last executing test programs:

3m49.58265845s ago: executing program 2 (id=391):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)

3m49.451690714s ago: executing program 2 (id=396):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="24000000240081064e81f782db44b9040a0208000300000000000100f1ffffff02001426", 0x24}], 0x1}, 0x4004000)

3m49.45146491s ago: executing program 2 (id=397):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1)
close(r2)
close(r0)

3m49.298400195s ago: executing program 2 (id=399):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0xa8}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x48041)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000001280)}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0000000000000000818ca79aec5641d631a209c2583790000000000000000", 0x32}], 0x3}, 0x0)

3m47.806433685s ago: executing program 2 (id=405):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

3m47.7363351s ago: executing program 2 (id=406):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)

3m32.651860661s ago: executing program 32 (id=406):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)

3m10.486838147s ago: executing program 3 (id=790):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000420000000800000002"], 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r0, &(0x7f00000004c0), &(0x7f0000000780)=@udp6=r1, 0x1}, 0x20)

3m10.437460822s ago: executing program 3 (id=793):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711273000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

3m10.422069412s ago: executing program 3 (id=795):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

3m10.201791012s ago: executing program 3 (id=797):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xeaffffffffffffff)

3m10.20146573s ago: executing program 3 (id=798):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

3m9.950523244s ago: executing program 3 (id=805):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff07, 0x0)

2m54.372540725s ago: executing program 33 (id=805):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff07, 0x0)

2m54.012418693s ago: executing program 1 (id=918):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
close(r1)

2m53.875377195s ago: executing program 1 (id=921):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r5=>0x0, 0x0})
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401"], 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44004)

2m53.716593961s ago: executing program 0 (id=924):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10, 0x6}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)

2m53.407025106s ago: executing program 0 (id=925):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0c000016400000000000005c00000000003b16"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"})

2m53.394930122s ago: executing program 0 (id=926):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f00000000c0)=r0, 0x4)

2m53.26599394s ago: executing program 0 (id=927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0xfffffffffffffe9e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x0, 0x1, [@m_mpls={0x0, 0x18, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x0, 0x4, 0x9d51dea6fe7dc107}]}, {0x0, 0x6, "79c6f96b38e74762a405d0ec"}, {}, {0x0, 0x8, {0x1}}}}, @m_police={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x8000}], [], [@TCA_POLICE_TBF={0x0, 0x1, {0x8, 0xffffffffffffffff, 0x9d54, 0x8, 0x6, {0x2a, 0x2, 0x100, 0x2, 0x0, 0x3}, {0x8, 0x1, 0xf8, 0xe4c6, 0x23, 0x7}, 0x0, 0x4, 0x4000000}}], [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x7ff, 0x0, 0x7fffffff, 0x6, 0x9, 0x9, 0xc5, 0xc7a4, 0xfffffff8, 0x4, 0xc21f, 0x0, 0x9, 0x12b, 0x1, 0x4, 0x3ff, 0x2, 0xcf, 0x8, 0x7, 0x10001, 0x6, 0x9, 0x5d9, 0x100, 0x1, 0x9, 0x10, 0xffc000, 0x819, 0x7f, 0xfff, 0x6, 0x84, 0x3, 0x7, 0x6, 0x5, 0x2, 0x1c00000, 0xff, 0x7, 0x7f, 0x788e81e6, 0x8, 0xfffffffe, 0x5, 0xd467, 0x9, 0x80000001, 0x4, 0x9698, 0x2, 0x0, 0x5850, 0x400, 0x9, 0x9, 0x7, 0x3, 0xb4, 0x7, 0x6, 0x7, 0x5, 0x9, 0x8, 0xffffffff, 0x3, 0x80000000, 0x3, 0x5, 0x8, 0xe, 0xffff, 0x2, 0x3, 0x401, 0x4, 0x4, 0x145, 0xd20, 0x7, 0x67, 0xff, 0x3, 0x0, 0xff, 0xfffffffe, 0x5, 0x7, 0x6, 0xf73, 0x3, 0x0, 0x7, 0xffff8000, 0x2, 0x5, 0x4, 0x3, 0xa79f, 0x0, 0x6, 0x2, 0x1, 0x824, 0x4, 0x5, 0x9, 0x9, 0x8, 0x4, 0x2, 0xd, 0xfffffff6, 0x2, 0x3, 0x3, 0x713, 0x8, 0x8, 0x3, 0x40, 0x0, 0x6, 0x6, 0x7, 0x1000, 0x2, 0xffff, 0x10, 0x180, 0x8, 0x50, 0x1ff, 0x1, 0xd, 0x0, 0x9, 0x40, 0x6121, 0x9, 0x2, 0x7ff, 0x9, 0x18, 0x704a, 0x3314, 0x781dd778, 0x1, 0x2, 0x9, 0xf54, 0x1ff, 0x800, 0x8, 0x4, 0x6e, 0xc00000, 0xf000000, 0x7078, 0x800, 0xff, 0x40, 0x3, 0x100000, 0x4a, 0x1, 0x8, 0x1000, 0x3ff, 0x7fff, 0x4, 0x3, 0x5, 0x6, 0x1, 0x1, 0x5, 0x7, 0x9, 0x80, 0x3, 0x1, 0x5, 0xc51, 0xffffc425, 0x8001, 0x1, 0x5, 0xfffffff9, 0x3, 0x2d03, 0x3, 0x8, 0xae12, 0x2, 0x1, 0x9, 0x2a, 0x9, 0x200, 0x2, 0x1, 0x7, 0x2, 0x9, 0x43, 0x8, 0x80000001, 0x365, 0x5, 0x7ff, 0x0, 0x4, 0x0, 0x80000000, 0x5, 0x6, 0xfffffffc, 0x0, 0x3, 0xf, 0x0, 0xf, 0x27, 0xff8, 0x9, 0x3, 0x0, 0x3e000, 0xfffffff3, 0x800, 0x3, 0x8, 0x8, 0x8, 0xa45e, 0x7ff, 0x8, 0xffffffff, 0x4, 0xab, 0xfff, 0x4, 0x6f75, 0x9, 0x1, 0xd5, 0x4, 0xffffffff, 0x6, 0x10001, 0x2]}, @TCA_POLICE_TBF={0x0, 0x1, {0xfffffffe, 0x10000000, 0x8001, 0x0, 0x6, {0x8, 0x2, 0x0, 0x80, 0x40, 0x4}, {0x10, 0x0, 0x52, 0x0, 0xf801, 0x9}, 0x6, 0x7c1}}, @TCA_POLICE_RESULT={0x0, 0x5, 0x9}, @TCA_POLICE_TBF={0x0, 0x1, {0x7, 0x10000000, 0x4a5c, 0x1, 0x0, {0x6, 0x3, 0x7, 0x0, 0x8, 0x3}, {0x0, 0x1, 0x0, 0x3, 0x8, 0x4d}, 0x9, 0x29eed86d, 0xb7}}, @TCA_POLICE_RATE64={0x0, 0x8, 0xb}, @TCA_POLICE_RATE64={0x0, 0x8, 0xefd}, @TCA_POLICE_RESULT={0x0, 0x5, 0x5}], [@TCA_POLICE_RESULT={0x0, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x5, 0xbc5b, 0x8, 0x4, 0xdc, 0x2, 0x2, 0x800, 0x0, 0x4, 0x401, 0x3, 0x9, 0x0, 0x4, 0x0, 0xa, 0x6, 0x10, 0x2, 0x8, 0x0, 0x1000, 0x102, 0x8001, 0x1df6, 0xfffffffb, 0x7, 0x2, 0x9, 0x4, 0x10001, 0x8, 0x7, 0x0, 0x1000, 0x3, 0x1, 0x0, 0x6, 0x6, 0x101, 0x68d9, 0x3, 0x2, 0x9, 0xb57, 0x2, 0xffffff7f, 0xffffffff, 0x4, 0x6, 0xe6, 0xa, 0xda, 0xfffffffd, 0x0, 0x9, 0x0, 0x4, 0x9, 0x39, 0x0, 0x2, 0x6, 0x0, 0x8001, 0x5, 0x7, 0x4, 0x5, 0x8, 0x89, 0x0, 0x1, 0xfffffff7, 0x4, 0x955, 0x8, 0x401, 0x288, 0x519e, 0x10001, 0x7fff, 0x4, 0x5, 0x3, 0x1, 0x9, 0x3, 0x0, 0x6418, 0x3542, 0x8, 0x6, 0xffff577a, 0x9, 0x81, 0x4, 0x101, 0x4cd, 0x7, 0x9, 0x1ff, 0xe, 0x8, 0x92, 0x47, 0x9, 0xffff38fb, 0x2, 0x7, 0x7, 0x7, 0x5, 0x400, 0x0, 0x8, 0x0, 0x0, 0xfd4, 0x3, 0x800, 0x1, 0x1, 0x1, 0x84d, 0x1, 0x2, 0xd, 0x2, 0x6, 0x2, 0x2, 0x6, 0x7, 0x7, 0x3, 0x9, 0x4, 0x7ff, 0x9, 0x101, 0x4, 0xdfb, 0x6, 0x7, 0x4, 0x7f1, 0xffffcd51, 0x4, 0x1, 0x4, 0x7, 0x8, 0x8, 0x2, 0x7, 0x9, 0x4329, 0x8, 0x200, 0x2, 0x7fffffff, 0x5, 0x5, 0xe, 0x5, 0x5, 0x4, 0x4, 0x6, 0x1, 0x5, 0xfffffffb, 0x6, 0x4, 0x0, 0x8, 0x4, 0xc, 0x9, 0x2, 0x1, 0x9, 0x5, 0xc609, 0xffffffff, 0x6, 0x7, 0x9, 0x8, 0x401, 0x1, 0x3a6ec7ce, 0xdc0, 0x7, 0x6, 0x8, 0x5, 0x8, 0x8cf, 0x6b99, 0x26e0, 0x763, 0x9, 0xd2e, 0x2, 0x1, 0x2, 0x800, 0x865, 0x500, 0x3, 0x8001, 0x9, 0x4, 0x6, 0x10000, 0xc, 0x2, 0x4, 0x10000, 0x2, 0x3, 0x7, 0x3, 0x7, 0x5, 0x79, 0x6, 0x6, 0x3, 0xfffffeff, 0x7f, 0x3, 0x0, 0xfffffffa, 0x6, 0x6, 0x951, 0x1000, 0xfe1, 0xe561, 0x2, 0x8, 0x6, 0x80000000, 0x5, 0xfff, 0x9, 0xe2eb, 0x1, 0x3, 0x6, 0x4]}, @TCA_POLICE_TBF={0x0, 0x1, {0x1, 0x0, 0x9, 0x9e151b9, 0x0, {0x3, 0x2, 0x200, 0x9, 0x7, 0x296}, {0x8, 0x0, 0x3, 0x21ee, 0x2, 0xffffff3f}, 0x7, 0x3}}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x4}, @TCA_POLICE_RATE={0x0, 0x2, [0xffffffff, 0x1, 0x6, 0x0, 0x2, 0xd, 0x5, 0x6, 0x76, 0xdb, 0x8, 0x3, 0x9, 0x0, 0xf, 0x0, 0xb5b2, 0x7fff, 0x0, 0x7, 0x9, 0x1, 0x1, 0x8, 0x9, 0xf04, 0x8001, 0x4, 0x0, 0x3, 0x1ff, 0x8, 0x8, 0x0, 0xcf8d, 0x2, 0x80000000, 0x960, 0xa, 0x2, 0xf3, 0x6bff, 0x100, 0x2, 0x9, 0x4, 0x8, 0x1000, 0x5, 0x2, 0x7f, 0x2, 0x100, 0x6, 0xe, 0x3ff, 0x40000000, 0x4, 0x1, 0x51, 0x3, 0x2, 0x6, 0x1, 0x5, 0x2, 0x3, 0x7ff, 0x4, 0x8000, 0x8, 0x2, 0x6, 0x8001, 0x1000, 0x1, 0xb, 0x7, 0x6, 0x8001, 0x2, 0x70611db1, 0x6, 0xfffffff8, 0x3, 0x1, 0x890, 0xc, 0x2, 0x86c4, 0x80, 0x2, 0x2000200e, 0x9, 0x9, 0x40, 0x4, 0x8615, 0x6, 0x8, 0x9, 0x800, 0x1000, 0x7, 0x47, 0x1, 0x800, 0x7, 0xfffffff9, 0x2, 0x4, 0x5, 0x2, 0x0, 0x93, 0x1, 0x7f, 0x5, 0x9, 0x7, 0xd09, 0x1, 0xa, 0xeff8, 0x15, 0x979, 0x0, 0x5, 0x80000001, 0x6, 0xb8d, 0x1, 0x8, 0x9, 0x6360, 0x9, 0x9, 0x7f, 0x7, 0x76, 0x8, 0x6, 0x3, 0xa69, 0x1, 0x4, 0x0, 0x7ff, 0x3, 0x800, 0xf13, 0x7, 0x1, 0x6, 0x1ff, 0xc, 0xcbee, 0x6, 0xa8a, 0x7, 0x1, 0x7f, 0x6, 0xa, 0xbe9, 0x2, 0x81a1, 0x5, 0x2, 0x0, 0x800, 0x8a, 0x2, 0x8, 0x4, 0x5, 0x5, 0x7, 0x7fffffff, 0x9d25, 0xba3, 0x4, 0xf, 0xd, 0x5, 0x8, 0x4, 0x1, 0x400, 0x4, 0x5, 0xff, 0x8, 0xb, 0x80000001, 0x9, 0xd7, 0x2, 0x1, 0x3, 0x3, 0x2, 0x7, 0x1, 0xc, 0x0, 0x1, 0x9, 0x5, 0xfffffff8, 0xe, 0x8, 0xd4, 0x2, 0x0, 0x101, 0xfffffff5, 0x10007, 0xffffff40, 0x800, 0x8, 0x80000001, 0x4, 0x0, 0x1, 0x8, 0xfa91, 0x10001, 0x44c0, 0x80000000, 0x5, 0x7f, 0x1, 0x400, 0x1, 0xec, 0xffff0000, 0x10, 0x7, 0x6, 0xffff6eed, 0xff, 0x4, 0x67, 0x8000, 0x8c1, 0x6b2, 0xc, 0x5, 0x0, 0xc47, 0x8, 0x4, 0x1ab1, 0x4, 0x4]}, @TCA_POLICE_RATE={0x0, 0x2, [0x7, 0x2, 0x2, 0x3, 0x0, 0x5, 0x9, 0x81, 0x1000, 0x4, 0x8, 0x4, 0x9, 0x5, 0x8, 0x2, 0x2, 0x8, 0x7ff, 0xfff, 0x0, 0xdb, 0x7, 0x0, 0xff, 0xc8, 0xd725, 0xa, 0x3, 0x5, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0x10001, 0x1000, 0x9cf4, 0xfff, 0x3, 0x3, 0x7fff, 0x800000, 0x3, 0x4fe4, 0x4, 0x9, 0x4, 0x1, 0x5, 0x5, 0x636, 0x7, 0x0, 0x7, 0x7, 0x0, 0x1f8b, 0x17, 0x2, 0x80, 0x800, 0x7fffffff, 0x8, 0x0, 0xe98, 0x7, 0x800, 0x6, 0x2, 0x0, 0x4, 0x2, 0x8, 0x1, 0xffb, 0xbf, 0x0, 0x5, 0x10001, 0x6, 0x3, 0x0, 0x7ff, 0x86e, 0xfffffffa, 0x3, 0x0, 0xd, 0x5, 0x2, 0x8, 0x9, 0x32, 0x2, 0xa8, 0x4, 0x40, 0x65, 0x6, 0xb, 0x3, 0xc, 0x9, 0x6, 0x6, 0x6, 0x3, 0x5, 0x4, 0x80000000, 0x4, 0xd8b, 0x8, 0x9, 0x9, 0x2, 0x101, 0x3, 0x9, 0x200, 0xfffffff8, 0x5, 0x0, 0xb, 0x5, 0x7, 0x8, 0x40, 0x6, 0xfffffffa, 0x7c, 0x7, 0x0, 0x3, 0x9, 0x7f, 0x3, 0xd2fc, 0x1000, 0x4, 0x6, 0x3ff, 0xe, 0xf65, 0x0, 0x3c9e, 0x34, 0x9, 0x822, 0x0, 0x2, 0x5, 0x0, 0x7, 0x8, 0xb27, 0xb99, 0x5, 0x8001, 0x10, 0x0, 0xf8f9, 0x5, 0xa, 0x1ff, 0xfffffff9, 0x2, 0xffffefa9, 0xd92, 0x0, 0x4, 0x32ca, 0x9, 0x9, 0x800, 0x1, 0x4, 0x4, 0x7fff, 0x3, 0x4, 0xd9, 0xf8b3, 0x4, 0x9, 0x9, 0x9, 0x8, 0x2, 0x1, 0x5, 0x9, 0x2c, 0x10000, 0x9, 0xbe53, 0x9, 0x7, 0xfffffffa, 0x6, 0x2, 0x6, 0xfff, 0x0, 0x1953, 0x3, 0xb53, 0xe, 0x1, 0x9, 0x7, 0x1, 0x0, 0x100, 0x8001, 0x7, 0x3, 0x0, 0xf, 0x8, 0x0, 0x7, 0x1, 0xfff, 0x800, 0x9, 0x1, 0x6, 0x40, 0x6, 0xb, 0x3c, 0x5, 0x1ff, 0x8000, 0x1, 0x5c, 0x5, 0x10, 0xd3f, 0xcbaf, 0x400, 0x7f, 0x8, 0x9, 0x2, 0xfffffffa, 0x7f, 0x1, 0x0, 0x7, 0xe, 0xda9, 0x6]}], [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x1000}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x8000, 0x4, 0x7fffffff, 0xd, 0x7, 0x4, 0x10000000, 0x1, 0x4, 0xc, 0x4ac, 0x7, 0x0, 0x5, 0x807, 0x1, 0xa99, 0x7, 0x5, 0x0, 0x6, 0xc4b, 0x4, 0x1000, 0x1, 0x14, 0x1, 0xe, 0x9, 0x4, 0x3, 0x40, 0xfffffffb, 0x8, 0x6f, 0x8, 0x2, 0x0, 0xfff, 0x0, 0x7, 0x1, 0xd7, 0x2, 0x8001, 0x0, 0x4, 0x7ff, 0xa4, 0x0, 0x56, 0x2, 0xfffffffe, 0x5, 0x7, 0x7fff, 0x8, 0x80000001, 0x7, 0x4, 0xfffffff9, 0x4, 0x7, 0x4, 0x9, 0x1, 0x5, 0x10001, 0x8, 0x5, 0xa9d, 0x80, 0x4, 0xdd41, 0x5, 0x2, 0x8, 0x4, 0x92, 0x20, 0x1, 0x3, 0xbd43, 0x0, 0x6, 0x3ff, 0x4, 0x4da, 0x9, 0x1039e, 0x7f, 0x10, 0x400, 0x10001, 0x6, 0x6, 0x0, 0x7fffffff, 0x5, 0x2, 0x5, 0x7f, 0x0, 0x0, 0xfffffff8, 0x8, 0x80, 0x3, 0x3f, 0x6, 0x2, 0x10000, 0x2, 0x10000, 0x9e, 0x2, 0x0, 0x2, 0x7, 0xffffffff, 0x4, 0x6, 0x4, 0x8, 0x81, 0x4, 0x0, 0x7f, 0x6, 0x8, 0xffff, 0xc, 0x400, 0x8, 0x8, 0xffffffff, 0x8, 0xf, 0xc, 0x3, 0x0, 0x6, 0x0, 0x3, 0x5, 0x1, 0xba, 0x7, 0xc, 0x8, 0xa, 0x8001, 0x7, 0x3, 0x1, 0x5, 0x4, 0x2, 0x3, 0x6, 0x1, 0x4, 0x40, 0x6, 0x3, 0x9, 0x6, 0xffffff00, 0xd, 0x7, 0xd, 0x2, 0x6, 0x7, 0x1000, 0x7fff, 0x7, 0x7, 0x8, 0x10000, 0xffffffff, 0x10001, 0x9, 0x5, 0x92, 0x3, 0x6, 0x258e, 0x27, 0x1, 0x7, 0x80000001, 0x400, 0x7, 0xeb1e, 0x8, 0x1, 0x0, 0xd, 0x3, 0x4f, 0x80000001, 0x6, 0x1, 0x5, 0x0, 0x10000000, 0x4, 0x7, 0x7, 0x29, 0x9, 0xd, 0x2, 0x1, 0x7, 0x5, 0xfffffffc, 0x6, 0x9d, 0x6, 0x291, 0xfffffc01, 0x4, 0x6, 0xa, 0x3, 0x5, 0x7fff, 0x8, 0xdd1a, 0x40, 0x7f, 0x4, 0x754, 0x8, 0xfff, 0x80000000, 0x80000000, 0x1, 0x200, 0x3, 0x7, 0x1, 0x7, 0x7f, 0x6, 0x372, 0x5, 0x6, 0x39c1, 0x8, 0x121e, 0x3, 0x7fff, 0x5]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x8}, @TCA_POLICE_TBF={0x0, 0x1, {0x3, 0x6, 0x4, 0x1000, 0x6, {0x6, 0x2, 0xd, 0x100, 0x5, 0x6}, {0x2, 0x2, 0x7, 0x240, 0xfe6, 0x3a}, 0x6, 0x1, 0x8000}}]]}, {0x0, 0x6, "3198ed371f1d707e6ab61b1d446ca57549a2874c3b4159de6ed6b9985e13e2989809b66686b5604ff40a90b2d9cac708779dc3eb656e9c49232c1d616667cbc02e6ec171faee47c90cd025494b1f90acdef719e4d65a1231114d4e3c690137613430f87397d325a6c20eacd18cb41165a33d25e777b5766144bc77e0d435645f04cff774cb6c87e891ebdcd5d1440372d5f579c6de0218f37af584c9491f0071ebf4d1df13f4ba68b9d3d7de695e00f44babe3642848d27a80d41156185df7a5"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

