[  637.244077][T25294] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.251376][T25310] chnl_net:caif_netlink_parms(): no params data found
[  637.303419][T25294] 8021q: adding VLAN 0 to HW filter on device team0
[  637.320051][T18376] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.322666][T18376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.328018][T18376] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.330725][T18376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.358101][T25310] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.360358][T25310] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.362607][T25310] bridge_slave_0: entered allmulticast mode
[  637.374560][T25310] bridge_slave_0: entered promiscuous mode
[  637.385999][T25310] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.388295][T25310] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.390547][T25310] bridge_slave_1: entered allmulticast mode
[  637.398968][T25310] bridge_slave_1: entered promiscuous mode
[  637.439655][T25310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.452942][T25310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.507651][T25310] team0: Port device team_slave_0 added
[  637.512802][T25310] team0: Port device team_slave_1 added
[  637.551392][T25310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  637.558730][T25310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.583534][T25310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  637.591454][T25310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  637.594828][T25310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.610189][T25310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  637.688239][T25310] hsr_slave_0: entered promiscuous mode
[  637.691309][T25310] hsr_slave_1: entered promiscuous mode
[  637.700734][T25310] debugfs: 'hsr0' already exists in 'hsr'
[  637.702579][T25310] Cannot create hsr debugfs directory
[  637.827944][T25294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.937504][T25310] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  637.944167][T25310] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  637.951634][T25310] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  637.960248][T25310] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  638.138791][T25310] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.218637][T25310] 8021q: adding VLAN 0 to HW filter on device team0
[  638.248778][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.251733][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.258136][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.261335][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.310119][T25294] veth0_vlan: entered promiscuous mode
[  638.313681][ T5847] Bluetooth: hci2: command tx timeout
[  638.318754][T25373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8256'.
[  638.323120][T25294] veth1_vlan: entered promiscuous mode
[  638.393917][T25294] veth0_macvtap: entered promiscuous mode
[  638.401224][T25294] veth1_macvtap: entered promiscuous mode
[  638.427719][T25294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.442223][T25294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.452167][ T5876] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.457330][ T5876] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.460237][ T5876] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.468884][ T5876] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.570950][T25310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  638.591769][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.600875][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.652310][T18376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.657658][T18376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.873145][T25310] veth0_vlan: entered promiscuous mode
[  638.882136][T25310] veth1_vlan: entered promiscuous mode
[  638.886544][T25404] netlink: 'syz.7.8265': attribute type 4 has an invalid length.
[  638.890604][T25404] netlink: 168 bytes leftover after parsing attributes in process `syz.7.8265'.
[  638.927841][T25310] veth0_macvtap: entered promiscuous mode
[  638.943056][T25310] veth1_macvtap: entered promiscuous mode
[  638.985654][T25310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.001493][T25310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.012340][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.019168][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.022083][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.031331][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.035067][ T5847] Bluetooth: hci3: command tx timeout
[  639.148585][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.151146][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.200388][T19467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.205805][T19467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.287797][T25419] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8273'.
[  639.359466][T25419] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8273'.
[  639.411079][T25429] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8275'.
[  639.509598][T25419] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8273'.
[  640.393513][ T5847] Bluetooth: hci2: command tx timeout
[  640.548640][T25482] netlink: 'syz.6.8298': attribute type 29 has an invalid length.
[  640.847971][T25490] netlink: 'syz.7.8301': attribute type 6 has an invalid length.
[  640.850492][T25490] netlink: 144448 bytes leftover after parsing attributes in process `syz.7.8301'.
[  640.972392][T25496] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8304'.
[  640.986337][T25496] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8304'.
[  641.007624][T25496] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8304'.
[  641.017731][T25498] netlink: 'syz.7.8305': attribute type 10 has an invalid length.
[  641.021135][T25498] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.023983][T25498] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.042648][T25498] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.045194][T25498] bridge0: port 2(bridge_slave_1) entered forwarding state
[  641.047793][T25498] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.050227][T25498] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.065476][T25498] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  641.115543][ T5847] Bluetooth: hci3: command tx timeout
[  641.698462][ T5847] Bluetooth: hci1: unknown advertising packet type: 0xc5
[  642.364577][T25556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.493325][ T5847] Bluetooth: hci2: command tx timeout
[  643.194988][ T5847] Bluetooth: hci3: command tx timeout
[  643.468768][   T33] audit: type=1107 audit(1756273478.311:10): pid=25564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',7Tdjw.]U(%@Lp,t6ʌ[Lg~Z+k3'Ő*C!3^n2'ȁrd8/.vXnhJ5H{QΚ>|uZZӧReiR.a>0T]-?\E-:9tQJj_I__&cgS܀J2 dt!-&GlCȶY;\X~Wf~sE͛毥 \LYb!]ųղ|x&F3b'
[  644.553398][ T5847] Bluetooth: hci2: command tx timeout
[  645.273423][ T5847] Bluetooth: hci3: command tx timeout
[  645.491267][T25595] netlink: 'syz.6.8346': attribute type 13 has an invalid length.
[  645.495845][T25595] netlink: 'syz.6.8346': attribute type 17 has an invalid length.
[  645.547621][T25595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  645.895947][T25615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.959639][T25633] netlink: 'syz.1.8362': attribute type 9 has an invalid length.
[  646.962182][T25633] __nla_validate_parse: 3 callbacks suppressed
[  646.962189][T25633] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.8362'.
[  647.200071][T25641] netlink: 'syz.7.8366': attribute type 2 has an invalid length.
[  647.202758][T25641] netlink: 'syz.7.8366': attribute type 5 has an invalid length.
[  647.207514][T25641] netlink: 'syz.7.8366': attribute type 6 has an invalid length.
[  647.210226][T25641] netlink: 'syz.7.8366': attribute type 7 has an invalid length.
[  647.212767][T25626] lo speed is unknown, defaulting to 1000
[  647.213959][T25641] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8366'.
[  647.219061][T25641] netlink: 130080 bytes leftover after parsing attributes in process `syz.7.8366'.
[  647.222359][T25641] netlink: 'syz.7.8366': attribute type 2 has an invalid length.
[  647.228837][T25641] netlink: 'syz.7.8366': attribute type 5 has an invalid length.
