last executing test programs:

1m33.708854571s ago: executing program 2 (id=218):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000e00)="130000001a0081044e81f782db4cb9041c1d08", 0x13}], 0x1}, 0x0)

1m33.636643502s ago: executing program 2 (id=220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0xc000)

1m33.636404333s ago: executing program 2 (id=221):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x0, r1}, 0x10)

1m33.30857821s ago: executing program 2 (id=224):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x954b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xffffffffffffff7f, 0x31c}, 0x11efa, 0x4, 0x98, 0x1, 0xfffffffffffffffe, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x23, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000940)={r4, r4})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000030000000000000000000000850000003000000018110000", @ANYBLOB="fbff0000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xd, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m33.074129268s ago: executing program 2 (id=226):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

1m33.016517876s ago: executing program 2 (id=227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x84000)

1m17.975204772s ago: executing program 32 (id=227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x84000)

2.360593202s ago: executing program 3 (id=1386):
r0 = socket$kcm(0x15, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/244, 0xf4}], 0x2, &(0x7f0000000600)=""/128, 0x80}, 0x20)
r5 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

1.437881027s ago: executing program 3 (id=1403):
r0 = socket$kcm(0x2, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000da00000000f0ffffff", @ANYBLOB], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x840)

1.030896505s ago: executing program 3 (id=1404):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

930.781481ms ago: executing program 3 (id=1405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x3, 0x87)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r5 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
r6 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc", 0x13}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r8=>r0})
sendmsg$kcm(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="0f113e198a9a53fb9c310840e98689279237892e011e3c8e97320aa6481b4c744ca158a4dc8b8c9d41036ff481f011a1ef9a1b1e9d156502d9d8594352d29fbe9712bc2f9f0a9a423d9c48dde1071337ec137acdb15968bbeb34ba41426ad8d26a3d8793f4b2a585ddf34dec20e17ab92adb09392689a36879a8486815e4da2c73bb965044cacd3cbe0ce1c97113ce2b0ad085beff3208ad8d96912e8cc96dac68258c872303bc7f21c094f02f7b42353b12ac739291451483672e85227713bcace09649a1398ff84c0e0349a05bb8284a6eaa617f477449eff40f25f699e31f25a15973f27b7fcce70eee", 0xeb}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="fdc889bec88a3fd8d8b27c17d170a4d41bb835e2e89025e857b9b2c0e375c719bdd36b6c96cd5dd70aee70dee7aea3ab5f5b53fcc6fdca683a63c43ec4284e28cc749f4491fb30ca2ba0fe8db03e9d8843b95bdeb6fdd557b0c872a16fddf19043c86ee57eede0ec421a0ee3b2a1e49c3f75e521f67f9bf2a168c72ef42bb6de7842331672b08bdf955f24a3e41f6106e8", 0x91}, {&(0x7f0000001200)="8fc524a20be7320a4fb796d9885c365d1861be5f60471abeceb94822b287b6f61bdda15b721f8d402eab22788a61e457de9b2ebe10076a824b5a78d735bceddcb09807ac833ecbefed175f92908564f33cdbf011fb7c2738aa758c6a4bba17515baab66d330030b9532dfbe68f387813cd6b093380af0fb2e119e41da2d1aaa8519e24e922d8b8defd8b4c6f0ac2f5eb29a7b1ed1b121063f7cbc825cde4ac12183b272c24d23d9a61315555a7166bfd0e1e031377f2b797b457cb1a13eda79f4e50ae15863062f26735a1662e956997bb27e00417056e199f9e939f03597e576823d2ad1f1d66cc7b9784", 0xeb}, {&(0x7f0000001300)}, {&(0x7f0000001340)}, {&(0x7f00000013c0)="4a33d2986078905127cbb68c386cfe8dceb6b4818fda961c92b8825a80932abfb40ce0607ac2a66e0d619fc1c11d925d58ea7ed7ca9ba7160842ac492f0813c01dffd7055ad07b94902a3827c596114e57827d1cb01d48e8e7", 0x59}], 0x7, &(0x7f00000014c0)=[{0x20, 0x137, 0x3ff, "dbc9ddf8034cab80b37d7916e3e151"}, {0xd0, 0x114, 0x7, "c7620fe9c8e29dab70298d2986c8024734630b0abc1f64775228e00f38bdcac5528e67b751726ec61425c6fbdd9c90fb4d7b1f42e3d88ef6bd9714974e25485909519ac265bca31823d9b5fad29a8b4d2d277f915c0da7fc26b6e65964d96dd6ccf572459d4c71a93a840056c9cc25fc38ac45254122eda35eac9908b68968bc804ef890282b8d61a582233f0ef076cbb0d5ed3f54d48bb9467aa631e67d4f9c073af05a1b86f61124411fda23ed89cb305809e4cf19144f065b79250dc6a448"}, {0x88, 0x10b, 0x2, "3418e182ff127692a09ccbce3c343215235da186b3d665b129acfa69550ac95458ac6d596d7d93970e492cbaf86137749466374cdc3906ab75fc721aca36536c0232d2a188dea2e1472d8b998c45fd0f4e774b5e80e145bfaf7b157f144fa0f9d9cd2b4ace2ebd1d568d84361f81de504df220"}], 0x178}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d40)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x2007, 0x3, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x2, 0x8, 0xffffff40, 0x100, 0x8, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x2, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x2, 0xfffffffe, 0x20000003, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0xa, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x5, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0xb, 0x5, 0x9, {0xc, 0x0, 0x6, 0x7ff, 0x3, 0x83f2}, {0xf3, 0x1, 0x7, 0x5, 0xb}, 0x8, 0x9, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7cc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x50}, 0x0)