2m53.141134337s ago: executing program 0 (id=928):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ff7}, 0x15efa, 0x4, 0x4000098, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ff7ffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x802, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="200000001e006bcd9e3fe3dc6e0800000700000019000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000340), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x81, 0x0, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04)

2m53.01773946s ago: executing program 1 (id=929):
r0 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f", 0xe}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @u32=0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

2m52.506755945s ago: executing program 0 (id=930):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r1}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005a00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010000756c6c2500000000002020207b000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x110c230000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4840, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x8329}, 0x194, 0x2, 0xfffffffc}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)

2m44.520978772s ago: executing program 1 (id=931):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d010900500012804900f880ea72235c5013f75c5a9ea24e25e521b8ca4759fe9ee6cb7c486c434b5f73829b3c21fcb903ee93511b48757cff54a13dc0fce8da4e62d85a1f9fc33f9a53e4d4dcf8115ddf00000020010b"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)

2m44.520781541s ago: executing program 1 (id=932):
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)=""/18, 0x12}], 0x1, 0x0, 0x0, 0x200008c0}, 0x4000)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10)

2m44.243991628s ago: executing program 1 (id=933):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0xb, 0xfffff01c}, {0x6, 0x5, 0x0, 0x40}]})

2m36.679870435s ago: executing program 34 (id=930):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r1}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005a00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010000756c6c2500000000002020207b000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x110c230000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4840, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x8329}, 0x194, 0x2, 0xfffffffc}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0)

2m29.357197149s ago: executing program 35 (id=933):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0xb, 0xfffff01c}, {0x6, 0x5, 0x0, 0x40}]})

2m2.093998637s ago: executing program 6 (id=1039):
r0 = socket$kcm(0x2, 0x3, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote})
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0)

2m1.989763856s ago: executing program 6 (id=1040):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r0, 0x0, 0xd}, 0x18)
r1 = socket$kcm(0x2d, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r2, 0x0, 0x9}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1})

2m1.883579006s ago: executing program 6 (id=1044):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2m1.824273843s ago: executing program 6 (id=1049):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m1.729863748s ago: executing program 6 (id=1051):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m1.663491853s ago: executing program 6 (id=1055):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000640)}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1m46.577416922s ago: executing program 36 (id=1055):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000640)}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

2.109698426s ago: executing program 7 (id=2495):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x13, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394", 0xf}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xb, r2, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)

1.641539247s ago: executing program 5 (id=2502):
r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&\"\"\nt\x00')

1.640501276s ago: executing program 4 (id=2504):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)={0x34, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0x129}]}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

1.578806253s ago: executing program 5 (id=2505):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, 0x0, 0x0, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x87, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0x2)
sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="000000001400000002000000010000", @ANYBLOB='\x00\x00\x00'], 0x30, 0xc080}, 0x4060004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000700)=r1, 0xfccc)
sendmsg$unix(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x40800)
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x26, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018300000040000000000000000000000852000000400000088701000ffffffff182a0000", @ANYRES32, @ANYBLOB="000000000100010018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000004000001000b7080000006eda007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf9100000000cfba000000000000690c33da7f8f00000100000085b700000000006a08b4010000"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x28, &(0x7f0000000780)=""/40, 0x41100, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x0, 0x1, 0xf}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000840)=[{0x1, 0x1, 0xa, 0x3}], 0x10, 0x10}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="17000000008000003f0a0000ac", @ANYRES32=r1, @ANYBLOB='y\x00'/20, @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000040)}, 0x20)

1.578506713s ago: executing program 4 (id=2506):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

1.498231701s ago: executing program 5 (id=2507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b91f04076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.419904588s ago: executing program 4 (id=2508):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000fc0)=""/288, 0x120}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000005340)=""/4039, 0xfc7}, {&(0x7f0000000d40)=""/209, 0xd1}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000ec0)=""/198, 0xc6}, {&(0x7f0000000580)=""/117, 0x75}], 0xb}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r7, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160006003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d8000000140081044e81f782db44b9040211080220000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8080)

1.419717648s ago: executing program 5 (id=2509):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="3504000010000511d25a80648c63940d0324f460040035400c0002000200002037153e370c0401990604100045002befe1b52233956a09ead0634e75b05aad0a0018660ce834faf7fe5e59fe299122ac29cb749a639a7ba626ced1b84d8b12a5094a5467ec58cf10a179fb299c6f9f3bc7611d4c41e0f8e4619482038285d4e6d4b719666611fab4b0085e8b", 0x8c}, {&(0x7f0000000a40)="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", 0x3a9}], 0x2}, 0x0)

1.299677685s ago: executing program 5 (id=2510):
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14301, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, 0x0, 0x20000002)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xd, 0x7, 0x6, 0x0, 0x0, 0x3, 0x43a16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x7, 0x2}, 0x5020, 0x1500, 0x3, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, 0x0, 0x5000)
setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000), 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000200)="a5fdcb601cc4acec9fb03ffa3d7f1b30b9d8cbec0de6e5c890d736873343c1757902ee1aa9ab684eded3fb6f43a4050ccfb57b5e2c4ef5450073926de55164b1142b538c7283c864fea38a0a5af97af2cf6fa1478ae67bc7aeabd30582fb0a48cff9", &(0x7f0000000280)=""/2, &(0x7f0000000400)="2c251a630d2a4efd5f011ca207313a641d9a87f3a84b44f1830cbb07471ed6987a68c11c13c6ac1c47b7d6129f8ac68df78c86d0a1262910a08e01dfd6aace7ca4f19d568da154e4f493d7a9f3791a6594bc1da6c97ac86f1b8f9de3ebfb125e1df638381f2d7e7780c5ec7a1f5339aa6534f2b320111a20898cd057fa70bba3010dc4c78132cb9c143db0bc2510d9f747227f37cf69f1b3fce9af0fe724d289b570e9422a30705a5175762ecbbc98823ab07cab8676eedabf2e30833c619295cd1c4f26", &(0x7f00000002c0)="75cb5039de4e69e5d9168fe83c705dc32f6148a64e70ddb68c8528d63b70", 0x4, r5, 0x4}, 0x38)
setsockopt$sock_attach_bpf(r6, 0x84, 0x84, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5411, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000)

442.119012ms ago: executing program 7 (id=2511):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @fallback=0x8}, 0x94)

360.168908ms ago: executing program 7 (id=2512):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x89, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7013a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3d, 0x1}, 0x108, 0x0, 0x4000000, 0x3, 0x3fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x22, 0x2, 0x21)
sendmsg$sock(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)

282.387175ms ago: executing program 5 (id=2513):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x20a22000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xd900, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)

209.253813ms ago: executing program 7 (id=2514):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x1c, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf29000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25)

208.794444ms ago: executing program 7 (id=2515):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1800000068006b004100"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010)

185.086581ms ago: executing program 4 (id=2516):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)

103.457882ms ago: executing program 7 (id=2517):
r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x8}, 0x29, 0x0, 0x0, 0x1, 0x9, 0x1, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12)