[  647.231416][T25641] netlink: 'syz.7.8366': attribute type 6 has an invalid length.
[  647.234357][T25641] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8366'.
[  647.948396][T25677] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.8382'.
[  647.952237][T25677] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.8382'.
[  647.956182][T25677] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.8382'.
[  648.410663][T25683] lo speed is unknown, defaulting to 1000
[  648.695913][T25687] netlink: 22 bytes leftover after parsing attributes in process `syz.1.8385'.
[  649.112268][T25706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8394'.
[  649.127094][T25710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8394'.
[  649.132028][T25710] dummy0: entered promiscuous mode
[  649.152685][T25710] bond0: (slave dummy0): Releasing backup interface
[  649.161180][T25710] bridge0: port 3(dummy0) entered blocking state
[  649.173457][T25710] bridge0: port 3(dummy0) entered disabled state
[  649.176224][T25710] dummy0: entered allmulticast mode
[  651.150905][T25765] bridge: RTM_NEWNEIGH with invalid state 0x1
[  651.469542][T25769] validate_nla: 3 callbacks suppressed
[  651.469558][T25769] netlink: 'syz.1.8421': attribute type 58 has an invalid length.
[  651.862383][ T5847] Bluetooth: hci1: Malformed LE Event: 0x1b
[  651.992862][T25788] netlink: 'syz.7.8430': attribute type 1 has an invalid length.
[  652.000645][T25788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.318293][T25814] __nla_validate_parse: 7 callbacks suppressed
[  654.318308][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8441'.
[  654.415971][T25821] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8444'.
[  654.419114][T25821] hsr_slave_0: left promiscuous mode
[  654.421917][T25821] hsr_slave_1: left promiscuous mode
[  654.642785][T25829] lo speed is unknown, defaulting to 1000
[  654.745198][T25835] netlink: 'syz.1.8446': attribute type 40 has an invalid length.
[  654.783225][T25835] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.881896][ T5847] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17
[  656.598276][T25848] netlink: 'syz.1.8453': attribute type 2 has an invalid length.
[  657.667993][T25856] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.8455'.
[  657.799383][T25860] netlink: 'syz.1.8458': attribute type 1 has an invalid length.
[  657.802245][T25860] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.8458'.
[  657.979172][T25862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8459'.
[  661.471499][T25927] netlink: 'syz.1.8486': attribute type 10 has an invalid length.
[  661.474205][T25927] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8486'.
[  661.807327][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  661.810815][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  661.813960][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  661.817980][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  661.823697][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  661.864505][T25933] lo speed is unknown, defaulting to 1000
[  662.270599][T25938] netlink: 268 bytes leftover after parsing attributes in process `syz.7.8491'.
[  663.835268][ T5842] Bluetooth: hci4: command tx timeout
[  664.048620][T25933] chnl_net:caif_netlink_parms(): no params data found
[  664.362675][T25933] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.381215][T25933] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.388776][T25933] bridge_slave_0: entered allmulticast mode
[  664.397085][T25933] bridge_slave_0: entered promiscuous mode
[  664.413458][T25933] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.416092][T25933] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.418982][T25933] bridge_slave_1: entered allmulticast mode
[  664.426251][T25933] bridge_slave_1: entered promiscuous mode
[  664.472077][T25933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.479943][T25933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.536080][T25933] team0: Port device team_slave_0 added
[  664.540001][T25933] team0: Port device team_slave_1 added
[  664.574805][T25933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.577175][T25933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  664.588714][T25933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  664.594906][T25933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  664.597200][T25933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  664.606252][T25933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.657469][T25933] hsr_slave_0: entered promiscuous mode
[  664.660070][T25933] hsr_slave_1: entered promiscuous mode
[  664.662355][T25933] debugfs: 'hsr0' already exists in 'hsr'
[  664.664696][T25933] Cannot create hsr debugfs directory
[  665.593629][T25972] netlink: 'syz.7.8501': attribute type 3 has an invalid length.
[  665.597109][T25972] netlink: 'syz.7.8501': attribute type 1 has an invalid length.
[  665.607870][T25972] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.8501'.
[  665.641109][T25933] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  665.650564][T25933] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  665.657489][T25933] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  665.662378][T25933] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  665.737244][T25933] 8021q: adding VLAN 0 to HW filter on device bond0
[  665.752301][T25933] 8021q: adding VLAN 0 to HW filter on device team0
[  665.759105][T19467] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.761764][T19467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  665.796297][T19467] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.798618][T19467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  665.915339][ T5842] Bluetooth: hci4: command tx timeout
[  665.978034][T25933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  666.238920][T25933] veth0_vlan: entered promiscuous mode
[  666.254016][T25933] veth1_vlan: entered promiscuous mode
[  666.271500][T25933] veth0_macvtap: entered promiscuous mode
[  666.285643][T25933] veth1_macvtap: entered promiscuous mode
[  666.305193][T25933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  666.318793][T25933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  666.335000][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  666.355303][ T5876] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  666.358337][ T5876] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  666.379175][ T5876] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.465798][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.475983][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.502483][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.509505][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.588923][T26024] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8518'.
[  666.816395][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8521'.
[  666.957109][T26040] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8521'.
[  667.038876][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8528'.
[  667.993543][ T5842] Bluetooth: hci4: command tx timeout
[  668.337192][T26091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8546'.
[  670.073426][ T5842] Bluetooth: hci4: command tx timeout
[  670.538667][T26096] macvtap0: refused to change device tx_queue_len
[  670.663628][ T5842] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  670.781701][T26112] netlink: 'syz.8.8556': attribute type 1 has an invalid length.
[  670.823079][T26114] sit0: entered allmulticast mode
[  670.834649][T26114] sit0: entered promiscuous mode
[  670.980012][T26110] delete_channel: no stack
[  670.997555][T26110] delete_channel: no stack
[  671.182670][T26117] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.8555'.
[  672.512686][T26147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  672.515174][T26147] IPv6: NLM_F_CREATE should be set when creating new route
[  672.517514][T26147] IPv6: NLM_F_CREATE should be set when creating new route
[  673.111965][T26171] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8579'.
[  673.225111][T26171] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8579'.
[  673.301293][T26171] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8579'.
[  673.486898][T26197] netlink: 'syz.8.8589': attribute type 17 has an invalid length.