528.760429ms ago: executing program 1 (id=1408):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1)
sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004)
sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0)

459.561876ms ago: executing program 0 (id=1410):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611883000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

459.289466ms ago: executing program 0 (id=1411):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0)

458.997492ms ago: executing program 1 (id=1412):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000023000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4e"], 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004802c"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

413.910476ms ago: executing program 1 (id=1413):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x16}]})

413.59676ms ago: executing program 0 (id=1414):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@generic={0x1, "cb8db8704d5c5ca55a8edf10e8ed3f5a5090e9f7c449b0075f3de7447578995c7f350d558674acba80ac38a8ce3643a9c18503eebd7d7edc5cd2aac271c800d24f54710369e0a24d07b7e433ff41125387e30099d9000b7c669be8bb99c0c4f5adb51a382804f5252bea2d4f7d5ff1745d88639edfcd8078ac2b7f7fd599"}, 0x80, 0x0}, 0x0)

339.229589ms ago: executing program 0 (id=1415):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, [@sec_ctx={0xc, 0x8, {0xfeb8}}, @mark={0xc, 0x15, {0x0, 0xfffffffa}}]}, 0xd8}}, 0x0)

338.913783ms ago: executing program 0 (id=1416):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020003797a3000000000140000000800014000000000080002400000000038000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000040003800800074004"], 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)

338.672728ms ago: executing program 1 (id=1417):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f00000001c0), 0x0}, 0x20)

260.733482ms ago: executing program 1 (id=1418):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0), 0x1000, r1}, 0x38)

133.53906ms ago: executing program 0 (id=1419):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a07, 0x1700)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x5, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xf1d, 0x80000000, 0x0, 0x50b, r3, 0x5, '\x00', 0x0, r2, 0x1, 0x1fffffe, 0x0, 0xd}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

97.014314ms ago: executing program 3 (id=1420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0)

603.769µs ago: executing program 1 (id=1421):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'dvmrp0\x00'})