323.13µs ago: executing program 4 (id=2518):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 4 (id=2519):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20)
close(r2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4867' (ED25519) to the list of known hosts.
syzkaller login: [   55.756024][ T5796] cgroup: Unknown subsys name 'net'
[   55.902164][ T5796] cgroup: Unknown subsys name 'cpuset'
[   55.907203][ T5796] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.652758][ T5796] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.672575][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.677113][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.681658][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.697686][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.701529][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.737506][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.742148][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.745528][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.750078][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.754349][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.779438][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.783331][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.787697][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.796070][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.804642][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.177878][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   70.195812][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   70.294890][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   70.396713][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.401069][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.403956][ T5876] bridge_slave_0: entered allmulticast mode
[   70.407748][ T5876] bridge_slave_0: entered promiscuous mode
[   70.417606][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.420687][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.423718][ T5871] bridge_slave_0: entered allmulticast mode
[   70.427598][ T5871] bridge_slave_0: entered promiscuous mode
[   70.432434][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.435219][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.437928][ T5876] bridge_slave_1: entered allmulticast mode
[   70.441709][ T5876] bridge_slave_1: entered promiscuous mode
[   70.462095][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.464780][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.467162][ T5871] bridge_slave_1: entered allmulticast mode
[   70.470984][ T5871] bridge_slave_1: entered promiscuous mode
[   70.559693][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.566234][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.574332][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.595099][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.597850][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.601633][ T5874] bridge_slave_0: entered allmulticast mode
[   70.605039][ T5874] bridge_slave_0: entered promiscuous mode
[   70.609170][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.611734][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.614206][ T5874] bridge_slave_1: entered allmulticast mode
[   70.618030][ T5874] bridge_slave_1: entered promiscuous mode
[   70.625750][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.686389][ T5876] team0: Port device team_slave_0 added
[   70.702734][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.707612][ T5876] team0: Port device team_slave_1 added
[   70.713671][ T5871] team0: Port device team_slave_0 added
[   70.728176][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.733918][ T5871] team0: Port device team_slave_1 added
[   70.787022][ T5874] team0: Port device team_slave_0 added
[   70.790424][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.792892][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.802829][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.820946][ T5874] team0: Port device team_slave_1 added
[   70.824036][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.826627][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.836398][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.849363][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.851732][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.862039][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.896640][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.899301][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.908713][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.926755][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.929427][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.938469][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.944865][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.947451][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.957000][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.992167][ T5876] hsr_slave_0: entered promiscuous mode
[   70.994629][ T5876] hsr_slave_1: entered promiscuous mode
[   71.077929][ T5874] hsr_slave_0: entered promiscuous mode
[   71.080936][ T5874] hsr_slave_1: entered promiscuous mode
[   71.083316][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   71.085369][ T5874] Cannot create hsr debugfs directory
[   71.093454][ T5871] hsr_slave_0: entered promiscuous mode
[   71.096501][ T5871] hsr_slave_1: entered promiscuous mode
[   71.099582][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   71.101759][ T5871] Cannot create hsr debugfs directory
[   71.353193][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.355792][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.453096][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.466242][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.486311][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.502458][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.542842][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.559827][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.576083][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.591931][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.689307][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.699533][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.706947][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.720966][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.758544][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.760056][   T54] Bluetooth: hci0: command tx timeout
[   71.812751][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   71.830753][   T54] Bluetooth: hci2: command tx timeout
[   71.833134][   T54] Bluetooth: hci1: command tx timeout
[   71.842099][  T729] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.844684][  T729] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.850367][  T729] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.852588][  T729] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.926753][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.938195][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.963154][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.972852][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   72.002510][  T729] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.005027][  T729] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.020250][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   72.030139][  T729] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.033014][  T729] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.047336][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.050192][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.079541][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.082371][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.187052][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.258154][ T5876] veth0_vlan: entered promiscuous mode
[   72.268294][ T5876] veth1_vlan: entered promiscuous mode
[   72.299394][ T5876] veth0_macvtap: entered promiscuous mode
[   72.305164][ T5876] veth1_macvtap: entered promiscuous mode
[   72.335364][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.354951][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.384731][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.394567][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.402484][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.420399][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.443823][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.454309][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.527452][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.539891][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.575781][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.576194][ T5874] veth0_vlan: entered promiscuous mode
[   72.578677][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.600041][ T5874] veth1_vlan: entered promiscuous mode
[   72.611117][ T5871] veth0_vlan: entered promiscuous mode
[   72.646245][ T5871] veth1_vlan: entered promiscuous mode
[   72.657155][ T5874] veth0_macvtap: entered promiscuous mode
[   72.666101][ T5874] veth1_macvtap: entered promiscuous mode
[   72.685321][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.698781][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.715981][ T5871] veth0_macvtap: entered promiscuous mode
[   72.738061][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.742989][ T5871] veth1_macvtap: entered promiscuous mode
[   72.773268][ T5905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.782782][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.786913][ T5905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.792377][ T5905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.795949][ T5905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.818267][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.847566][ T5905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.867197][ T5905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.872878][ T5905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.896167][ T5905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.985630][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.990529][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.057258][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.065618][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.072736][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'.
[   73.096419][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12'.
[   73.131727][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.140460][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.164673][  T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.168095][  T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.304745][ T5940] netlink: 'syz.2.12': attribute type 21 has an invalid length.
[   73.308088][ T5940] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12'.
[   73.330921][ T5940] netlink: 'syz.2.12': attribute type 4 has an invalid length.
[   73.334254][ T5940] netlink: 'syz.2.12': attribute type 5 has an invalid length.
[   73.337708][ T5940] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12'.
[   73.818003][ T5962] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET)
[   73.830049][ T5238] Bluetooth: hci0: command tx timeout
[   73.911026][ T5238] Bluetooth: hci1: command tx timeout
[   73.913325][ T5238] Bluetooth: hci2: command tx timeout
[   74.042333][ T5972] warning: `syz.1.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.418851][    C1] hrtimer: interrupt took 76655 ns
[   75.035910][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'.
[   75.477452][ T6045] netlink: 'syz.1.55': attribute type 4 has an invalid length.
[   75.484238][ T6045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.55'.
[   75.496266][ T6045] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[   75.870576][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[   75.909446][   T54] Bluetooth: hci0: command tx timeout
[   75.989766][   T54] Bluetooth: hci2: command tx timeout
[   75.990470][ T5238] Bluetooth: hci1: command tx timeout
[   76.176786][ T5238] Bluetooth: hci2: ISO packet for unknown connection handle 0
[   76.181595][ T5238] Bluetooth: hci2: Received unexpected HCI Event 0x00
[   76.675390][ T6089] netlink: 'syz.0.77': attribute type 33 has an invalid length.
[   76.678142][ T6089] netlink: 152 bytes leftover after parsing attributes in process `syz.0.77'.
[   76.736084][ T6095] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   76.758928][ T6095] netlink: 17 bytes leftover after parsing attributes in process `syz.2.79'.
[   76.864190][ T6107] netlink: 'syz.1.86': attribute type 2 has an invalid length.
[   76.867098][ T6107] netlink: 'syz.1.86': attribute type 8 has an invalid length.
[   76.872141][ T6107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.86'.
[   77.989768][ T5238] Bluetooth: hci0: command tx timeout
[   78.070006][ T5238] Bluetooth: hci1: command tx timeout
[   78.072093][ T5238] Bluetooth: hci2: command tx timeout
[   78.645509][ T6170] delete_channel: no stack
[   78.647741][ T6170] delete_channel: no stack
[   79.355355][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   79.537656][ T6222] netlink: 'syz.1.142': attribute type 21 has an invalid length.
[   79.690965][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.149'.
[   79.731424][ T6238] syzkaller0: entered promiscuous mode
[   79.733801][ T6238] syzkaller0: entered allmulticast mode
[   79.883532][ T6246] Zero length message leads to an empty skb
[   79.967438][ T6252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[   79.983895][ T6254] netlink: 64 bytes leftover after parsing attributes in process `syz.0.158'.
[   80.287773][ T6266] =======================================================
[   80.287773][ T6266] WARNING: The mand mount option has been deprecated and
[   80.287773][ T6266]          and is ignored by this kernel. Remove the mand
[   80.287773][ T6266]          option from the mount to silence this warning.
[   80.287773][ T6266] =======================================================
[   82.493395][ T6314] netlink: 'syz.2.182': attribute type 13 has an invalid length.
[   82.496532][ T6314] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.182'.
[   83.031181][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.079602][ T6348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.193'.
[   83.704132][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'.
[   84.158101][ T6377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.106958][ T6421] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.223'.
[   86.117190][ T6420] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.223'.
[   86.124390][ T6421] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.223'.
[   86.432240][ T6431] netlink: 'syz.2.228': attribute type 10 has an invalid length.
[   86.952757][   T51] cfg80211: failed to load regulatory.db
[   87.144983][ T6431] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   87.186205][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'.
[   87.252197][ T6454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.239'.
[   87.781278][ T6487] netlink: 'syz.1.255': attribute type 27 has an invalid length.
[   87.784266][ T6487] netlink: 164 bytes leftover after parsing attributes in process `syz.1.255'.
[   88.283264][ T6513] : entered promiscuous mode
[   88.483648][ T6526] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   88.487018][ T6526] netlink: 176 bytes leftover after parsing attributes in process `syz.1.273'.
[   88.581739][ T6532] tap0: tun_chr_ioctl cmd 1074025672
[   88.583978][ T6532] tap0: ignored: set checksum enabled
[   88.745436][ T6543] syzkaller0: entered promiscuous mode
[   88.747778][ T6543] syzkaller0: entered allmulticast mode
[   89.053061][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'.
[   89.056994][ T6553] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   89.065017][ T6553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.225847][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.316926][ T6568] veth0_vlan: entered allmulticast mode
[   89.449465][ T5238] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[   89.653540][ T6577] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   89.782123][ T6587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.304'.
[   89.797091][ T6589] netlink: 104 bytes leftover after parsing attributes in process `syz.2.303'.
[   91.607938][ T6646] __nla_validate_parse: 4 callbacks suppressed
[   91.607992][ T6646] netlink: 340 bytes leftover after parsing attributes in process `syz.0.331'.
[   91.614122][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'.
[   91.642636][ T6646] : renamed from hsr0 (while UP)
[   93.336655][   T33] audit: type=1107 audit(1758904974.332:2): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   94.269572][ T6705] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.377536][ T6705] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   94.953922][ T6729] infiniband syz!: set active
[   94.956193][ T6729] infiniband syz!: added team_slave_0
[   94.963518][ T6729] syz!: rxe_create_cq: returned err = -12
[   94.966928][ T6729] infiniband syz!: Couldn't create ib_mad CQ
[   94.969719][ T6729] infiniband syz!: Couldn't open port 1
[   95.011846][ T6729] RDS/IB: syz!: added
[   95.016883][ T6729] smc: adding ib device syz! with port count 1
[   95.022676][ T6729] smc:    ib device syz! port 1 has pnetid 
[   95.710941][ T6765] netlink: 830 bytes leftover after parsing attributes in process `syz.2.385'.
[   95.901784][ T6771] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   95.905144][ T6771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.308149][ T6791] netlink: 'syz.0.398': attribute type 30 has an invalid length.
[   96.395093][ T6791] netlink: 13 bytes leftover after parsing attributes in process `syz.0.398'.
[   98.066025][ T6816] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[  100.119713][ T6839] netlink: 'syz.1.414': attribute type 2 has an invalid length.
[  100.123268][ T6839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.414'.
[  100.134283][ T6839] netlink: 'syz.1.414': attribute type 2 has an invalid length.
[  100.137505][ T6839] netlink: 164 bytes leftover after parsing attributes in process `syz.1.414'.
[  101.959133][ T6867] netlink: 'syz.0.427': attribute type 13 has an invalid length.
[  102.119788][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.124281][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.381877][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.405992][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.763687][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.789508][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.793208][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.962062][ T6875] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.430'.
[  103.028575][ T6878] netlink: 'syz.0.432': attribute type 5 has an invalid length.
[  103.189578][ T6881] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.431'.
[  104.771709][ T6914] : port 1(veth0_to_bridge) entered blocking state
[  104.779037][ T6914] : port 1(veth0_to_bridge) entered disabled state
[  104.785888][ T6914] veth0_to_bridge: entered allmulticast mode
[  104.803679][ T6914] veth0_to_bridge: entered promiscuous mode
[  105.022378][ T6922] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  105.043269][ T6922] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  105.083366][ T6922] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  105.277920][ T6927] netlink: 'syz.1.448': attribute type 29 has an invalid length.
[  106.000206][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'.