[  673.591022][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8591'.
[  674.089402][T26217] netlink: 'syz.7.8597': attribute type 1 has an invalid length.
[  674.390660][T26235] rdma_rxe: rxe_newlink: failed to add bond0
[  674.402605][T26237] netlink: 16038 bytes leftover after parsing attributes in process `syz.1.8608'.
[  674.477495][T26240] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8609'.
[  674.754956][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8613'.
[  674.757630][T26248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8613'.
[  674.978960][T26260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8618'.
[  675.511093][T26280] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8626'.
[  675.519845][T26280] hsr0: entered promiscuous mode
[  675.521819][T26280] hsr0: entered allmulticast mode
[  675.528211][T26280] hsr_slave_0: entered allmulticast mode
[  675.530729][T26280] hsr_slave_1: entered allmulticast mode
[  676.229131][T26319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.681132][T26337] veth1_macvtap: left promiscuous mode
[  676.683560][T26337] macsec0: entered promiscuous mode
[  678.129340][T26367] netlink: 'syz.8.8664': attribute type 2 has an invalid length.
[  678.132486][T26367] __nla_validate_parse: 3 callbacks suppressed
[  678.132497][T26367] netlink: 12374 bytes leftover after parsing attributes in process `syz.8.8664'.
[  678.190525][T26371] netlink: 'syz.7.8666': attribute type 21 has an invalid length.
[  678.196536][T26371] netlink: 128 bytes leftover after parsing attributes in process `syz.7.8666'.
[  678.200018][T26371] netlink: 'syz.7.8666': attribute type 3 has an invalid length.
[  678.202345][T26371] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8666'.
[  679.098835][T26395] netlink: 300 bytes leftover after parsing attributes in process `syz.1.8672'.
[  680.208951][T26429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8688'.
[  680.211842][T26429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8688'.
[  680.887060][T26396] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.8671'.
[  681.033060][ T5847] Bluetooth: hci2: Malformed LE Event: 0x0d
[  681.336108][T26461] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8704'.
[  681.661499][T26456] lo speed is unknown, defaulting to 1000
[  684.711687][T26498] netlink: 'syz.8.8720': attribute type 29 has an invalid length.
[  684.748416][T26504] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  684.929305][T26518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8729'.
[  685.368167][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  685.370687][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  686.028073][T26533] netlink: 132 bytes leftover after parsing attributes in process `syz.8.8736'.
[  686.185469][T26544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8741'.
[  686.192603][T26542] netlink: 'syz.8.8740': attribute type 29 has an invalid length.
[  686.232388][T26546] netlink: 'syz.1.8742': attribute type 2 has an invalid length.
[  686.242006][T26546] netlink: 'syz.1.8742': attribute type 8 has an invalid length.
[  686.245329][T26546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8742'.
[  686.348089][T26550] bpf: Bad value for 'gid'
[  686.438338][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8745'.
[  687.471457][T26605] syzkaller0: entered promiscuous mode
[  687.473123][T26605] syzkaller0: entered allmulticast mode
[  687.615798][T26607] netlink: 22 bytes leftover after parsing attributes in process `syz.8.8767'.
[  689.695455][T26612] sit0: entered promiscuous mode
[  689.697484][T26612] sit0: entered allmulticast mode
[  690.793049][T26632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8778'.
[  691.645061][T26670] sctp: [Deprecated]: syz.8.8795 (pid 26670) Use of struct sctp_assoc_value in delayed_ack socket option.
[  691.645061][T26670] Use struct sctp_sack_info instead
[  692.451611][T26674] IPv6: NLM_F_CREATE should be specified when creating new route
[  694.883740][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8808'.
[  694.886742][T26698] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8808'.
[  697.285807][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  697.290248][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  697.297526][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  697.301616][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  697.307271][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  697.347221][T26729] lo speed is unknown, defaulting to 1000
[  697.477998][T26729] chnl_net:caif_netlink_parms(): no params data found
[  698.840995][T26738] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  698.849773][T26729] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.852057][T26738] netlink: 'syz.1.8824': attribute type 10 has an invalid length.
[  698.852434][T26729] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.858819][T26729] bridge_slave_0: entered allmulticast mode
[  698.862454][T26729] bridge_slave_0: entered promiscuous mode
[  698.867889][T26738] : mtu less than device minimum
[  698.869445][T26738] bond0: (slave ): Error -22 calling dev_set_mtu
[  698.873965][T26729] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.885479][T26729] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.890522][T26729] bridge_slave_1: entered allmulticast mode
[  698.893674][T26729] bridge_slave_1: entered promiscuous mode
[  698.925051][T26729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.929666][T26729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.985386][T26729] team0: Port device team_slave_0 added
[  698.989596][T26729] team0: Port device team_slave_1 added
[  699.020969][T26729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  699.026688][T26729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  699.041862][T26729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  699.050508][T26729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  699.053063][T26729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  699.067305][T26729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  699.120782][T26729] hsr_slave_0: entered promiscuous mode
[  699.124758][T26729] hsr_slave_1: entered promiscuous mode
[  699.127449][T26729] debugfs: 'hsr0' already exists in 'hsr'
[  699.129716][T26729] Cannot create hsr debugfs directory
[  699.355782][ T5847] Bluetooth: hci5: command tx timeout
[  700.141397][T26758] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8831'.
[  700.160400][T26758] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8831'.
[  700.164961][T26729] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  700.175298][T26729] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  700.185167][T26729] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  700.192141][T26729] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  700.367223][T26729] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.390852][T26729] 8021q: adding VLAN 0 to HW filter on device team0
[  700.408770][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.411409][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.432268][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.434994][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.501007][T26729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  700.670625][T26729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.999995][T26729] veth0_vlan: entered promiscuous mode
[  701.019347][T26729] veth1_vlan: entered promiscuous mode
[  701.038254][T26729] veth0_macvtap: entered promiscuous mode
[  701.042459][T26729] veth1_macvtap: entered promiscuous mode
[  701.059428][T26729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  701.074428][T26729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  701.152090][ T5876] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  701.162024][ T5876] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.180462][ T5876] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.186644][ T5876] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  701.229919][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.238037][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.265477][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.268568][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.436553][ T5847] Bluetooth: hci5: command tx timeout
[  701.440085][T26803] netlink: 10 bytes leftover after parsing attributes in process `syz.9.8823'.
[  701.506989][T26807] netlink: 'syz.9.8843': attribute type 11 has an invalid length.
[  701.687178][T26815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8847'.
[  702.000498][T26835] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.8856'.
[  702.011431][T26835] openvswitch: netlink: Message has 6 unknown bytes.
[  702.212332][T26851] netlink: 'syz.1.8864': attribute type 64 has an invalid length.
[  702.413130][T26860] sctp: [Deprecated]: syz.8.8869 (pid 26860) Use of struct sctp_assoc_value in delayed_ack socket option.
[  702.413130][T26860] Use struct sctp_sack_info instead
[  702.993145][T26873] netlink: 'syz.9.8872': attribute type 10 has an invalid length.
[  703.500722][T26873] team0 (unregistering): Port device team_slave_0 removed
[  703.517943][ T5847] Bluetooth: hci5: command tx timeout
[  703.538790][T26873] team0 (unregistering): Port device team_slave_1 removed
[  703.845379][T26891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8881'.
[  703.859156][T26891] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8881'.
[  704.779886][T26912] netlink: 1053 bytes leftover after parsing attributes in process `syz.8.8889'.
[  704.875576][T26918] syzkaller0: entered promiscuous mode
[  704.877282][T26918] syzkaller0: entered allmulticast mode
[  705.593998][ T5847] Bluetooth: hci5: command tx timeout
[  708.360903][T26933] netlink: 'syz.1.8896': attribute type 1 has an invalid length.
[  708.364506][T26933] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.8896'.
[  708.700734][T26952] syzkaller0: entered promiscuous mode
[  708.703028][T26952] syzkaller0: entered allmulticast mode
[  711.267438][T27002] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8927'.
[  711.280814][T27002] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8927'.
[  711.310711][T27002] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8927'.
[  711.397153][T27006] mac80211_hwsim hwsim41 O3c: renamed from wlan1 (while UP)
[  711.687543][T27017] netlink: 'syz.8.8933': attribute type 39 has an invalid length.
[  712.201906][T27037] netlink: 731 bytes leftover after parsing attributes in process `syz.8.8941'.
[  712.355052][T27047] cgroup: fork rejected by pids controller in /syz8
[  713.409057][T27066] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.8955'.
[  713.483773][T27072] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8959'.
[  713.860285][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  713.864127][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  713.866965][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  713.870399][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  713.875223][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  713.901475][T27088] lo speed is unknown, defaulting to 1000
[  714.021305][T27088] chnl_net:caif_netlink_parms(): no params data found
[  714.142855][T27088] bridge0: port 1(bridge_slave_0) entered blocking state
[  714.146198][T27088] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.149534][T27088] bridge_slave_0: entered allmulticast mode
[  714.165071][T27088] bridge_slave_0: entered promiscuous mode
[  714.172517][T27088] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.175591][T27088] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.177890][T27088] bridge_slave_1: entered allmulticast mode
[  714.180702][T27088] bridge_slave_1: entered promiscuous mode
[  714.209737][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8971'.
[  714.232053][T27088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.246441][T27088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.312725][T27088] team0: Port device team_slave_0 added
[  714.330982][T27088] team0: Port device team_slave_1 added
[  714.384708][T27088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  714.387164][T27088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.400686][T27088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  714.411459][T27088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  714.414833][T27088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.425874][T27088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  714.528548][T27115] sctp: [Deprecated]: syz.1.8973 (pid 27115) Use of int in max_burst socket option deprecated.
[  714.528548][T27115] Use struct sctp_assoc_value instead
[  714.571246][T27115] syz.1.8973: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  714.580804][T27088] hsr_slave_0: entered promiscuous mode
[  714.590182][T27088] hsr_slave_1: entered promiscuous mode
[  714.593052][T27088] debugfs: 'hsr0' already exists in 'hsr'
[  714.596168][T27115] CPU: 1 UID: 0 PID: 27115 Comm: syz.1.8973 Not tainted syzkaller #0 PREEMPT(full) 
[  714.596187][T27115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  714.596197][T27115] Call Trace:
[  714.596203][T27115]  <TASK>
[  714.596223][T27115]  dump_stack_lvl+0x189/0x250
[  714.596249][T27115]  ? __pfx_dump_stack_lvl+0x10/0x10
[  714.596267][T27115]  ? __pfx__printk+0x10/0x10
[  714.596288][T27115]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  714.596305][T27115]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  714.596324][T27115]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  714.596343][T27115]  warn_alloc+0x214/0x310
[  714.596367][T27115]  ? stack_depot_save_flags+0x40/0x860
[  714.596394][T27115]  ? __pfx_warn_alloc+0x10/0x10
[  714.596419][T27115]  ? kasan_save_track+0x4f/0x80
[  714.596438][T27115]  ? xskq_create+0x56/0x170
[  714.596455][T27115]  ? xsk_init_queue+0xb0/0x110
[  714.596470][T27115]  ? xsk_setsockopt+0x57b/0x8d0
[  714.596485][T27115]  ? do_sock_setsockopt+0x17c/0x1b0
[  714.596505][T27115]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  714.596517][T27115]  ? do_syscall_64+0xfa/0x3b0
[  714.596535][T27115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.596556][T27115]  __vmalloc_node_range_noprof+0x125/0x12f0
[  714.596602][T27115]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  714.596628][T27115]  ? __kasan_kmalloc+0x93/0xb0
[  714.596649][T27115]  vmalloc_user_noprof+0xad/0xf0
[  714.596670][T27115]  ? xskq_create+0xbf/0x170
[  714.596688][T27115]  xskq_create+0xbf/0x170
[  714.596709][T27115]  xsk_init_queue+0xb0/0x110
[  714.596729][T27115]  xsk_setsockopt+0x57b/0x8d0
[  714.596749][T27115]  ? __pfx_xsk_setsockopt+0x10/0x10
[  714.596764][T27115]  ? aa_sock_opt_perm+0xca/0x1b0
[  714.596804][T27115]  ? __pfx_aa_sk_perm+0x10/0x10
[  714.596825][T27115]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  714.596845][T27115]  ? __fget_files+0x2a/0x420
[  714.596856][T27115]  ? aa_sock_opt_perm+0xff/0x1b0
[  714.596871][T27115]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  714.596885][T27115]  ? __pfx_xsk_setsockopt+0x10/0x10
[  714.596902][T27115]  do_sock_setsockopt+0x17c/0x1b0
[  714.596929][T27115]  __x64_sys_setsockopt+0x13f/0x1b0
[  714.596947][T27115]  do_syscall_64+0xfa/0x3b0