[  106.003330][ T6946] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  106.564409][ T6955] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.460'.
[  106.576310][ T6955] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.460'.
[  106.586716][ T6954] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.460'.
[  107.819760][ T6981] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.472'.
[  107.827383][ T6981] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.472'.
[  108.120457][ T6985] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  108.123794][ T6985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.214340][ T6988] syzkaller0: entered promiscuous mode
[  108.216261][ T6988] syzkaller0: entered allmulticast mode
[  111.546533][ T7039] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.495'.
[  111.560431][ T7039] veth0_to_bond: default FDB implementation only supports local addresses
[  111.804681][ T5238] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  111.851289][ T7055] netlink: 104 bytes leftover after parsing attributes in process `syz.1.503'.
[  111.896670][ T7057] netlink: 80 bytes leftover after parsing attributes in process `syz.0.504'.
[  111.969539][ T7058] netlink: 'syz.1.503': attribute type 11 has an invalid length.
[  111.972548][ T7058] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.503'.
[  111.979157][ T7058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.958981][ T7064] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  112.968217][ T7065] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  113.054112][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[  113.240770][ T7081] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  113.251095][ T7081] netlink: 'syz.1.514': attribute type 10 has an invalid length.
[  113.294565][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.298203][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.301874][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.306554][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.313523][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.413407][ T7081] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.740489][ T7082] chnl_net:caif_netlink_parms(): no params data found
[  113.821711][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.824223][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.826689][ T7082] bridge_slave_0: entered allmulticast mode
[  113.830956][ T7082] bridge_slave_0: entered promiscuous mode
[  113.835551][ T7098] netlink: 742 bytes leftover after parsing attributes in process `syz.1.518'.
[  113.840065][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.845994][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.849258][ T7082] bridge_slave_1: entered allmulticast mode
[  113.855410][ T7082] bridge_slave_1: entered promiscuous mode
[  113.897485][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.910404][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.955201][ T7082] team0: Port device team_slave_0 added
[  113.964139][ T7082] team0: Port device team_slave_1 added
[  114.932620][ T7109] Driver unsupported XDP return value 0 on prog  (id 194) dev N/A, expect packet loss!
[  114.945134][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.947812][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.959301][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.966680][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.970305][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.981406][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.052744][ T7082] hsr_slave_0: entered promiscuous mode
[  115.056275][ T7082] hsr_slave_1: entered promiscuous mode
[  115.060304][ T7082] debugfs: 'hsr0' already exists in 'hsr'
[  115.062629][ T7082] Cannot create hsr debugfs directory
[  115.065151][ T7111] lo speed is unknown, defaulting to 1000
[  115.072223][ T7111] lo speed is unknown, defaulting to 1000
[  115.075548][ T7111] lo speed is unknown, defaulting to 1000
[  115.213684][ T7111] infiniband syz2: set down
[  115.217831][ T7111] infiniband syz2: added lo
[  115.224238][ T5919] lo speed is unknown, defaulting to 1000
[  115.244629][ T7111] RDS/IB: syz2: added
[  115.246286][ T7111] smc: adding ib device syz2 with port count 1
[  115.248424][ T7111] smc:    ib device syz2 port 1 has pnetid 
[  115.274566][ T5919] lo speed is unknown, defaulting to 1000
[  115.284940][ T7111] lo speed is unknown, defaulting to 1000
[  115.288529][ T7120] netlink: 328 bytes leftover after parsing attributes in process `syz.1.528'.
[  115.369572][ T5238] Bluetooth: hci3: command tx timeout
[  115.434490][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'.
[  115.528001][ T7111] lo speed is unknown, defaulting to 1000
[  115.618432][ T7082] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.625815][ T7082] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.637648][ T7082] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.645373][ T7082] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  115.702075][ T7111] lo speed is unknown, defaulting to 1000
[  115.829272][ T1096] wlan1: Trigger new scan to find an IBSS to join
[  115.847128][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.893320][ T7082] 8021q: adding VLAN 0 to HW filter on device team0
[  115.896286][ T7111] lo speed is unknown, defaulting to 1000
[  115.902248][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.905196][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.925481][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.928576][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.045260][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  116.118141][   T33] audit: type=1107 audit(1758904997.112:3): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  116.150735][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.208077][ T7082] veth0_vlan: entered promiscuous mode
[  116.217234][ T7082] veth1_vlan: entered promiscuous mode
[  116.240582][ T7082] veth0_macvtap: entered promiscuous mode
[  116.252603][ T7082] veth1_macvtap: entered promiscuous mode
[  116.264461][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.275674][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.298172][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.301693][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.304294][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.307402][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.391808][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.394481][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.442651][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.445591][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.543245][ T7168] netlink: 'syz.1.545': attribute type 1 has an invalid length.
[  116.591688][ T7167] netlink: 10 bytes leftover after parsing attributes in process `syz.0.546'.
[  116.651862][ T5238] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  116.705217][ T7176] netlink: 'syz.3.550': attribute type 27 has an invalid length.
[  116.716799][ T7176] netlink: 164 bytes leftover after parsing attributes in process `syz.3.550'.
[  116.744194][ T7180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.552'.
[  117.410002][ T7209] lo speed is unknown, defaulting to 1000
[  117.439158][ T5238] Bluetooth: hci3: command tx timeout
[  118.533322][ T7250] netlink: 140 bytes leftover after parsing attributes in process `syz.0.583'.
[  118.555390][ T7252] netlink: 'syz.1.584': attribute type 12 has an invalid length.
[  118.558354][ T7252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.584'.
[  118.712277][ T5238] Bluetooth: hci0: command tx timeout
[  118.738428][ T7265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.818403][ T7271] netlink: 160 bytes leftover after parsing attributes in process `syz.1.593'.
[  118.842149][ T7271] netlink: 'syz.1.593': attribute type 10 has an invalid length.
[  118.849719][ T7269] openvswitch: netlink: IPv4 tun info is not correct
[  118.869489][   T70] wlan1: Trigger new scan to find an IBSS to join
[  118.943168][ T7271] batman_adv: batadv0: Adding interface: netdevsim0
[  118.946080][ T7271] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.002626][ T7271] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  119.054908][ T7280] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.596'.
[  119.219819][ T7283] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  119.509252][   T54] Bluetooth: hci3: command tx timeout
[  119.839263][ T7311] netlink: 'syz.1.608': attribute type 1 has an invalid length.
[  120.165588][ T7319] netlink: 'syz.0.611': attribute type 29 has an invalid length.
[  120.376883][ T7328] netlink: 'syz.0.615': attribute type 2 has an invalid length.
[  120.381646][ T7328] netlink: 'syz.0.615': attribute type 8 has an invalid length.
[  120.384728][ T7328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'.
[  120.496362][ T7332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.617'.
[  120.527388][ T7304] netlink: 168 bytes leftover after parsing attributes in process `syz.3.606'.
[  120.810923][ T7347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.551156][ T7374] netlink: 'syz.0.634': attribute type 10 has an invalid length.
[  121.598982][   T54] Bluetooth: hci3: command tx timeout
[  121.621517][ T7371] netlink: 300 bytes leftover after parsing attributes in process `syz.3.635'.
[  121.829096][   T26] wlan1: Trigger new scan to find an IBSS to join
[  121.990593][ T7391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.584438][ T7419] netlink: 'syz.0.654': attribute type 1 has an invalid length.
[  122.750521][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'.
[  122.803020][ T1091] wlan1: Creating new IBSS network, BSSID e6:e7:2a:b8:4d:51
[  123.063023][ T7495] netlink: 'syz.3.665': attribute type 1 has an invalid length.
[  123.624915][ T7556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.674'.
[  124.821494][ T7579] netlink: 'syz.0.684': attribute type 21 has an invalid length.
[  124.824577][ T7579] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.684'.
[  125.247055][ T7600] netlink: 'syz.3.694': attribute type 29 has an invalid length.
[  125.656196][ T7626] netlink: 'syz.3.705': attribute type 1 has an invalid length.
[  126.613815][ T7646] netlink: 'syz.3.714': attribute type 21 has an invalid length.
[  127.485165][ T7648] netlink: 'syz.3.715': attribute type 39 has an invalid length.
[  127.634282][ T7675] netlink: 'syz.1.726': attribute type 6 has an invalid length.
[  127.747117][ T7677] bridge0: entered allmulticast mode
[  127.834121][ T7677] bridge0: entered promiscuous mode
[  130.954467][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'.
[  131.142803][ T7699] syz.0.737: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  131.150088][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.0.737 Not tainted syzkaller #0 PREEMPT(full) 
[  131.150106][ T7699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.150116][ T7699] Call Trace:
[  131.150123][ T7699]  <TASK>
[  131.150130][ T7699]  dump_stack_lvl+0x189/0x250
[  131.150156][ T7699]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.150173][ T7699]  ? __pfx__printk+0x10/0x10
[  131.150192][ T7699]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  131.150210][ T7699]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  131.150226][ T7699]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  131.150244][ T7699]  warn_alloc+0x214/0x310
[  131.150261][ T7699]  ? stack_depot_save_flags+0x41b/0x860
[  131.150277][ T7699]  ? __pfx_warn_alloc+0x10/0x10
[  131.150294][ T7699]  ? kasan_save_track+0x4f/0x80
[  131.150315][ T7699]  ? xskq_create+0x56/0x170
[  131.150331][ T7699]  ? xsk_init_queue+0xb0/0x110
[  131.150344][ T7699]  ? xsk_setsockopt+0x57b/0x8d0
[  131.150355][ T7699]  ? do_sock_setsockopt+0x17c/0x1b0
[  131.150370][ T7699]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  131.150384][ T7699]  ? do_syscall_64+0xfa/0x3b0
[  131.150399][ T7699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.150419][ T7699]  __vmalloc_node_range_noprof+0x125/0x12f0
[  131.150456][ T7699]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  131.150477][ T7699]  ? __kasan_kmalloc+0x93/0xb0
[  131.150491][ T7699]  vmalloc_user_noprof+0xad/0xf0
[  131.150506][ T7699]  ? xskq_create+0xbf/0x170
[  131.150522][ T7699]  xskq_create+0xbf/0x170
[  131.150539][ T7699]  xsk_init_queue+0xb0/0x110
[  131.150557][ T7699]  xsk_setsockopt+0x57b/0x8d0
[  131.150574][ T7699]  ? __pfx_xsk_setsockopt+0x10/0x10
[  131.150590][ T7699]  ? __pfx_aa_sk_perm+0x10/0x10
[  131.150638][ T7699]  ? __fget_files+0x2a/0x420
[  131.150653][ T7699]  ? aa_sock_opt_perm+0xff/0x1b0
[  131.150675][ T7699]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  131.150690][ T7699]  ? __pfx_xsk_setsockopt+0x10/0x10
[  131.150703][ T7699]  do_sock_setsockopt+0x17c/0x1b0
[  131.150723][ T7699]  __x64_sys_setsockopt+0x13f/0x1b0
[  131.150741][ T7699]  do_syscall_64+0xfa/0x3b0
[  131.150757][ T7699]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.150772][ T7699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.150784][ T7699]  ? exc_page_fault+0x9f/0xf0
[  131.150798][ T7699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.150809][ T7699] RIP: 0033:0x7fb77078ec29
[  131.150822][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.150841][ T7699] RSP: 002b:00007fb77156b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  131.150855][ T7699] RAX: ffffffffffffffda RBX: 00007fb7709d5fa0 RCX: 00007fb77078ec29
[  131.150864][ T7699] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[  131.150871][ T7699] RBP: 00007fb770811e41 R08: 0000000000000004 R09: 0000000000000000
[  131.150878][ T7699] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  131.150887][ T7699] R13: 00007fb7709d6038 R14: 00007fb7709d5fa0 R15: 00007ffed784a2e8
[  131.150909][ T7699]  </TASK>
[  131.150915][ T7699] Mem-Info:
[  131.282900][ T7699] active_anon:5228 inactive_anon:0 isolated_anon:0
[  131.282900][ T7699]  active_file:1330 inactive_file:38271 isolated_file:0
[  131.282900][ T7699]  unevictable:1768 dirty:255 writeback:0
[  131.282900][ T7699]  slab_reclaimable:9928 slab_unreclaimable:87465
[  131.282900][ T7699]  mapped:18156 shmem:2437 pagetables:971
[  131.282900][ T7699]  sec_pagetables:0 bounce:0
[  131.282900][ T7699]  kernel_misc_reclaimable:0
[  131.282900][ T7699]  free:265159 free_pcp:20743 free_cma:0
[  131.300818][ T7699] Node 0 active_anon:11108kB inactive_anon:0kB active_file:2008kB inactive_file:18184kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17412kB dirty:368kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5248kB pagetables:1844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  131.312895][ T7699] Node 1 active_anon:9804kB inactive_anon:0kB active_file:3312kB inactive_file:134900kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55212kB dirty:652kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6448kB pagetables:1972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  131.325044][ T7699] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  131.336214][ T7699] lowmem_reserve[]: 0 811 811 811 811
[  131.338332][ T7699] Node 0 DMA32 free:404296kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11108kB inactive_anon:0kB active_file:2008kB inactive_file:18184kB unevictable:3536kB writepending:368kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:31004kB local_pcp:15780kB free_cma:0kB
[  131.350904][ T7699] lowmem_reserve[]: 0 0 0 0 0
[  131.352825][ T7699] Node 1 DMA32 free:446428kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:11860kB local_pcp:9848kB free_cma:0kB
[  131.364877][ T7699] lowmem_reserve[]: 0 0 854 854 854
[  131.367337][ T7699] Node 1 Normal free:194360kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9736kB inactive_anon:0kB active_file:3312kB inactive_file:134900kB unevictable:3536kB writepending:652kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40344kB local_pcp:20680kB free_cma:0kB
[  131.387747][ T7699] lowmem_reserve[]: 0 0 0 0 0
[  131.389778][ T7699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  131.393893][ T7699] Node 0 DMA32: 980*4kB (UM) 533*8kB (UME) 243*16kB (UM) 556*32kB (UM) 159*64kB (UM) 118*128kB (UME) 106*256kB (UME) 65*512kB (UME) 28*1024kB (UM) 9*2048kB (UM) 59*4096kB (M) = 404328kB
[  131.399711][ T7699] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 3*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 107*4096kB (M) = 446428kB
[  131.404693][ T7699] Node 1 Normal: 1402*4kB (UME) 234*8kB (UME) 138*16kB (UME) 143*32kB (UM) 124*64kB (UM) 63*128kB (UM) 42*256kB (UME) 37*512kB (UM) 27*1024kB (UM) 14*2048kB (UME) 19*4096kB (UM) = 194104kB
[  131.414383][ T7699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.417973][ T7699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  131.422733][ T7699] 42038 total pagecache pages
[  131.424667][ T7699] 0 pages in swap cache
[  131.426077][ T7699] Free swap  = 124996kB
[  131.427741][ T7699] Total swap = 124996kB
[  131.429400][ T7699] 786301 pages RAM
[  131.430686][ T7699] 0 pages HighMem/MovableOnly
[  131.432424][ T7699] 241359 pages reserved
[  131.435620][ T7699] 0 pages cma reserved
[  131.531987][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'.
[  131.535751][ T7713] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  131.538681][ T7713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.599243][ T7717] IPv6: : Disabled Multicast RS
[  131.929882][ T7731] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component
[  131.955710][ T7733] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.752'.
[  132.088579][ T7741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.756'.
[  132.801985][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.804789][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.931270][ T7762] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  133.173000][ T7779] netlink: 763 bytes leftover after parsing attributes in process `syz.3.772'.
[  133.481104][ T7792] netlink: 'syz.3.779': attribute type 1 has an invalid length.
[  133.536497][ T7794] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.780'.
[  133.728086][ T7803] netlink: 92 bytes leftover after parsing attributes in process `syz.1.777'.
[  135.229773][ T7829] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.794'.
[  135.264863][ T7831] netlink: 'syz.1.796': attribute type 39 has an invalid length.
[  135.302783][ T7833] netlink: 'syz.3.795': attribute type 3 has an invalid length.
[  135.305175][ T7833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.795'.
[  136.151234][ T7857] : entered promiscuous mode
[  136.157092][ T7857] : entered allmulticast mode
[  136.706854][ T7874] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.814'.
[  137.082559][ T7884] netlink: 56 bytes leftover after parsing attributes in process `syz.0.818'.
[  138.452123][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.827'.
[  138.460633][ T7910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.667631][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[  141.203530][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[  141.240561][ T7963] IPv6: NLM_F_CREATE should be specified when creating new route
[  141.309142][ T7967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.850'.
[  142.082234][ T7989] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  143.672045][ T8008] netlink: 'syz.0.867': attribute type 21 has an invalid length.
[  143.675389][ T8008] netlink: 156 bytes leftover after parsing attributes in process `syz.0.867'.
[  143.999410][ T8019] bridge_slave_1: left allmulticast mode
[  144.001646][ T8019] bridge_slave_1: left promiscuous mode
[  144.003868][ T8019] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.016598][ T8019] bridge_slave_0: left allmulticast mode
[  144.019679][ T8019] bridge_slave_0: left promiscuous mode
[  144.022014][ T8019] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.168371][ T8023] netlink: 60 bytes leftover after parsing attributes in process `syz.0.876'.