[  714.596967][T27115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.596980][T27115]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  714.596998][T27115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.597012][T27115] RIP: 0033:0x7f1b2838ebe9
[  714.597026][T27115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  714.597038][T27115] RSP: 002b:00007f1b29237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  714.597054][T27115] RAX: ffffffffffffffda RBX: 00007f1b285b6090 RCX: 00007f1b2838ebe9
[  714.597065][T27115] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d
[  714.597074][T27115] RBP: 00007f1b28411e19 R08: 0000000000000004 R09: 0000000000000000
[  714.597084][T27115] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  714.597093][T27115] R13: 00007f1b285b6128 R14: 00007f1b285b6090 R15: 00007ffe0b7e2c38
[  714.597117][T27115]  </TASK>
[  714.597256][T27115] Mem-Info:
[  714.602798][T27088] Cannot create hsr debugfs directory
[  714.613073][T27115] active_anon:18004 inactive_anon:0 isolated_anon:0
[  714.613073][T27115]  active_file:16130 inactive_file:38485 isolated_file:0
[  714.613073][T27115]  unevictable:1768 dirty:61 writeback:0
[  714.613073][T27115]  slab_reclaimable:11640 slab_unreclaimable:104426
[  714.613073][T27115]  mapped:33579 shmem:2468 pagetables:1425
[  714.613073][T27115]  sec_pagetables:0 bounce:0
[  714.613073][T27115]  kernel_misc_reclaimable:0
[  714.613073][T27115]  free:175729 free_pcp:20473 free_cma:0
[  714.754559][T27115] Node 0 active_anon:30540kB inactive_anon:0kB active_file:23320kB inactive_file:23772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50656kB dirty:172kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7432kB pagetables:2716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  714.787836][T27115] Node 1 active_anon:41544kB inactive_anon:0kB active_file:41200kB inactive_file:130168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87740kB dirty:72kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6884kB pagetables:2984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  714.842843][T27115] Node 0 DMA free:15348kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  714.857060][T27115] lowmem_reserve[]: 0 811 811 811 811
[  714.859362][T27115] Node 0 DMA32 free:168144kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30540kB inactive_anon:0kB active_file:23320kB inactive_file:23772kB unevictable:3536kB writepending:172kB present:1556484kB managed:830960kB mlocked:0kB bounce:0kB free_pcp:47688kB local_pcp:15144kB free_cma:0kB
[  714.876483][T27115] lowmem_reserve[]: 0 0 0 0 0
[  714.878439][T27115] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  714.890421][T27115] lowmem_reserve[]: 0 0
[  714.890673][T27120] lo speed is unknown, defaulting to 1000
[  714.890698][T27115]  854 854 854
[  714.920281][T27115] Node 1 Normal free:58624kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41544kB inactive_anon:0kB active_file:41200kB inactive_file:130168kB unevictable:3536kB writepending:72kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34800kB local_pcp:20700kB free_cma:0kB
[  714.938772][T27115] lowmem_reserve[]: 0 0 0 0 0
[  714.940920][T27115] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15348kB
[  714.954172][T27115] Node 0 DMA32: 4*4kB (UE) 775*8kB (UME) 821*16kB (UME) 236*32kB (UME) 177*64kB (UME) 143*128kB (UME) 46*256kB (UM) 26*512kB (UME) 4*1024kB (ME) 10*2048kB (UM) 15*4096kB (UM) = 167640kB
[  714.961537][T27115] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  714.974082][T27115] Node 1 Normal: 2*4kB (UE) 61*8kB (UM) 108*16kB (M) 113*32kB (UME) 110*64kB (ME) 115*128kB (UME) 29*256kB (ME) 6*512kB (UM) 6*1024kB (UME) 3*2048kB (UM) 2*4096kB (U) = 58576kB
[  714.980793][T27115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  714.985990][T27115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  714.988928][T27115] 57083 total pagecache pages
[  714.990453][T27115] 0 pages in swap cache
[  714.991799][T27115] Free swap  = 124996kB
[  715.003587][T27115] Total swap = 124996kB
[  715.005151][T27115] 786301 pages RAM
[  715.007946][T27115] 0 pages HighMem/MovableOnly
[  715.009639][T27115] 241329 pages reserved
[  715.011435][T27115] 0 pages cma reserved
[  715.098899][T27088] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.148873][T27088] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.220193][T27088] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.376082][T27133] netlink: 'syz.1.8977': attribute type 10 has an invalid length.
[  715.848558][T27088] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.861346][T27133] bond0: (slave 1!): Releasing backup interface
[  715.928627][ T5847] Bluetooth: hci4: command tx timeout
[  716.031834][T27088] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  716.036941][T27088] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  716.041718][T27088] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  716.046441][T27088] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  716.141237][T27088] 8021q: adding VLAN 0 to HW filter on device bond0
[  716.156753][T27088] 8021q: adding VLAN 0 to HW filter on device team0
[  716.171371][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.174182][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  716.204436][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.207122][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  716.283478][T27162] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8988'.
[  716.322000][T27162] netlink: 'syz.1.8988': attribute type 10 has an invalid length.
[  716.350096][T27162] batman_adv: batadv0: Adding interface: 
[  716.352199][T27162] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  716.371457][T27162] batman_adv: batadv0: Not using interface  (retrying later): interface not active
[  716.487684][T27088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  716.681222][T27088] veth0_vlan: entered promiscuous mode
[  716.718880][T27088] veth1_vlan: entered promiscuous mode
[  716.838020][T27088] veth0_macvtap: entered promiscuous mode
[  716.903563][T27088] veth1_macvtap: entered promiscuous mode
[  716.976000][T27088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  717.006647][T27088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  717.054187][ T5876] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.057592][ T5876] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.072724][ T5876] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.080936][ T5876] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.342610][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.349010][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.441987][T18376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.445879][T18376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.993738][ T5847] Bluetooth: hci4: command tx timeout
[  719.983146][T27248] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9020'.