[  144.492232][ T8038] netlink: 'syz.0.882': attribute type 10 has an invalid length.
[  144.498620][ T8038] bond0: (slave bond_slave_0): Releasing backup interface
[  144.543019][ T8040] netlink: 'syz.1.883': attribute type 29 has an invalid length.
[  144.547287][ T8040] netlink: 'syz.1.883': attribute type 29 has an invalid length.
[  144.553112][ T8040] netlink: 500 bytes leftover after parsing attributes in process `syz.1.883'.
[  144.595487][ T8042] netlink: 'syz.1.884': attribute type 10 has an invalid length.
[  144.598732][ T8042] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.884'.
[  145.105141][ T8053] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  148.696226][ T8072] netlink: 6 bytes leftover after parsing attributes in process `syz.1.897'.
[  148.936745][ T8078] netlink: 'syz.1.900': attribute type 1 has an invalid length.
[  149.117370][ T8082] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  149.263311][   T54] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11
[  149.436512][ T8088] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.905'.
[  149.469050][ T8088] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  149.613447][ T8090] netlink: 'syz.1.906': attribute type 33 has an invalid length.
[  149.616470][ T8090] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.906'.
[  149.911406][ T8094] netlink: 'syz.1.908': attribute type 6 has an invalid length.
[  149.914425][ T8094] netlink: 'syz.1.908': attribute type 7 has an invalid length.
[  149.939247][ T8094] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[  149.942270][ T8094] netlink: 449 bytes leftover after parsing attributes in process `syz.1.908'.
[  149.945636][ T8094] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.908'.
[  149.979348][ T8094] netlink: 'syz.1.908': attribute type 6 has an invalid length.
[  149.982693][ T8094] netlink: 'syz.1.908': attribute type 7 has an invalid length.
[  149.985615][ T8094] netlink: 'syz.1.908': attribute type 1 has an invalid length.
[  149.988557][ T8094] netlink: 449 bytes leftover after parsing attributes in process `syz.1.908'.
[  151.472261][ T8059] Set syz1 is full, maxelem 65536 reached
[  151.767865][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.772686][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.776419][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.782985][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.787716][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.828622][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'.
[  151.926318][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.940651][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'.
[  151.947273][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'.
[  151.987052][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.074855][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.173581][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.209319][ T8125] lo speed is unknown, defaulting to 1000
[  152.397927][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'.
[  152.478419][   T13] bridge_slave_1: left allmulticast mode
[  152.490188][   T13] bridge_slave_1: left promiscuous mode
[  152.501725][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.521212][   T13] bridge_slave_0: left allmulticast mode
[  152.523557][   T13] bridge_slave_0: left promiscuous mode
[  152.526042][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.788411][ T8148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.959062][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.965056][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.969425][   T13] bond0 (unregistering): Released all slaves
[  153.829233][   T54] Bluetooth: hci2: command tx timeout
[  156.113908][   T54] Bluetooth: hci2: command tx timeout
[  158.149037][   T54] Bluetooth: hci2: command tx timeout
[  160.290847][   T54] Bluetooth: hci2: command tx timeout
[  160.565187][ T8125] chnl_net:caif_netlink_parms(): no params data found
[  161.875312][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1095380459 wd_nsec: 1095380455
[  168.614142][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.618571][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.623847][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.628069][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.636357][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  170.709166][ T5238] Bluetooth: hci3: command tx timeout
[  172.896074][ T5238] Bluetooth: hci3: command tx timeout
[  174.949011][ T5238] Bluetooth: hci3: command tx timeout
[  176.541056][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.545869][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.550130][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.559080][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.565923][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.028970][   T54] Bluetooth: hci3: command tx timeout
[  178.629027][   T54] Bluetooth: hci4: command tx timeout
[  180.709038][   T54] Bluetooth: hci4: command tx timeout
[  182.941239][   T54] Bluetooth: hci4: command tx timeout
[  184.949224][   T54] Bluetooth: hci4: command tx timeout
[  188.257846][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.263047][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.269031][ T8125] bridge_slave_0: entered allmulticast mode
[  188.275662][ T8125] bridge_slave_0: entered promiscuous mode
[  188.289944][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.292133][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.294498][ T8125] bridge_slave_1: entered allmulticast mode
[  188.297186][ T8125] bridge_slave_1: entered promiscuous mode
[  188.410695][ T8190] lo speed is unknown, defaulting to 1000
[  188.515329][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.537545][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.614532][ T8125] team0: Port device team_slave_0 added
[  188.618443][ T8125] team0: Port device team_slave_1 added
[  188.694973][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.697854][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.715933][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.725056][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.727798][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.741648][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.827336][ T8125] hsr_slave_0: entered promiscuous mode
[  188.836353][ T8125] hsr_slave_1: entered promiscuous mode
[  188.841875][ T8125] debugfs: 'hsr0' already exists in 'hsr'
[  188.844099][ T8125] Cannot create hsr debugfs directory
[  188.847875][ T8185] lo speed is unknown, defaulting to 1000
[  189.152304][ T8190] chnl_net:caif_netlink_parms(): no params data found
[  189.374994][   T13] hsr_slave_0: left promiscuous mode
[  189.378628][   T13] hsr_slave_1: left promiscuous mode
[  189.382602][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.385803][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.390368][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.393408][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.415086][   T13] veth1_macvtap: left promiscuous mode
[  189.417521][   T13] veth0_macvtap: left promiscuous mode
[  189.420586][   T13] veth1_vlan: left promiscuous mode
[  189.422918][   T13] veth0_vlan: left promiscuous mode
[  189.805007][   T13] team0 (unregistering): Port device team_slave_1 removed
[  189.834135][   T13] team0 (unregistering): Port device team_slave_0 removed
[  190.228369][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.246620][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.250388][ T8190] bridge_slave_0: entered allmulticast mode
[  190.254573][ T8190] bridge_slave_0: entered promiscuous mode
[  190.265580][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.268580][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.277138][ T8190] bridge_slave_1: entered allmulticast mode
[  190.281293][ T8190] bridge_slave_1: entered promiscuous mode
[  190.285670][ T8125] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  190.329743][ T8125] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  190.335962][ T8125] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  190.354463][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.358158][ T8125] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  190.388599][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.480531][ T8190] team0: Port device team_slave_0 added
[  190.493405][ T8190] team0: Port device team_slave_1 added
[  190.547105][ T8185] chnl_net:caif_netlink_parms(): no params data found
[  190.556835][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.561110][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.571766][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.593071][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.595916][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.605670][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.734158][ T8190] hsr_slave_0: entered promiscuous mode
[  190.736855][ T8190] hsr_slave_1: entered promiscuous mode
[  190.739519][ T8190] debugfs: 'hsr0' already exists in 'hsr'
[  190.741489][ T8190] Cannot create hsr debugfs directory
[  190.793294][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.796280][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.800893][ T8185] bridge_slave_0: entered allmulticast mode
[  190.804858][ T8185] bridge_slave_0: entered promiscuous mode
[  190.826961][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.830057][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.832991][ T8185] bridge_slave_1: entered allmulticast mode
[  190.836862][ T8185] bridge_slave_1: entered promiscuous mode
[  190.897114][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.938682][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.017457][ T8185] team0: Port device team_slave_0 added
[  191.026861][ T8185] team0: Port device team_slave_1 added
[  191.088618][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.104816][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.107712][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.119548][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.145315][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.148261][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.163353][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.265420][ T8190] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  191.272786][ T8190] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  191.283329][ T8185] hsr_slave_0: entered promiscuous mode
[  191.285742][ T8185] hsr_slave_1: entered promiscuous mode
[  191.288107][ T8185] debugfs: 'hsr0' already exists in 'hsr'
[  191.291609][ T8185] Cannot create hsr debugfs directory
[  191.296264][ T8125] 8021q: adding VLAN 0 to HW filter on device team0
[  191.302235][ T8190] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  191.324311][ T8190] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  191.371710][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.374519][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.702459][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.707092][   T13] bond0 (unregistering): Released all slaves
[  191.730676][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.733097][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.983025][ T8185] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  191.987366][ T8185] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.003454][ T8185] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.031755][ T8185] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  192.080119][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.123741][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.204052][ T8190] 8021q: adding VLAN 0 to HW filter on device team0
[  192.293116][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.295927][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.331850][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.334672][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.354586][   T13] hsr_slave_0: left promiscuous mode
[  192.374880][   T13] hsr_slave_1: left promiscuous mode
[  192.377520][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.388173][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.708707][   T13] team0 (unregistering): Port device team_slave_1 removed
[  192.742362][   T13] team0 (unregistering): Port device team_slave_0 removed
[  193.111639][ T1090] smc: removing ib device syz2
[  193.233629][ T8185] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.302350][ T8125] veth0_vlan: entered promiscuous mode
[  193.342275][ T8185] 8021q: adding VLAN 0 to HW filter on device team0
[  193.346313][ T8125] veth1_vlan: entered promiscuous mode
[  193.417128][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.420017][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.445462][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.447754][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.495178][ T8125] veth0_macvtap: entered promiscuous mode
[  193.514759][ T8125] veth1_macvtap: entered promiscuous mode
[  193.579189][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.584723][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.614159][ T5716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.624559][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.635859][ T5716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.654808][ T5716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.658265][ T5716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.969343][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.975285][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.070834][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.074058][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.103178][ T8185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.122802][ T8190] veth0_vlan: entered promiscuous mode
[  194.143653][ T8190] veth1_vlan: entered promiscuous mode
[  194.242122][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.244103][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.280564][ T8190] veth0_macvtap: entered promiscuous mode
[  194.320392][ T8190] veth1_macvtap: entered promiscuous mode
[  194.433785][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.476168][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.501499][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.505065][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.528073][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.539618][ T5716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.781347][ T8307] __nla_validate_parse: 2 callbacks suppressed
[  194.781361][ T8307] netlink: 180 bytes leftover after parsing attributes in process `syz.4.938'.
[  194.790551][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.797766][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.918366][ T8185] veth0_vlan: entered promiscuous mode
[  194.938427][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.945400][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.976060][ T8185] veth1_vlan: entered promiscuous mode
[  195.093182][ T8185] veth0_macvtap: entered promiscuous mode
[  195.123132][ T8185] veth1_macvtap: entered promiscuous mode
[  195.148589][ T8316] netlink: 'syz.4.940': attribute type 4 has an invalid length.
[  195.154701][ T8316] netlink: 'syz.4.940': attribute type 2 has an invalid length.
[  195.170992][ T8316] netlink: 199408 bytes leftover after parsing attributes in process `syz.4.940'.
[  195.179817][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.187526][ T8185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.244385][ T5716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.277750][ T5881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.283951][ T5881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.290961][ T5881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.352474][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.367159][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.415020][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.423217][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.646617][ T8325] option changes via remount are deprecated (pid=8324 comm=syz.6.942)
[  196.074032][ T8345] netlink: 'syz.5.947': attribute type 1 has an invalid length.
[  196.077104][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.947'.
[  196.437661][ T8347] : entered promiscuous mode
[  196.587217][ T8353] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.950'.
[  196.793073][ T8365] C: renamed from team_slave_0 (while UP)
[  196.854567][ T8365] netlink: 'syz.4.955': attribute type 3 has an invalid length.
[  196.856995][ T8365] netlink: 'syz.4.955': attribute type 1 has an invalid length.
[  196.865323][ T8365] netlink: 116 bytes leftover after parsing attributes in process `syz.4.955'.
[  196.903212][ T8361] netlink: 92 bytes leftover after parsing attributes in process `syz.5.953'.
[  196.929361][ T8367] netlink: 'syz.6.954': attribute type 10 has an invalid length.
[  196.946246][ T8367] bridge0: port 3(macsec0) entered blocking state
[  196.949777][ T8367] bridge0: port 3(macsec0) entered disabled state
[  196.965492][ T8367] macsec0: entered allmulticast mode
[  196.967977][ T8367] veth1_macvtap: entered allmulticast mode
[  196.986716][ T8360] delete_channel: no stack
[  197.005551][ T8367] macsec0: entered promiscuous mode
[  197.043197][ T8367] bridge0: port 3(macsec0) entered blocking state
[  197.046176][ T8367] bridge0: port 3(macsec0) entered forwarding state
[  197.121289][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'.
[  197.125261][ T8372] netlink: 220 bytes leftover after parsing attributes in process `syz.4.957'.
[  197.383264][ T8374] netlink: 'syz.5.958': attribute type 1 has an invalid length.
[  198.070177][ T8379] netlink: 132 bytes leftover after parsing attributes in process `syz.5.960'.
[  198.166054][ T8388] sctp: [Deprecated]: syz.6.963 (pid 8388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.166054][ T8388] Use struct sctp_sack_info instead
[  198.303887][ T8392] netlink: 'syz.4.966': attribute type 10 has an invalid length.
[  198.316399][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.967'.
[  198.316430][ T8392] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  198.476919][ T8400] netlink: 'syz.4.969': attribute type 21 has an invalid length.
[  198.482405][ T8400] netlink: 'syz.4.969': attribute type 3 has an invalid length.
[  198.575117][ T8405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.100523][ T8464] __nla_validate_parse: 7 callbacks suppressed
[  200.100535][ T8464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.998'.
[  200.340898][ T8478] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1003'.
[  200.427250][ T8484] validate_nla: 4 callbacks suppressed
[  200.427361][ T8484] netlink: 'syz.6.1006': attribute type 1 has an invalid length.
[  201.217274][ T8492] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.225602][ T8492] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.394521][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'.
[  201.470813][ T8506] bpf: Bad value for 'gid'
[  202.236997][ T8556] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1022'.
[  202.243911][ T8556] unsupported nlmsg_type 40
[  202.311539][ T8553] netlink: 'syz.6.1021': attribute type 12 has an invalid length.
[  202.314847][ T8553] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1021'.
[  202.463482][ T8560] netlink: 'syz.4.1024': attribute type 11 has an invalid length.
[  202.467222][ T8560] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1024'.
[  202.680355][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.312947][ T8588] netlink: 'syz.5.1035': attribute type 1 has an invalid length.
[  203.316135][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1035'.
[  203.558064][ T8595] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1038'.
[  203.565688][ T8594] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1038'.
[  203.572212][ T8595] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.1038'.
[  203.759163][ T8609] netlink: 'syz.6.1044': attribute type 2 has an invalid length.
[  203.761584][ T8609] netlink: 'syz.6.1044': attribute type 1 has an invalid length.
[  203.900527][ T8623] sysfs: Unknown parameter 'subj_type'
[  204.188023][ T8635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  204.644694][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.801698][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.938159][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.055191][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.348335][ T8676] netlink: 'syz.5.1076': attribute type 4 has an invalid length.
[  205.360355][   T13] bridge_slave_1: left allmulticast mode
[  205.362123][   T13] bridge_slave_1: left promiscuous mode
[  205.363934][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.365101][ T8676] __nla_validate_parse: 5 callbacks suppressed
[  205.365114][ T8676] netlink: 14333 bytes leftover after parsing attributes in process `syz.5.1076'.
[  205.377823][   T13] bridge_slave_0: left allmulticast mode
[  205.398639][   T13] bridge_slave_0: left promiscuous mode
[  205.429259][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.243261][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.250575][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.262888][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  206.272222][   T13] bond0 (unregistering): Released all slaves
[  206.291720][ T8680] netlink: 'syz.4.1078': attribute type 29 has an invalid length.
[  206.884207][ T8704] netlink: 'syz.5.1084': attribute type 1 has an invalid length.
[  206.886923][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'.
[  207.364202][   T13] hsr_slave_0: left promiscuous mode
[  207.404932][   T13] hsr_slave_1: left promiscuous mode
[  207.407476][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.411288][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.419726][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.429501][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.456555][   T13] veth1_macvtap: left promiscuous mode
[  207.459141][   T13] veth0_macvtap: left promiscuous mode
[  207.472045][   T13] veth1_vlan: left promiscuous mode
[  207.473879][   T13] veth0_vlan: left promiscuous mode
[  207.792232][ T8730] netlink: 'syz.5.1089': attribute type 1 has an invalid length.
[  208.374250][   T13] team0 (unregistering): Port device team_slave_1 removed
[  208.418986][   T13] team0 (unregistering): Port device team_slave_0 removed
[  209.279319][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1098'.
[  209.467687][ T8755] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1100'.
[  209.473413][ T8752] openvswitch: netlink: Flow actions attr not present in new flow.
[  210.815212][ T8793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.818217][ T8793] IPv6: NLM_F_CREATE should be set when creating new route
[  210.821214][ T8793] IPv6: NLM_F_CREATE should be set when creating new route
[  210.842918][ T8801] netlink: 'syz.4.1113': attribute type 1 has an invalid length.
[  210.858989][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'.
[  210.879748][ T8801] netlink: 'syz.4.1113': attribute type 16 has an invalid length.
[  210.890568][ T8801] netlink: 'syz.4.1113': attribute type 17 has an invalid length.
[  211.093798][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.633562][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'.
[  211.707471][ T8836] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1126'.
[  212.039610][ T8848] netlink: 'syz.5.1130': attribute type 1 has an invalid length.
[  212.043323][ T8848] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1130'.
[  212.047807][ T8850] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  212.067645][ T8850] syzkaller0: entered promiscuous mode
[  212.080067][ T8850] syzkaller0: entered allmulticast mode
[  212.995584][ T8857] netlink: 'syz.5.1134': attribute type 4 has an invalid length.
[  212.998503][ T8857] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1134'.
[  213.994345][ T8867] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1139'.
[  214.133410][ T8875] netlink: 'syz.4.1143': attribute type 27 has an invalid length.
[  214.135984][ T8875] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.1143'.
[  214.323410][ T8882] netlink: 'syz.4.1147': attribute type 1 has an invalid length.
[  214.326097][ T8882] netlink: 'syz.4.1147': attribute type 2 has an invalid length.
[  214.801910][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.850202][ T8902] tap0: tun_chr_ioctl cmd 2147767507
[  214.886644][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.010307][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.201532][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1159'.
[  215.215061][   T13] batman_adv: batadv0: Removing interface: netdevsim0
[  215.230587][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.401477][   T13] bridge_slave_1: left allmulticast mode
[  215.406248][   T13] bridge_slave_1: left promiscuous mode
[  215.408149][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.417991][   T13] bridge_slave_0: left allmulticast mode
[  215.420555][   T13] bridge_slave_0: left promiscuous mode
[  215.422409][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.428336][   T13] veth0_to_bridge: left allmulticast mode
[  215.432035][   T13] veth0_to_bridge: left promiscuous mode
[  215.435322][   T13] : port 1(veth0_to_bridge) entered disabled state
[  215.864884][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.871743][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.876311][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  215.885102][   T13] bond0 (unregistering): Released all slaves
[  215.987841][   T13] : left promiscuous mode
[  216.392421][ T8923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.954882][ T8941] netlink: 'syz.4.1170': attribute type 23 has an invalid length.
[  216.976262][ T8947] netlink: 'syz.5.1171': attribute type 40 has an invalid length.
[  217.117501][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.264683][   T13] hsr_slave_0: left promiscuous mode
[  217.287508][   T13] hsr_slave_1: left promiscuous mode
[  217.300712][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.307409][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.316888][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.323931][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.347197][   T13] veth1_macvtap: left promiscuous mode
[  217.353480][   T13] veth0_macvtap: left promiscuous mode
[  217.358405][   T13] veth1_vlan: left promiscuous mode
[  217.364508][   T13] veth0_vlan: left promiscuous mode
[  218.145316][   T13] team0 (unregistering): Port device team_slave_1 removed
[  218.195121][   T13] team0 (unregistering): Port device team_slave_0 removed
[  218.200383][   T52] smc: removing ib device syz!
[  218.737911][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1176'.
[  219.415051][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1185'.
[  219.801819][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.806767][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.824477][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.829355][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.832854][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  220.048705][ T9003] chnl_net:caif_netlink_parms(): no params data found
[  220.102441][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.197177][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.223470][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.226120][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.232767][ T9003] bridge_slave_0: entered allmulticast mode
[  220.236761][ T9003] bridge_slave_0: entered promiscuous mode
[  220.253439][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.262317][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.264610][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.267125][ T9003] bridge_slave_1: entered allmulticast mode
[  220.270842][ T9003] bridge_slave_1: entered promiscuous mode
[  220.335494][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.380883][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.395759][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.445825][ T9003] team0: Port device team_slave_0 added
[  220.458366][ T9003] team0: Port device team_slave_1 added
[  220.528011][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.531998][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.545559][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.587334][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.597209][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.607556][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.679293][ T9025] pimreg: tun_chr_ioctl cmd 1074025678
[  220.707883][ T9003] hsr_slave_0: entered promiscuous mode
[  220.714452][ T9003] hsr_slave_1: entered promiscuous mode
[  220.723167][ T9028] pimreg: tun_chr_ioctl cmd 1074025677
[  220.725582][ T9028] pimreg: linktype set to 778
[  220.778519][ T9027] netlink: zone id is out of range
[  220.798415][ T9027] netlink: zone id is out of range
[  220.798448][   T13] macsec0: left allmulticast mode
[  220.805327][   T13] veth1_macvtap: left allmulticast mode
[  220.807034][ T9027] netlink: zone id is out of range
[  220.815701][   T13] macsec0: left promiscuous mode
[  220.816139][   T13] bridge0: port 3(macsec0) entered disabled state
[  220.854961][ T9027] netlink: zone id is out of range
[  220.858242][ T9027] netlink: zone id is out of range
[  220.859450][   T13] bridge_slave_1: left allmulticast mode
[  220.864372][ T9027] netlink: zone id is out of range
[  220.867295][ T9027] netlink: zone id is out of range
[  220.868763][   T13] bridge_slave_1: left promiscuous mode
[  220.876863][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.881991][ T9027] netlink: zone id is out of range
[  220.884995][ T9027] netlink: zone id is out of range
[  220.893304][   T13] bridge_slave_0: left allmulticast mode
[  220.897505][   T13] bridge_slave_0: left promiscuous mode
[  220.901888][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.423464][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.433093][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.437323][   T13] bond0 (unregistering): Released all slaves
[  221.550604][ T9057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1202'.
[  221.627677][ T9063] netlink: 'syz.4.1205': attribute type 10 has an invalid length.
[  221.630972][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1205'.
[  221.633955][ T9063] vcan0: entered promiscuous mode
[  221.635872][ T9063] net_ratelimit: 9 callbacks suppressed
[  221.635893][ T9063] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  221.814601][ T9003] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  221.845444][   T13] hsr_slave_0: left promiscuous mode
[  221.857760][   T13] hsr_slave_1: left promiscuous mode
[  221.863952][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.866714][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.876586][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.881395][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.892976][   T13] veth1_macvtap: left promiscuous mode
[  221.898203][   T13] veth0_macvtap: left promiscuous mode
[  221.902468][ T9070] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  221.902927][   T13] veth1_vlan: left promiscuous mode
[  221.903065][   T13] veth0_vlan: left promiscuous mode
[  221.982072][   T54] Bluetooth: hci0: command tx timeout
[  223.567251][   T13] team0 (unregistering): Port device team_slave_1 removed
[  223.614577][   T13] team0 (unregistering): Port device team_slave_0 removed
[  223.995649][   T54] Bluetooth: hci0: command tx timeout
[  224.217715][ T9130] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1231'.
[  224.246851][ T9003] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  224.252778][ T9003] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  224.261923][ T9003] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  224.272099][ T9130] netlink: 'syz.5.1231': attribute type 11 has an invalid length.
[  224.277943][ T9130] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1231'.
[  224.302086][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.508628][ T9145] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.529745][ T9145] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.561174][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.672048][ T9003] 8021q: adding VLAN 0 to HW filter on device team0
[  224.705014][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.707907][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.762563][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.765563][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.904566][ T9147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1234'.
[  224.992837][ T9147] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1234'.
[  225.003497][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1234'.
[  225.108690][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.172660][ T9171] dummy0: entered allmulticast mode
[  225.445380][ T9003] veth0_vlan: entered promiscuous mode
[  225.454890][ T9003] veth1_vlan: entered promiscuous mode
[  225.505864][ T9003] veth0_macvtap: entered promiscuous mode
[  225.512761][ T9003] veth1_macvtap: entered promiscuous mode
[  225.531550][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.541775][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.555213][ T5716] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.562662][ T5716] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.568425][ T5716] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.578760][ T5716] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.713843][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.716930][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.755833][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.762822][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.211411][   T54] Bluetooth: hci0: command tx timeout
[  226.766395][ T9240] netlink: 'syz.4.1247': attribute type 1 has an invalid length.
[  226.773620][ T9240] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1247'.
[  227.126806][ T9261] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.139645][ T9261] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  228.241584][   T54] Bluetooth: hci0: command tx timeout
[  228.624730][ T9327] netlink: 'syz.5.1289': attribute type 7 has an invalid length.
[  228.694429][ T9334] netlink: 'syz.7.1291': attribute type 1 has an invalid length.
[  228.753846][ T9337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.824771][ T9340] netlink: 'syz.7.1295': attribute type 25 has an invalid length.
[  229.150665][ T9348] netlink: 'syz.7.1299': attribute type 1 has an invalid length.
[  230.293033][ T9381] syzkaller0: entered promiscuous mode
[  230.297991][ T9381] syzkaller0: entered allmulticast mode
[  232.377601][ T9410] netlink: 'syz.5.1318': attribute type 21 has an invalid length.
[  232.403129][ T9410] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1318'.
[  232.407600][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1318'.
[  232.453627][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1321'.
[  232.917592][ T9437] wg0 speed is unknown, defaulting to 1000
[  232.922735][ T9437] wg0 speed is unknown, defaulting to 1000
[  232.930196][ T9437] wg0 speed is unknown, defaulting to 1000
[  233.005412][ T9437] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  233.023610][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1326'.
[  233.032014][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1326'.
[  233.122006][ T9437] wg0 speed is unknown, defaulting to 1000
[  233.135085][ T9437] wg0 speed is unknown, defaulting to 1000
[  233.165434][ T9437] wg0 speed is unknown, defaulting to 1000
[  235.075716][ T9493] netlink: 'syz.5.1348': attribute type 1 has an invalid length.
[  235.088965][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'.
[  235.262711][ T9502] IPv6: NLM_F_CREATE should be specified when creating new route
[  235.815086][ T9528] netlink: 'syz.7.1360': attribute type 49 has an invalid length.
[  237.411255][ T9557] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1372'.
[  238.729820][ T9569] sit0: entered allmulticast mode
[  238.774011][ T9569] sit0: entered promiscuous mode
[  239.058786][ T9575] netlink: 'syz.5.1377': attribute type 3 has an invalid length.
[  239.065102][ T9575] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1377'.
[  239.643603][ T9580] wg2: entered promiscuous mode
[  239.645327][ T9580] wg2: entered allmulticast mode
[  239.691182][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1381'.
[  239.970572][ T9609] netlink: 'syz.4.1384': attribute type 2 has an invalid length.
[  241.402456][ T9626] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.1390'.
[  241.865625][ T9630] netlink: 'syz.7.1392': attribute type 29 has an invalid length.
[  242.249696][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1400'.
[  243.484034][ T9693] netlink: 'syz.5.1410': attribute type 31 has an invalid length.
[  243.600499][ T9700] netlink: 'syz.7.1414': attribute type 3 has an invalid length.
[  243.603585][ T9700] netlink: 201372 bytes leftover after parsing attributes in process `syz.7.1414'.
[  243.642210][ T9704] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1416'.
[  243.646895][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1415'.
[  244.116326][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1431'.
[  244.124249][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1431'.
[  244.250867][ T9744] netlink: 'syz.5.1435': attribute type 21 has an invalid length.
[  244.253436][ T9744] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1435'.
[  244.356573][   T54] Bluetooth: hci2: unexpected event 0x0b length: 151 > 11
[  244.360630][ T9755] sit0: entered allmulticast mode
[  244.436446][ T9752] bpf: Bad value for 'gid'
[  244.446690][ T9755] sit0: entered promiscuous mode
[  244.522135][ T9757] netlink: 'syz.7.1440': attribute type 3 has an invalid length.
[  244.525218][ T9757] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1440'.
[  245.682815][ T9779] xt_limit: Overflow, try lower: 324382443/4200216956
[  247.272239][ T9788] netlink: 208 bytes leftover after parsing attributes in process `syz.7.1452'.
[  247.365607][ T9795] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1455'.
[  248.426649][ T9815] wg0 speed is unknown, defaulting to 1000
[  248.962785][ T9842] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1472'.
[  249.296720][ T9851] netlink: 'syz.7.1474': attribute type 10 has an invalid length.
[  249.531268][ T9851] team0 (unregistering): Port device team_slave_0 removed
[  249.556825][ T9851] team0 (unregistering): Port device team_slave_1 removed
[  249.645458][ T9854] netlink: 'syz.5.1475': attribute type 11 has an invalid length.
[  249.648413][ T9854] netlink: 'syz.5.1475': attribute type 15 has an invalid length.
[  249.652506][ T9854] netlink: 'syz.5.1475': attribute type 16 has an invalid length.
[  249.655213][ T9854] netlink: 'syz.5.1475': attribute type 21 has an invalid length.
[  249.658274][ T9854] netlink: 'syz.5.1475': attribute type 25 has an invalid length.
[  249.661894][ T9854] netlink: 'syz.5.1475': attribute type 27 has an invalid length.
[  249.664942][ T9854] netlink: 'syz.5.1475': attribute type 28 has an invalid length.
[  249.667786][ T9854] netlink: 'syz.5.1475': attribute type 29 has an invalid length.
[  249.672549][ T9854] netlink: 'syz.5.1475': attribute type 30 has an invalid length.