[  720.081480][ T5847] Bluetooth: hci4: command tx timeout
[  721.609519][T27287] netlink: 124 bytes leftover after parsing attributes in process `syz.1.9038'.
[  721.857783][T27296] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9041'.
[  721.877398][T27294] netlink: 'syz.1.9040': attribute type 29 has an invalid length.
[  722.060210][T27299] netlink: 196 bytes leftover after parsing attributes in process `syz.8.9042'.
[  722.153637][ T5847] Bluetooth: hci4: command tx timeout
[  722.176373][T27305] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9044'.
[  722.179947][T27305] netlink: zone id is out of range
[  722.182147][T27305] netlink: zone id is out of range
[  722.189559][T27305] netlink: zone id is out of range
[  722.191174][T27305] netlink: zone id is out of range
[  722.192933][T27305] netlink: zone id is out of range
[  722.194995][T27305] netlink: zone id is out of range
[  722.196650][T27305] netlink: zone id is out of range
[  722.198345][T27305] netlink: zone id is out of range
[  722.200004][T27305] netlink: zone id is out of range
[  722.201571][T27305] netlink: zone id is out of range
[  722.350557][T27305] syz.1.9044 (27305) used obsolete PPPIOCDETACH ioctl
[  722.695001][T27338] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9060'.
[  722.885643][T27346] netlink: 72 bytes leftover after parsing attributes in process `syz.8.9063'.
[  723.056802][T27361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9070'.
[  723.074294][T27361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9070'.
[  724.467791][T27402] syzkaller0: entered promiscuous mode
[  724.469794][T27402] syzkaller0: entered allmulticast mode
[  724.640728][T27411] netlink: 'syz.9.9093': attribute type 12 has an invalid length.
[  724.647577][T27411] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9093'.
[  725.034561][   T34] INFO: task kworker/u8:3:5875 blocked for more than 143 seconds.
[  725.037757][   T34]       Not tainted syzkaller #0
[  725.041185][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  725.057186][   T34] task:kworker/u8:3    state:D stack:23736 pid:5875  tgid:5875  ppid:2      task_flags:0x4208060 flags:0x00004000
[  725.061863][   T34] Workqueue: netns cleanup_net
[  725.080186][   T34] Call Trace:
[  725.081399][   T34]  <TASK>
[  725.082405][   T34]  __schedule+0x1798/0x4cc0
[  725.090350][   T34]  ? __lock_acquire+0xab9/0xd20
[  725.091910][   T34]  ? __lock_acquire+0xab9/0xd20
[  725.105604][   T34]  ? __pfx___schedule+0x10/0x10
[  725.107129][   T34]  ? schedule+0x91/0x360
[  725.108443][   T34]  schedule+0x165/0x360
[  725.132490][   T34]  schedule_preempt_disabled+0x13/0x30
[  725.141394][   T34]  __mutex_lock+0x7e6/0x1360
[  725.152802][   T34]  ? __mutex_lock+0x5b6/0x1360
[  725.166648][   T34]  ? rdma_dev_change_netns+0x39/0x300
[  725.168758][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  725.193092][   T34]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  725.203423][   T34]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  725.205305][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  725.229641][   T34]  ? _raw_spin_unlock+0x28/0x50
[  725.231184][   T34]  rdma_dev_change_netns+0x39/0x300
[  725.232800][   T34]  rdma_dev_exit_net+0x203/0x340
[  725.250169][   T34]  ? __pfx___might_resched+0x10/0x10
[  725.259495][   T34]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  725.275531][   T34]  ? net_generic+0x1e/0x240
[  725.277250][   T34]  ? mutex_is_locked+0x17/0x50
[  725.278928][   T34]  ? rtnl_is_locked+0x15/0x20
[  725.303110][   T34]  ops_undo_list+0x49a/0x990
[  725.306115][   T34]  ? __pfx_ops_undo_list+0x10/0x10
[  725.307738][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  725.309337][   T34]  cleanup_net+0x4c5/0x800
[  725.310726][   T34]  ? __pfx_cleanup_net+0x10/0x10
[  725.312269][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  725.349212][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  725.351141][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  725.363381][   T34]  process_scheduled_works+0xae1/0x17b0
[  725.365742][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  725.368130][   T34]  worker_thread+0x8a0/0xda0
[  725.369959][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  725.372502][   T34]  ? __kthread_parkme+0x7b/0x200
[  725.391368][   T34]  kthread+0x711/0x8a0
[  725.393051][   T34]  ? __pfx_worker_thread+0x10/0x10
[  725.401498][   T34]  ? __pfx_kthread+0x10/0x10
[  725.406109][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  725.407830][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  725.409688][   T34]  ? __pfx_kthread+0x10/0x10
[  725.411161][   T34]  ret_from_fork+0x3fc/0x770
[  725.422814][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  725.425489][   T34]  ? __switch_to_asm+0x39/0x70
[  725.427006][   T34]  ? __switch_to_asm+0x33/0x70
[  725.432944][   T34]  ? __pfx_kthread+0x10/0x10
[  725.439675][   T34]  ret_from_fork_asm+0x1a/0x30
[  725.441329][   T34]  </TASK>
[  725.442341][   T34] INFO: task syz.4.7333:23164 blocked for more than 143 seconds.