[  249.785573][ T9859] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1477'.
[  249.871558][ T9862] openvswitch: netlink: IPv6 tunnel dst address is zero
[  250.011916][ T9874] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1485'.
[  251.220474][ T9905] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1496'.
[  252.249960][ T9935] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  252.256518][ T9935] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  252.353946][ T9945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.517712][ T9951] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1515'.
[  252.555080][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.924266][ T9962] netlink: 199752 bytes leftover after parsing attributes in process `syz.7.1521'.
[  253.160685][ T9984] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1530'.
[  253.371962][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1531'.
[  253.585356][ T9998] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1538'.
[  253.620808][T10002] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1539'.
[  253.685015][T10006] syzkaller0: entered promiscuous mode
[  253.687329][T10006] syzkaller0: entered allmulticast mode
[  253.731826][T10009] openvswitch: netlink: IP tunnel dst address not specified
[  253.981170][T10021] __nla_validate_parse: 2 callbacks suppressed
[  253.981182][T10021] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1548'.
[  254.386040][T10032] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  254.388443][T10032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.726078][   T54] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10
[  254.759685][T10042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.123144][T10055] delete_channel: no stack
[  255.163441][T10060] validate_nla: 5 callbacks suppressed
[  255.163452][T10060] netlink: 'syz.5.1565': attribute type 10 has an invalid length.
[  255.683302][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.685798][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.967352][T10082] netlink: 'syz.5.1575': attribute type 1 has an invalid length.
[  256.489058][T10082] netlink: 'syz.5.1575': attribute type 3 has an invalid length.
[  256.504493][T10082] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1575'.
[  256.584843][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1577'.
[  256.595825][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1577'.
[  256.646995][T10084] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1576'.
[  256.782953][T10094] netlink: 822 bytes leftover after parsing attributes in process `syz.4.1581'.
[  256.786565][T10094] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1581'.
[  256.886124][T10100] netlink: 'syz.7.1584': attribute type 11 has an invalid length.
[  256.893064][T10100] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1584'.
[  256.947245][T10104] netlink: 'syz.5.1586': attribute type 17 has an invalid length.
[  256.954126][T10104] netlink: 'syz.5.1586': attribute type 16 has an invalid length.
[  256.957285][T10104] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1586'.
[  257.105608][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1589'.
[  258.726341][T10139] netlink: 'syz.4.1600': attribute type 21 has an invalid length.
[  258.736531][T10139] netlink: 'syz.4.1600': attribute type 1 has an invalid length.
[  261.200665][T10173] netlink: 'syz.4.1613': attribute type 1 has an invalid length.
[  261.321027][T10183] netlink: 'syz.7.1616': attribute type 10 has an invalid length.
[  262.136186][T10199] netlink: 'syz.5.1624': attribute type 1 has an invalid length.
[  262.416715][T10209] __nla_validate_parse: 2 callbacks suppressed
[  262.416821][T10209] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1628'.
[  262.483672][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1628'.
[  263.501422][T10251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'.
[  263.507885][T10248] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  263.508006][T10248] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  263.525340][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'.
[  263.582244][T10262] netlink: 'syz.5.1647': attribute type 7 has an invalid length.
[  263.932329][T10282] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1657'.
[  264.013821][T10291] netlink: 'syz.5.1661': attribute type 1 has an invalid length.
[  264.016993][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1661'.
[  264.416723][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1669'.
[  265.297194][T10331] netlink: 'syz.4.1677': attribute type 12 has an invalid length.
[  265.300581][T10331] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1677'.
[  266.086406][T10353] lo speed is unknown, defaulting to 1000
[  266.104127][T10353] lo speed is unknown, defaulting to 1000
[  266.246423][T10353] lo speed is unknown, defaulting to 1000
[  266.285839][T10355] syzkaller0: entered promiscuous mode
[  266.288078][T10355] syzkaller0: entered allmulticast mode
[  266.615212][T10353] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  268.587523][T10353] lo speed is unknown, defaulting to 1000
[  268.592789][T10353] lo speed is unknown, defaulting to 1000
[  268.596002][T10353] lo speed is unknown, defaulting to 1000
[  268.660444][T10374] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1693'.
[  268.663961][T10374] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1693'.
[  269.198135][   T54] Bluetooth: hci2: Malformed Event: 0x13
[  269.298638][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1701'.
[  269.302715][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1701'.
[  269.478011][T10398] netlink: 'syz.7.1702': attribute type 10 has an invalid length.
[  269.824888][T10425] sit0: entered allmulticast mode
[  269.926449][T10425] sit0: entered promiscuous mode
[  270.015333][T10431] netlink: 'syz.4.1715': attribute type 3 has an invalid length.
[  270.018593][T10431] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1715'.
[  270.703818][T10438] netlink: 'syz.5.1718': attribute type 3 has an invalid length.
[  271.311154][T10469] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.1732'.
[  271.314054][T10469] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1732'.
[  271.710595][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1743'.
[  271.714956][T10497] netlink: 'syz.7.1743': attribute type 2 has an invalid length.
[  271.718369][T10497] netlink: 'syz.7.1743': attribute type 1 has an invalid length.
[  271.721597][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1743'.
[  271.770912][T10502] netlink: 'syz.4.1745': attribute type 1 has an invalid length.
[  271.775440][T10502] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1745'.
[  271.832351][T10502] siw: device registration error -23
[  272.166214][T10518] netlink: 'syz.7.1753': attribute type 1 has an invalid length.
[  272.403990][   T54] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  273.075849][T10545] wg0 speed is unknown, defaulting to 1000
[  273.083440][T10545] lo speed is unknown, defaulting to 1000
[  273.706222][T10575] @: renamed from bond_slave_0 (while UP)
[  273.792719][T10583] netlink: 'syz.4.1782': attribute type 21 has an invalid length.
[  273.795230][T10583] __nla_validate_parse: 7 callbacks suppressed
[  273.795239][T10583] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1782'.
[  273.861956][T10591] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.1786'.
[  273.865214][T10591] openvswitch: netlink: Message has 5588 unknown bytes.
[  273.867746][T10591] openvswitch: netlink: Actions may not be safe on all matching packets
[  273.954637][T10596] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1787'.
[  273.972022][T10593] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1787'.
[  274.164203][T10603] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1791'.
[  274.283010][T10610] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1793'.
[  275.182493][T10627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1799'.
[  275.186191][T10627] netlink: 356 bytes leftover after parsing attributes in process `syz.5.1799'.
[  275.483941][T10647] syz.5.1809 (10647) used obsolete PPPIOCDETACH ioctl
[  276.208651][T10671] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1819'.
[  276.370032][T10673] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1820'.
[  276.673171][T10660] syz.5.1813 (10660) used greatest stack depth: 18472 bytes left
[  277.756127][T10719] syzkaller0: entered promiscuous mode
[  277.758546][T10719] syzkaller0: entered allmulticast mode
[  278.219920][T10733] netlink: 'syz.7.1845': attribute type 12 has an invalid length.
[  278.311976][ T5238] Bluetooth: hci2: command 0x0406 tx timeout
[  278.407474][T10744] netlink: 'syz.4.1850': attribute type 12 has an invalid length.
[  278.538623][T10755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.579841][T10760] netlink: 'syz.4.1858': attribute type 29 has an invalid length.
[  278.586465][T10760] netlink: 'syz.4.1858': attribute type 29 has an invalid length.
[  278.593584][T10760] unsupported nla_type 58
[  279.083519][T10775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.375248][T10796] __nla_validate_parse: 5 callbacks suppressed
[  279.375264][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1872'.
[  279.384654][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1872'.
[  279.457260][T10804] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1877'.
[  279.553886][T10809] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  280.485845][T10820] netlink: 'syz.5.1881': attribute type 21 has an invalid length.
[  280.495358][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1881'.
[  281.234617][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1890'.
[  282.530577][T10905] netlink: 'syz.4.1920': attribute type 29 has an invalid length.
[  282.576021][T10914] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1925'.
[  282.588349][T10914] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1925'.
[  282.626089][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'.
[  282.635238][T10919] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  285.145019][T10997] netlink: 'syz.7.1961': attribute type 3 has an invalid length.
[  285.148110][T10997] netlink: 'syz.7.1961': attribute type 1 has an invalid length.
[  285.152315][T10997] netlink: 'syz.7.1961': attribute type 2 has an invalid length.
[  285.155277][T10997] netlink: 'syz.7.1961': attribute type 8 has an invalid length.
[  285.158296][T10997] netlink: 'syz.7.1961': attribute type 10 has an invalid length.
[  285.168919][T10997] netlink: 'syz.7.1961': attribute type 11 has an invalid length.
[  285.173415][T10997] netlink: 198236 bytes leftover after parsing attributes in process `syz.7.1961'.
[  285.449992][T11013] netdevsim netdevsim7 : renamed from netdevsim0 (while UP)
[  285.630961][T11015] netlink: 'syz.5.1969': attribute type 21 has an invalid length.
[  285.639741][T11015] netlink: 'syz.5.1969': attribute type 6 has an invalid length.
[  285.643076][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1969'.
[  285.687190][T11028] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1974'.
[  285.921279][T11035] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1977'.
[  285.927435][T11035] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1977'.
[  285.934343][T11035] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1977'.
[  286.458264][T11067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.671809][T11080] netlink: 'syz.4.1997': attribute type 10 has an invalid length.
[  286.688078][T11080] veth1_macvtap: left promiscuous mode
[  286.924261][T11089] proc: Unknown parameter 'uid'
[  287.006777][T11094] netlink: 'syz.5.2003': attribute type 1 has an invalid length.
[  287.161868][T11101] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2002'.
[  288.147104][T11114] xt_policy: neither incoming nor outgoing policy selected
[  290.933265][T11131] netlink: 'syz.5.2017': attribute type 1 has an invalid length.
[  290.936776][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'.
[  291.419747][T11147] netlink: 'syz.7.2023': attribute type 6 has an invalid length.
[  291.422370][T11147] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2023'.
[  292.034201][T11175] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2037'.
[  292.134208][T11181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.590195][ T5238] Bluetooth: hci3: command 0x0406 tx timeout
[  293.650642][T11223] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2058'.
[  293.653720][T11223] netlink: 6320 bytes leftover after parsing attributes in process `syz.5.2058'.
[  293.762089][T11229] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2061'.
[  294.202503][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2071'.
[  294.312645][T11262] netlink: 'syz.7.2074': attribute type 39 has an invalid length.
[  294.426630][T11264] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2073'.
[  294.432368][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2073'.
[  294.443001][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2073'.
[  294.674533][T11276] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  294.679135][T11276] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.377920][T11290] __nla_validate_parse: 4 callbacks suppressed
[  296.377977][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2085'.
[  296.682473][T11298] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  297.416776][T11313] netlink: 'syz.4.2090': attribute type 27 has an invalid length.
[  297.420845][T11313] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2090'.
[  297.467464][T11315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2091'.
[  297.580591][T11323] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2095'.
[  297.584291][T11323] netlink: zone id is out of range
[  297.586377][T11323] netlink: zone id is out of range
[  297.588409][T11323] netlink: get zone limit has 8 unknown bytes
[  297.870554][T11329] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2098'.
[  298.281012][T11353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2109'.
[  298.612198][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'.
[  298.637896][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2111'.
[  298.710893][T11367] netlink: 'syz.4.2116': attribute type 3 has an invalid length.
[  298.713311][T11367] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2116'.
[  298.736978][T11366] wg2: entered allmulticast mode
[  298.756827][T11366] wg2: entered promiscuous mode
[  298.767210][T11366] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2115'.
[  299.520837][T11384] netlink: 'syz.5.2125': attribute type 2 has an invalid length.
[  300.082808][   T54] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  300.237017][T11421] openvswitch: netlink: Missing valid actions attribute.
[  300.243965][T11421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.265335][T11423] netlink: 'syz.4.2141': attribute type 10 has an invalid length.
[  300.331207][T11423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.344737][T11423] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  300.466586][T11433] C: renamed from team_slave_0
[  301.319572][   T54] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5
[  301.664765][T11470] __nla_validate_parse: 3 callbacks suppressed
[  301.664781][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2162'.
[  301.671303][T11470] netlink: 'syz.4.2162': attribute type 1 has an invalid length.
[  301.951659][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.956143][T11492] bridge0: entered allmulticast mode
[  301.963799][T11492] bridge_slave_1: left allmulticast mode
[  301.965839][T11492] bridge_slave_1: left promiscuous mode
[  301.969002][T11492] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.977892][T11492] bridge_slave_0: left allmulticast mode
[  301.981188][T11492] bridge_slave_0: left promiscuous mode
[  301.983689][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.221846][T11511] netlink: 'syz.5.2182': attribute type 10 has an invalid length.
[  302.248770][T11513] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2183'.
[  302.358566][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2187'.
[  302.743874][T11548] netlink: 'syz.4.2200': attribute type 2 has an invalid length.
[  302.746820][T11548] netlink: 'syz.4.2200': attribute type 8 has an invalid length.
[  302.755028][T11548] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2200'.
[  303.344637][T11548] wg0 speed is unknown, defaulting to 1000
[  303.371057][T11548] lo speed is unknown, defaulting to 1000
[  303.766492][T11565] netlink: 61967 bytes leftover after parsing attributes in process `syz.7.2206'.
[  304.120898][T11583] Unknown options in mask b7f2
[  304.505959][T11599] netlink: 'syz.5.2222': attribute type 10 has an invalid length.
[  304.509826][T11599] netlink: 'syz.5.2222': attribute type 19 has an invalid length.
[  304.512541][T11599] netlink: 14536 bytes leftover after parsing attributes in process `syz.5.2222'.
[  305.198213][   T54] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255
[  305.373941][T11630] syzkaller1: tun_chr_ioctl cmd 1074025677
[  305.379697][T11630] syzkaller1: linktype set to 823
[  305.409751][T11633] netlink: 'syz.4.2239': attribute type 41 has an invalid length.
[  305.413445][T11633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2239'.
[  305.515655][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2241'.
[  305.640064][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2247'.
[  305.787379][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2249'.
[  307.259291][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2257'.
[  307.262504][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2257'.
[  307.415062][T11687] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2263'.
[  307.602748][T11694] sit0: left promiscuous mode
[  307.889623][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2273'.
[  308.865368][   T54] Bluetooth: hci2: Malformed LE Event: 0x0d
[  308.925398][T11746] netlink: 'syz.7.2289': attribute type 1 has an invalid length.
[  309.032886][T11750] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2291'.
[  309.251101][T11763] netlink: 'syz.7.2297': attribute type 1 has an invalid length.
[  309.256659][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2297'.
[  309.285242][T11763] netlink: 'syz.7.2297': attribute type 2 has an invalid length.
[  309.292276][T11763] netlink: 'syz.7.2297': attribute type 8 has an invalid length.
[  309.296163][T11763] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2297'.
[  309.398527][T11766] netlink: 'syz.4.2298': attribute type 10 has an invalid length.
[  309.456905][T11769] netlink: 'syz.4.2298': attribute type 11 has an invalid length.
[  309.460831][T11769] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2298'.
[  309.750007][T11766] team0: Port device wlan1 added
[  310.046839][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.982476][T11773] netlink: 1018 bytes leftover after parsing attributes in process `syz.5.2301'.
[  312.011836][T11766] syz.4.2298 (11766) used greatest stack depth: 18296 bytes left
[  312.085053][T11777] openvswitch: netlink: IP tunnel dst address not specified
[  312.292393][T11794] sit0: left promiscuous mode
[  312.333819][T11794] sit0: entered promiscuous mode
[  313.223121][T11816] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2319'.
[  313.251163][T11817] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2317'.
[  313.255262][T11812] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2317'.
[  313.261894][T11817] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2317'.
[  313.443999][T11828] syzkaller0: entered promiscuous mode
[  313.446248][T11828] syzkaller0: entered allmulticast mode
[  313.547839][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2328'.