[  725.459864][   T34]       Not tainted syzkaller #0
[  725.461472][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  725.469384][   T34] task:syz.4.7333      state:D stack:23352 pid:23164 tgid:23156 ppid:9348   task_flags:0x400140 flags:0x00004006
[  725.473060][   T34] Call Trace:
[  725.483406][   T34]  <TASK>
[  725.484618][   T34]  __schedule+0x1798/0x4cc0
[  725.486442][   T34]  ? validate_chain+0x897/0x2140
[  725.499246][   T34]  ? __lock_acquire+0xab9/0xd20
[  725.501016][   T34]  ? __pfx___schedule+0x10/0x10
[  725.503033][   T34]  ? schedule+0x91/0x360
[  725.511128][   T34]  schedule+0x165/0x360
[  725.512477][   T34]  schedule_timeout+0x9a/0x270
[  725.519654][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  725.525778][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  725.530404][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  725.536529][   T34]  ? wait_for_completion+0x267/0x5d0
[  725.558065][   T34]  wait_for_completion+0x2bf/0x5d0
[  725.569005][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  725.580133][   T34]  ? up_write+0x1c4/0x420
[  725.603302][   T34]  ? remove_client_context+0xc0/0x1e0
[  725.622128][   T34]  disable_device+0x1c6/0x320
[  725.630379][   T34]  ? __pfx_disable_device+0x10/0x10
[  725.632061][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  725.634690][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  725.636524][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  725.638398][   T34]  nldev_dellink+0x2d1/0x320
[  725.639846][   T34]  ? __lock_acquire+0xab9/0xd20
[  725.641379][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  725.643041][   T34]  ? apparmor_capable+0x137/0x1b0
[  725.651018][   T34]  ? bpf_lsm_capable+0x9/0x20
[  725.652870][   T34]  ? security_capable+0x7e/0x2e0
[  725.655022][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  725.657158][   T34]  rdma_nl_rcv+0x6ae/0x980
[  725.659010][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  725.660957][   T34]  ? __lock_acquire+0xab9/0xd20
[  725.663010][   T34]  ? netlink_deliver_tap+0x2e/0x1b0
[  725.665235][   T34]  netlink_unicast+0x82f/0x9e0
[  725.667157][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  725.669325][   T34]  ? netlink_sendmsg+0x642/0xb30
[  725.671419][   T34]  ? skb_put+0x11b/0x210
[  725.676918][   T34]  netlink_sendmsg+0x805/0xb30
[  725.679529][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  725.682006][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  725.684459][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  725.686813][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  725.689033][   T34]  __sock_sendmsg+0x21c/0x270
[  725.691031][   T34]  ____sys_sendmsg+0x505/0x830
[  725.693053][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  725.695449][   T34]  ? import_iovec+0x74/0xa0
[  725.697411][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  725.699395][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  725.701597][   T34]  ? __fget_files+0x2a/0x420
[  725.709019][   T34]  ? __fget_files+0x3a0/0x420
[  725.711041][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  725.713141][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  725.715510][   T34]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  725.718272][   T34]  ? do_syscall_64+0xbe/0x3b0
[  725.720263][   T34]  do_syscall_64+0xfa/0x3b0
[  725.722190][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  725.731533][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.734757][   T34]  ? exc_page_fault+0x9f/0xf0
[  725.736780][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.739265][   T34] RIP: 0033:0x7f35dfb8ebe9
[  725.741158][   T34] RSP: 002b:00007f35e0a46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  725.750288][   T34] RAX: ffffffffffffffda RBX: 00007f35dfdb6090 RCX: 00007f35dfb8ebe9
[  725.754105][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  725.757374][   T34] RBP: 00007f35dfc11e19 R08: 0000000000000000 R09: 0000000000000000
[  725.760520][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.767194][   T34] R13: 00007f35dfdb6128 R14: 00007f35dfdb6090 R15: 00007ffe16e447f8
[  725.769658][   T34]  </TASK>
[  725.771439][   T34] 
[  725.771439][   T34] Showing all locks held in the system:
[  725.781056][   T34] 1 lock held by rcu_exp_gp_kthr/18:
[  725.782996][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  725.787283][   T34] 1 lock held by rcu_tasks_trace/32:
[  725.788944][   T34]  #0: ffffffff8e13abd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  725.792520][   T34] 1 lock held by khungtaskd/34:
[  725.794590][   T34]  #0: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  725.797911][   T34] 2 locks held by getty/5674:
[  725.799539][   T34]  #0: ffff8880203e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  725.802764][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  725.806095][   T34] 4 locks held by kworker/u8:3/5875:
[  725.809240][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  725.812729][   T34]  #1: ffffc900039afbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  725.817431][   T34]  #2: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  725.820406][   T34]  #3: ffff888127b70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  725.824152][   T34] 2 locks held by syz.4.7333/23164:
[  725.826783][   T34]  #0: ffffffff99e66858 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  725.830106][   T34]  #1: ffff888127b70700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  725.835121][   T34] 2 locks held by syz.6.8359/25626:
[  725.836794][   T34]  #0: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  725.839822][   T34]  #1: ffff888127b70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  725.843984][   T34] 2 locks held by syz.7.8702/26456:
[  725.845655][   T34]  #0: ffffffff8f52af70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  725.848619][   T34]  #1: ffff888127b70700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  725.852409][   T34] 2 locks held by syz.9.9093/27410:
[  725.854499][   T34]  #0: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  725.857736][   T34]  #1: ffffffff8e13f938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  725.861208][   T34] 1 lock held by syz.1.9096/27417:
[  725.863012][   T34]  #0: ffffffff8e19d448 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  725.867930][   T34] 
[  725.873648][   T34] =============================================
[  725.873648][   T34] 
[  725.881652][   T34] NMI backtrace for cpu 1
[  725.881666][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  725.881680][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  725.881689][   T34] Call Trace:
[  725.881694][   T34]  <TASK>
[  725.881699][   T34]  dump_stack_lvl+0x189/0x250
[  725.881721][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  725.881736][   T34]  ? __pfx__printk+0x10/0x10
[  725.881760][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  725.881778][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  725.881794][   T34]  ? __pfx__printk+0x10/0x10
[  725.881813][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  725.881836][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  725.881852][   T34]  watchdog+0xf93/0xfe0
[  725.881873][   T34]  ? watchdog+0x1de/0xfe0
[  725.881894][   T34]  kthread+0x711/0x8a0
[  725.881912][   T34]  ? __pfx_watchdog+0x10/0x10
[  725.881929][   T34]  ? __pfx_kthread+0x10/0x10
[  725.881946][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  725.881995][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  725.882011][   T34]  ? __pfx_kthread+0x10/0x10
[  725.882026][   T34]  ret_from_fork+0x3fc/0x770
[  725.882042][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  725.882059][   T34]  ? __switch_to_asm+0x39/0x70
[  725.882074][   T34]  ? __switch_to_asm+0x33/0x70
[  725.882089][   T34]  ? __pfx_kthread+0x10/0x10
[  725.882104][   T34]  ret_from_fork_asm+0x1a/0x30
[  725.882129][   T34]  </TASK>
[  725.882135][   T34] Sending NMI from CPU 1 to CPUs 0:
[  725.941659][    C0] NMI backtrace for cpu 0
[  725.941673][    C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  725.941686][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  725.941694][    C0] Workqueue: events destroy_super_work
[  725.941716][    C0] RIP: 0010:pcpu_free_area+0x0/0xdd0
[  725.941736][    C0] Code: ff ff e8 93 de bb ff e9 d6 fd ff ff e8 89 de bb ff 90 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 68 89 f3 49 89 fc 49 be 00
[  725.941746][    C0] RSP: 0018:ffffc900000c79a8 EFLAGS: 00000046
[  725.941755][    C0] RAX: 0000000000000a06 RBX: ffffea0000a35668 RCX: dffffc0000000000
[  725.941763][    C0] RDX: 0000000000000001 RSI: 000000000002383c RDI: ffff88801bf2d000
[  725.941770][    C0] RBP: 000000000002383c R08: 0000000000000003 R09: 0000000000000004
[  725.941777][    C0] R10: dffffc0000000000 R11: fffff52000018f14 R12: dffffc0000000000
[  725.941785][    C0] R13: dffffc0000000000 R14: ffff88801bf2d080 R15: ffff88801bf2d000
[  725.941794][    C0] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  725.941804][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  725.941813][    C0] CR2: 0000000000000000 CR3: 000000010e8ec000 CR4: 00000000000006f0
[  725.941844][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  725.941853][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  725.941860][    C0] Call Trace:
[  725.941865][    C0]  <TASK>
[  725.941870][    C0]  free_percpu+0x26d/0xf50
[  725.941889][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  725.941904][    C0]  percpu_free_rwsem+0x57/0x80
[  725.941920][    C0]  destroy_super_work+0xee/0x130
[  725.941935][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  725.941946][    C0]  process_scheduled_works+0xae1/0x17b0
[  725.942000][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  725.942018][    C0]  worker_thread+0x8a0/0xda0
[  725.942040][    C0]  kthread+0x711/0x8a0
[  725.942054][    C0]  ? __pfx_worker_thread+0x10/0x10
[  725.942064][    C0]  ? __pfx_kthread+0x10/0x10
[  725.942078][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  725.942093][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  725.942106][    C0]  ? __pfx_kthread+0x10/0x10
[  725.942119][    C0]  ret_from_fork+0x3fc/0x770
[  725.942132][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  725.942146][    C0]  ? __switch_to_asm+0x39/0x70
[  725.942160][    C0]  ? __switch_to_asm+0x33/0x70
[  725.942174][    C0]  ? __pfx_kthread+0x10/0x10
[  725.942190][    C0]  ret_from_fork_asm+0x1a/0x30
[  725.942209][    C0]  </TASK>
[  725.942712][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  726.030055][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  726.033379][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  726.037064][   T34] Call Trace:
[  726.038343][   T34]  <TASK>
[  726.039456][   T34]  dump_stack_lvl+0x99/0x250
[  726.040920][   T34]  ? __asan_memcpy+0x40/0x70
[  726.042424][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  726.043924][   T34]  ? __pfx__printk+0x10/0x10
[  726.045352][   T34]  vpanic+0x281/0x750
[  726.046604][   T34]  ? __pfx_vpanic+0x10/0x10
[  726.048011][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  726.049707][   T34]  ? preempt_schedule+0xae/0xc0
[  726.051291][   T34]  ? preempt_schedule_common+0x83/0xd0
[  726.053353][   T34]  panic+0xb9/0xc0
[  726.054786][   T34]  ? __pfx_panic+0x10/0x10
[  726.056514][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  726.058638][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  726.061046][   T34]  watchdog+0xfd2/0xfe0
[  726.062669][   T34]  ? watchdog+0x1de/0xfe0
[  726.064380][   T34]  kthread+0x711/0x8a0
[  726.065936][   T34]  ? __pfx_watchdog+0x10/0x10
[  726.067785][   T34]  ? __pfx_kthread+0x10/0x10
[  726.069568][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  726.071562][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  726.073618][   T34]  ? __pfx_kthread+0x10/0x10
[  726.075453][   T34]  ret_from_fork+0x3fc/0x770
[  726.077276][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  726.079250][   T34]  ? __switch_to_asm+0x39/0x70
[  726.081350][   T34]  ? __switch_to_asm+0x33/0x70
[  726.083404][   T34]  ? __pfx_kthread+0x10/0x10
[  726.085338][   T34]  ret_from_fork_asm+0x1a/0x30
[  726.087308][   T34]  </TASK>
[  726.089357][   T34] Kernel Offset: disabled
[  726.091240][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:46:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b027a80 RCX=ffff88803c3f3980 RDX=0000000000010100
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900000071c8
R8 =0000000000000000 R9 =ffffffff81ae033e R10=0000000000000003 R11=ffffffff81703490
R12=0000000010009db4 R13=dffffc0000000000 R14=0000000000000000 R15=0000000000000020
RIP=ffffffff81b0e652 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f65649dd6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000127e02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6563d87498 00007f6563d87470 XMM03=00007f6563d874a8 00007f6563d874a0
XMM04=00007f65648ed100 00007f6563d87460 XMM05=00007f6563d87478 00007f6563d874c0
XMM06=00007f6563d874b8 00007f6563d874b0 XMM07=00007f6563d874a8 00007f6563d874a0
XMM08=0000000000000000 00007f6563c12ee7 XMM09=0000000000000000 00007f6563c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888107c80237 R9 =1ffff11020f90046 R10=dffffc0000000000 R11=ffffffff854efa70
R12=dffffc0000000000 R13=ffffffff99af98c4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efaec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000130dac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2a58de2b8135c0d3 6fc38bf7bc420471
XMM02=e6c6682854cffc18 c881614d0eff2b26 XMM03=ab424198cc6bc75d 9501a123ea7bd902
XMM04=89d0e9a391d2ed88 d6668534aa875330 XMM05=d7cfb93ee581f066 584a784b059d9491
XMM06=66c281b24b478d95 c4ce2bc9923f9b21 XMM07=74837dce69a4f3d0 730d8b701571f1cc
XMM08=dfbcae7f7fbb6204 f6bdad5289d0e9a3 XMM09=0000000000000000 00007f1b28412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