[  313.593340][T11841] netlink: 'syz.7.2330': attribute type 29 has an invalid length.
[  313.596783][T11841] netlink: 'syz.7.2330': attribute type 29 has an invalid length.
[  313.918635][T11861] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2339'.
[  314.036674][T11864] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2340'.
[  314.049552][T11864] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2340'.
[  314.989082][T11891] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.2348'.
[  315.044262][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2349'.
[  315.467513][T11902] delete_channel: no stack
[  315.758127][T11918] netlink: 'syz.5.2361': attribute type 3 has an invalid length.
[  315.763480][T11918] netlink: 'syz.5.2361': attribute type 3 has an invalid length.
[  315.975826][T11930] netlink: 'syz.5.2365': attribute type 32 has an invalid length.
[  316.515089][T11981] netlink: 'syz.7.2385': attribute type 5 has an invalid length.
[  316.534992][T11981] : entered promiscuous mode
[  317.125353][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.127920][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.604748][T12030] netlink: 'syz.4.2406': attribute type 27 has an invalid length.
[  317.714453][T12036] netlink: 'syz.5.2409': attribute type 49 has an invalid length.
[  317.847855][T12044] netlink: 'syz.7.2413': attribute type 10 has an invalid length.
[  317.933076][T12047] can: request_module (can-proto-0) failed.
[  318.008347][T12045] debugfs: '!' already exists in 'ieee80211'
[  318.463535][T12065] __nla_validate_parse: 8 callbacks suppressed
[  318.463550][T12065] netlink: 8153 bytes leftover after parsing attributes in process `syz.7.2421'.
[  318.473744][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.608077][T12071] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2424'.
[  318.766781][T12081] netlink: 'syz.7.2429': attribute type 3 has an invalid length.
[  318.814395][T12081] IPv6: NLM_F_CREATE should be specified when creating new route
[  318.820859][T12081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  318.820878][T12085] netlink: 'syz.5.2432': attribute type 21 has an invalid length.
[  318.826709][T12081] IPv6: NLM_F_CREATE should be set when creating new route
[  318.850770][T12089] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2433'.
[  318.887031][T12093] netlink: 'syz.4.2435': attribute type 6 has an invalid length.
[  318.893141][T12093] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2435'.
[  318.972473][T12102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.993989][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2438'.
[  319.162867][T12111] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.2443'.
[  319.166869][T12111] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.2443'.
[  319.170974][T12111] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.2443'.
[  319.486624][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2445'.
[  319.525418][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2446'.
[  320.594362][T12143] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  322.171955][T12192] team0: Port device team_slave_0 removed
[  322.185880][T12192] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  322.242157][T12200] macvtap0: refused to change device tx_queue_len
[  322.398949][T12211] sctp: [Deprecated]: syz.4.2485 (pid 12211) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.398949][T12211] Use struct sctp_sack_info instead
[  324.197272][T12265] __nla_validate_parse: 6 callbacks suppressed
[  324.197283][T12265] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2509'.
[  324.398705][T12262] validate_nla: 4 callbacks suppressed
[  324.398763][T12262] netlink: 'syz.4.2508': attribute type 29 has an invalid length.
[  324.422746][T12262] netlink: 'syz.4.2508': attribute type 29 has an invalid length.
[  324.439243][T12262] netlink: 'syz.4.2508': attribute type 29 has an invalid length.
[  324.464223][T12262] netlink: 'syz.4.2508': attribute type 29 has an invalid length.
[  324.561711][T12270] netlink: 'syz.4.2508': attribute type 2 has an invalid length.
[  324.564813][T12270] netlink: 'syz.4.2508': attribute type 9 has an invalid length.
[  324.593348][T12270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2508'.
[  325.292126][T12274] delete_channel: no stack
[  325.706030][T12295] ==================================================================
[  325.709460][T12295] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  325.712084][T12295] Read of size 4 at addr ffff88810b1ad744 by task syz.7.2520/12295
[  325.715663][T12295] 
[  325.717123][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.7.2520 Not tainted syzkaller #0 PREEMPT(full) 
[  325.717139][T12295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.717150][T12295] Call Trace:
[  325.717156][T12295]  <TASK>
[  325.717163][T12295]  dump_stack_lvl+0x189/0x250
[  325.717177][T12295]  ? __kasan_check_byte+0x12/0x40
[  325.717191][T12295]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.717206][T12295]  ? lock_release+0x4b/0x3e0
[  325.717228][T12295]  ? __virt_addr_valid+0x4a5/0x5c0
[  325.717239][T12295]  print_report+0xca/0x240
[  325.717247][T12295]  ? xfrm_alloc_spi+0x570/0xf30
[  325.717255][T12295]  kasan_report+0x118/0x150
[  325.717269][T12295]  ? xfrm_alloc_spi+0x570/0xf30
[  325.717281][T12295]  xfrm_alloc_spi+0x570/0xf30
[  325.717294][T12295]  ? xfrm_alloc_spi+0x2a0/0xf30
[  325.717312][T12295]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  325.717323][T12295]  ? xfrm_find_acq+0x87/0xa0
[  325.717345][T12295]  xfrm_alloc_userspi+0x70b/0xc90
[  325.717365][T12295]  ? apparmor_capable+0x137/0x1b0
[  325.717386][T12295]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  325.717410][T12295]  ? __nla_parse+0x40/0x60
[  325.717428][T12295]  xfrm_user_rcv_msg+0x7a3/0xab0
[  325.717445][T12295]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  325.717470][T12295]  ? __pfx___mutex_trylock_common+0x10/0x10
[  325.717481][T12295]  ? rcu_is_watching+0x15/0xb0
[  325.717490][T12295]  ? trace_contention_end+0x39/0x120
[  325.717503][T12295]  ? __mutex_lock+0x335/0x1350
[  325.717523][T12295]  netlink_rcv_skb+0x208/0x470
[  325.717541][T12295]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  325.717556][T12295]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.717573][T12295]  ? netlink_deliver_tap+0x2e/0x1b0
[  325.717589][T12295]  ? netlink_deliver_tap+0x2e/0x1b0
[  325.717606][T12295]  xfrm_netlink_rcv+0x79/0x90
[  325.717619][T12295]  netlink_unicast+0x82f/0x9e0
[  325.717637][T12295]  ? __pfx_netlink_unicast+0x10/0x10
[  325.717651][T12295]  ? netlink_sendmsg+0x642/0xb30
[  325.717661][T12295]  ? skb_put+0x11b/0x210
[  325.717678][T12295]  netlink_sendmsg+0x805/0xb30
[  325.717699][T12295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.717717][T12295]  ? aa_sock_msg_perm+0xf1/0x1d0
[  325.717733][T12295]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  325.717744][T12295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.717761][T12295]  __sock_sendmsg+0x21c/0x270
[  325.717777][T12295]  ____sys_sendmsg+0x505/0x830
[  325.717798][T12295]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.717819][T12295]  ? import_iovec+0x74/0xa0
[  325.717834][T12295]  ___sys_sendmsg+0x21f/0x2a0
[  325.717852][T12295]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.717885][T12295]  ? __fget_files+0x2a/0x420
[  325.717899][T12295]  ? __fget_files+0x3a0/0x420
[  325.717911][T12295]  __x64_sys_sendmsg+0x19b/0x260
[  325.717929][T12295]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.717984][T12295]  ? rcu_is_watching+0x15/0xb0
[  325.718002][T12295]  ? do_syscall_64+0xbe/0x3b0
[  325.718022][T12295]  do_syscall_64+0xfa/0x3b0
[  325.718037][T12295]  ? lockdep_hardirqs_on+0x9c/0x150
[  325.718052][T12295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.718066][T12295]  ? exc_page_fault+0x9f/0xf0
[  325.718082][T12295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.718096][T12295] RIP: 0033:0x7fecd7d8ec29
[  325.718109][T12295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.718122][T12295] RSP: 002b:00007fecd8c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.718138][T12295] RAX: ffffffffffffffda RBX: 00007fecd7fd5fa0 RCX: 00007fecd7d8ec29
[  325.718148][T12295] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004
[  325.718157][T12295] RBP: 00007fecd7e11e41 R08: 0000000000000000 R09: 0000000000000000
[  325.718166][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.718174][T12295] R13: 00007fecd7fd6038 R14: 00007fecd7fd5fa0 R15: 00007fff59d8d578
[  325.718190][T12295]  </TASK>
[  325.718194][T12295] 
[  325.862677][T12295] Allocated by task 11129:
[  325.864358][T12295]  kasan_save_track+0x3e/0x80
[  325.866248][T12295]  __kasan_slab_alloc+0x6c/0x80
[  325.868232][T12295]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  325.870423][T12295]  xfrm_state_alloc+0x24/0x2f0
[  325.872350][T12295]  __find_acq_core+0x8a7/0x1c00
[  325.874330][T12295]  xfrm_find_acq+0x78/0xa0
[  325.876123][T12295]  xfrm_alloc_userspi+0x6b3/0xc90
[  325.878210][T12295]  xfrm_user_rcv_msg+0x7a3/0xab0
[  325.880192][T12295]  netlink_rcv_skb+0x208/0x470
[  325.882126][T12295]  xfrm_netlink_rcv+0x79/0x90
[  325.884013][T12295]  netlink_unicast+0x82f/0x9e0
[  325.885866][T12295]  netlink_sendmsg+0x805/0xb30
[  325.887747][T12295]  __sock_sendmsg+0x21c/0x270
[  325.889652][T12295]  ____sys_sendmsg+0x505/0x830
[  325.891548][T12295]  ___sys_sendmsg+0x21f/0x2a0
[  325.893431][T12295]  __x64_sys_sendmsg+0x19b/0x260
[  325.895349][T12295]  do_syscall_64+0xfa/0x3b0
[  325.897147][T12295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.899424][T12295] 
[  325.900394][T12295] Freed by task 5932:
[  325.901995][T12295]  kasan_save_track+0x3e/0x80
[  325.903866][T12295]  kasan_save_free_info+0x46/0x50
[  325.906128][T12295]  __kasan_slab_free+0x5b/0x80
[  325.908210][T12295]  kmem_cache_free+0x18f/0x400
[  325.910129][T12295]  xfrm_state_gc_task+0x52d/0x6b0
[  325.912140][T12295]  process_scheduled_works+0xae1/0x17b0
[  325.914389][T12295]  worker_thread+0x8a0/0xda0
[  325.916249][T12295]  kthread+0x711/0x8a0
[  325.917888][T12295]  ret_from_fork+0x439/0x7d0
[  325.919760][T12295]  ret_from_fork_asm+0x1a/0x30
[  325.921677][T12295] 
[  325.922653][T12295] The buggy address belongs to the object at ffff88810b1ad680
[  325.922653][T12295]  which belongs to the cache xfrm_state of size 928
[  325.928095][T12295] The buggy address is located 196 bytes inside of
[  325.928095][T12295]  freed 928-byte region [ffff88810b1ad680, ffff88810b1ada20)
[  325.933370][T12295] 
[  325.934376][T12295] The buggy address belongs to the physical page:
[  325.936893][T12295] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810b1ae880 pfn:0x10b1ac
[  325.940654][T12295] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  325.944017][T12295] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  325.947030][T12295] page_type: f5(slab)
[  325.948617][T12295] raw: 057ff00000000040 ffff888105552b40 dead000000000122 0000000000000000
[  325.951963][T12295] raw: ffff88810b1ae880 00000000800e0007 00000000f5000000 0000000000000000
[  325.955340][T12295] head: 057ff00000000040 ffff888105552b40 dead000000000122 0000000000000000
[  325.958637][T12295] head: ffff88810b1ae880 00000000800e0007 00000000f5000000 0000000000000000
[  325.962081][T12295] head: 057ff00000000002 ffffea00042c6b01 00000000ffffffff 00000000ffffffff
[  325.965504][T12295] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  325.968904][T12295] page dumped because: kasan: bad access detected
[  325.971398][T12295] page_owner tracks the page as allocated
[  325.973639][T12295] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5988, tgid 5987 (syz.1.33), ts 74400248699, free_ts 74299702528
[  325.980993][T12295]  post_alloc_hook+0x240/0x2a0
[  325.982923][T12295]  get_page_from_freelist+0x21e4/0x22c0
[  325.985154][T12295]  __alloc_frozen_pages_noprof+0x181/0x370
[  325.987466][T12295]  alloc_pages_mpol+0x232/0x4a0
[  325.989399][T12295]  allocate_slab+0x8a/0x370
[  325.991222][T12295]  ___slab_alloc+0xbeb/0x1420
[  325.993117][T12295]  kmem_cache_alloc_noprof+0x283/0x3c0
[  325.995330][T12295]  xfrm_state_alloc+0x24/0x2f0
[  325.997241][T12295]  __find_acq_core+0x8a7/0x1c00
[  325.999162][T12295]  xfrm_find_acq+0x78/0xa0
[  326.000977][T12295]  xfrm_alloc_userspi+0x6b3/0xc90
[  326.003006][T12295]  xfrm_user_rcv_msg+0x7a3/0xab0
[  326.004958][T12295]  netlink_rcv_skb+0x208/0x470
[  326.006851][T12295]  xfrm_netlink_rcv+0x79/0x90
[  326.008716][T12295]  netlink_unicast+0x82f/0x9e0
[  326.010606][T12295]  netlink_sendmsg+0x805/0xb30
[  326.012518][T12295] page last free pid 5970 tgid 5970 stack trace:
[  326.015072][T12295]  __free_frozen_pages+0xbc4/0xd30
[  326.017124][T12295]  stack_depot_save_flags+0x436/0x860
[  326.019423][T12295]  kasan_save_track+0x4f/0x80
[  326.021313][T12295]  __kasan_kmalloc+0x93/0xb0
[  326.023192][T12295]  __kmalloc_cache_noprof+0x230/0x3d0
[  326.025266][T12295]  kmem_cache_free+0x166/0x400
[  326.027113][T12295]  task_work_run+0x1d4/0x260
[  326.028985][T12295]  do_exit+0x6b5/0x2300
[  326.030666][T12295]  __pfx___ia32_sys_exit+0x0/0x10
[  326.032590][T12295]  x64_sys_call+0x21da/0x2200
[  326.034491][T12295]  do_syscall_64+0xfa/0x3b0
[  326.036448][T12295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.038818][T12295] 
[  326.039766][T12295] Memory state around the buggy address:
[  326.042011][T12295]  ffff88810b1ad600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  326.045212][T12295]  ffff88810b1ad680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  326.048323][T12295] >ffff88810b1ad700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  326.051560][T12295]                                            ^
[  326.054025][T12295]  ffff88810b1ad780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  326.057203][T12295]  ffff88810b1ad800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  326.060394][T12295] ==================================================================
[  326.063908][T12295] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  326.067189][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.7.2520 Not tainted syzkaller #0 PREEMPT(full) 
[  326.070856][T12295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  326.074816][T12295] Call Trace:
[  326.076200][T12295]  <TASK>
[  326.077414][T12295]  dump_stack_lvl+0x99/0x250
[  326.079285][T12295]  ? __asan_memcpy+0x40/0x70
[  326.081173][T12295]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.083258][T12295]  ? __pfx__printk+0x10/0x10
[  326.085127][T12295]  vpanic+0x281/0x750
[  326.086700][T12295]  ? __pfx_vpanic+0x10/0x10
[  326.088535][T12295]  ? irqentry_exit+0x74/0x90
[  326.090410][T12295]  panic+0xb9/0xc0
[  326.091952][T12295]  ? __pfx_panic+0x10/0x10
[  326.093735][T12295]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  326.096134][T12295]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  326.098496][T12295]  ? xfrm_alloc_spi+0x570/0xf30
[  326.100428][T12295]  check_panic_on_warn+0x89/0xb0
[  326.102408][T12295]  ? xfrm_alloc_spi+0x570/0xf30
[  326.104298][T12295]  end_report+0x78/0x160
[  326.105960][T12295]  kasan_report+0x129/0x150
[  326.107741][T12295]  ? xfrm_alloc_spi+0x570/0xf30
[  326.109677][T12295]  xfrm_alloc_spi+0x570/0xf30
[  326.111680][T12295]  ? xfrm_alloc_spi+0x2a0/0xf30
[  326.113639][T12295]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  326.115752][T12295]  ? xfrm_find_acq+0x87/0xa0
[  326.117633][T12295]  xfrm_alloc_userspi+0x70b/0xc90
[  326.119592][T12295]  ? apparmor_capable+0x137/0x1b0
[  326.121564][T12295]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  326.123910][T12295]  ? __nla_parse+0x40/0x60
[  326.125568][T12295]  xfrm_user_rcv_msg+0x7a3/0xab0
[  326.126999][T12295]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  326.129202][T12295]  ? __pfx___mutex_trylock_common+0x10/0x10
[  326.131186][T12295]  ? rcu_is_watching+0x15/0xb0
[  326.132908][T12295]  ? trace_contention_end+0x39/0x120
[  326.134872][T12295]  ? __mutex_lock+0x335/0x1350
[  326.136771][T12295]  netlink_rcv_skb+0x208/0x470
[  326.138655][T12295]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  326.140912][T12295]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  326.143167][T12295]  ? netlink_deliver_tap+0x2e/0x1b0
[  326.145334][T12295]  ? netlink_deliver_tap+0x2e/0x1b0
[  326.147460][T12295]  xfrm_netlink_rcv+0x79/0x90
[  326.149364][T12295]  netlink_unicast+0x82f/0x9e0
[  326.151390][T12295]  ? __pfx_netlink_unicast+0x10/0x10
[  326.153570][T12295]  ? netlink_sendmsg+0x642/0xb30
[  326.155625][T12295]  ? skb_put+0x11b/0x210
[  326.157371][T12295]  netlink_sendmsg+0x805/0xb30
[  326.159295][T12295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  326.161462][T12295]  ? aa_sock_msg_perm+0xf1/0x1d0
[  326.163531][T12295]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  326.165685][T12295]  ? __pfx_netlink_sendmsg+0x10/0x10
[  326.167872][T12295]  __sock_sendmsg+0x21c/0x270
[  326.169849][T12295]  ____sys_sendmsg+0x505/0x830
[  326.171366][T12295]  ? __pfx_____sys_sendmsg+0x10/0x10
[  326.172978][T12295]  ? import_iovec+0x74/0xa0
[  326.174353][T12295]  ___sys_sendmsg+0x21f/0x2a0
[  326.176199][T12295]  ? __pfx____sys_sendmsg+0x10/0x10
[  326.178542][T12295]  ? __fget_files+0x2a/0x420
[  326.180169][T12295]  ? __fget_files+0x3a0/0x420
[  326.181778][T12295]  __x64_sys_sendmsg+0x19b/0x260
[  326.183326][T12295]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  326.185144][T12295]  ? rcu_is_watching+0x15/0xb0
[  326.186603][T12295]  ? do_syscall_64+0xbe/0x3b0
[  326.188357][T12295]  do_syscall_64+0xfa/0x3b0
[  326.190116][T12295]  ? lockdep_hardirqs_on+0x9c/0x150
[  326.191679][T12295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.193648][T12295]  ? exc_page_fault+0x9f/0xf0
[  326.195409][T12295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.197734][T12295] RIP: 0033:0x7fecd7d8ec29
[  326.199176][T12295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.205798][T12295] RSP: 002b:00007fecd8c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  326.208963][T12295] RAX: ffffffffffffffda RBX: 00007fecd7fd5fa0 RCX: 00007fecd7d8ec29
[  326.211952][T12295] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004
[  326.214986][T12295] RBP: 00007fecd7e11e41 R08: 0000000000000000 R09: 0000000000000000
[  326.217707][T12295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  326.220472][T12295] R13: 00007fecd7fd6038 R14: 00007fecd7fd5fa0 R15: 00007fff59d8d578
[  326.223562][T12295]  </TASK>
[  326.225410][T12295] Kernel Offset: disabled
[  326.227069][T12295] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:46:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000105a RDI=000000000000105b RBP=00000000000003f8 RSP=ffffc90006b269f0
R8 =ffff8880204f0237 R9 =1ffff1100409e046 R10=dffffc0000000000 R11=ffffffff85504740
R12=dffffc0000000000 R13=ffffffff99b0490e R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff855047bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fecd8c076c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000540 CR3=0000000038fd4000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688aff ffffffff81688a6d
XMM02=00007fe7b29a7498 ffffffff81688a6d XMM03=00007fe7b29a74a8 00007fe7b29a74a0
XMM04=00007fe7b350d100 00007fe7b29a7460 XMM05=00007fe7b29a7478 00007fe7b29a74c0
XMM06=00007fe7b29a74b8 00007fe7b29a74b0 XMM07=00007fe7b29a74a8 00007fe7b29a74a0
XMM08=0000000000000000 00007fe7b2812f0f XMM09=0000000000000000 00007fe7b2812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4665b RBX=1ffff110096084c1 RCX=ffff88810956b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900069e77e0 RSP=ffffc900069e7660
R8 =ffffffff8fa3b537 R9 =1ffffffff1f476a6 R10=dffffc0000000000 R11=fffffbfff1f476a7
R12=ffff88804b042608 R13=dffffc0000000000 R14=ffff88813663bdc0 R15=0000000000000000
RIP=ffffffff81b46643 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe7b3565fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