0s ago: executing program 3 (id=1422):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="5c00000015006b05c84e21008af32c6e0ada75f802000000400001800000d34460bc04eab505001525346182949a36c23d3b48dfd801000000003f4bd94517e6c1ce86b634ca973e4ad901c86361f68213036342919adcda15a1611a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5179' (ED25519) to the list of known hosts.
syzkaller login: [   56.714612][ T5836] cgroup: Unknown subsys name 'net'
[   56.833362][ T5836] cgroup: Unknown subsys name 'cpuset'
[   56.848500][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.707069][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.377193][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.381427][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.388149][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.392412][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.396807][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.401678][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.407163][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.410514][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.413944][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.443571][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.449634][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.453082][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.456937][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.461184][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.471218][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.823382][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   63.876820][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   63.961862][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   64.016382][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.018908][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.021902][ T5853] bridge_slave_0: entered allmulticast mode
[   64.024946][ T5853] bridge_slave_0: entered promiscuous mode
[   64.056203][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.058558][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.060921][ T5853] bridge_slave_1: entered allmulticast mode
[   64.064139][ T5853] bridge_slave_1: entered promiscuous mode
[   64.081865][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.084701][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.088971][ T5858] bridge_slave_0: entered allmulticast mode
[   64.091894][ T5858] bridge_slave_0: entered promiscuous mode
[   64.115701][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.118455][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.121350][ T5858] bridge_slave_1: entered allmulticast mode
[   64.124375][ T5858] bridge_slave_1: entered promiscuous mode
[   64.148989][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.151326][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.153738][ T5857] bridge_slave_0: entered allmulticast mode
[   64.156947][ T5857] bridge_slave_0: entered promiscuous mode
[   64.171465][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.177084][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.181422][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.186157][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.189200][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.191585][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.194165][ T5857] bridge_slave_1: entered allmulticast mode
[   64.198940][ T5857] bridge_slave_1: entered promiscuous mode
[   64.238512][ T5858] team0: Port device team_slave_0 added
[   64.260546][ T5853] team0: Port device team_slave_0 added
[   64.264669][ T5853] team0: Port device team_slave_1 added
[   64.268919][ T5858] team0: Port device team_slave_1 added
[   64.273505][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.280789][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.319461][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.321701][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.329803][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.335335][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.337691][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.346181][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.388709][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.391635][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.403922][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.408658][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.411001][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.419532][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.424738][ T5857] team0: Port device team_slave_0 added
[   64.429822][ T5857] team0: Port device team_slave_1 added
[   64.519663][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.522548][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.533342][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.545168][ T5858] hsr_slave_0: entered promiscuous mode
[   64.549025][ T5858] hsr_slave_1: entered promiscuous mode
[   64.557498][ T5853] hsr_slave_0: entered promiscuous mode
[   64.560918][ T5853] hsr_slave_1: entered promiscuous mode
[   64.563967][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   64.566559][ T5853] Cannot create hsr debugfs directory
[   64.569419][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.572202][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.583214][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.697972][ T5857] hsr_slave_0: entered promiscuous mode
[   64.701127][ T5857] hsr_slave_1: entered promiscuous mode
[   64.703947][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   64.706389][ T5857] Cannot create hsr debugfs directory
[   65.048219][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.058914][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.072649][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.100716][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.157130][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.170545][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.187772][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.218087][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.251358][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.268749][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.276771][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.286820][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.439944][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.471956][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.493093][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.498063][ T5243] Bluetooth: hci2: command tx timeout
[   65.500376][ T5243] Bluetooth: hci1: command tx timeout
[   65.502713][ T5243] Bluetooth: hci0: command tx timeout
[   65.510730][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.513739][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.522205][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.532303][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.535362][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.570541][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   65.591522][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.602616][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.605555][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.617918][ T3661] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.620223][ T3661] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.635491][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.638099][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.649043][ T3661] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.651444][ T3661] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.832553][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.861053][ T5858] veth0_vlan: entered promiscuous mode
[   65.870992][ T5858] veth1_vlan: entered promiscuous mode
[   65.912192][ T5858] veth0_macvtap: entered promiscuous mode
[   65.924003][ T5858] veth1_macvtap: entered promiscuous mode
[   65.940698][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.962553][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.979775][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.008044][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.010807][ T5893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.025063][ T5893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.030215][ T5893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.059402][ T5893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.075678][ T5853] veth0_vlan: entered promiscuous mode
[   66.110671][ T5853] veth1_vlan: entered promiscuous mode
[   66.120141][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.123173][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.160660][ T5853] veth0_macvtap: entered promiscuous mode
[   66.165183][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.169233][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.171069][ T5853] veth1_macvtap: entered promiscuous mode
[   66.179386][ T5857] veth0_vlan: entered promiscuous mode
[   66.193943][ T5857] veth1_vlan: entered promiscuous mode
[   66.207989][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.222713][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.228922][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.242534][ T5893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.250755][ T5893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.266203][ T5893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.289810][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.314918][ T5857] veth0_macvtap: entered promiscuous mode
[   66.329713][ T5857] veth1_macvtap: entered promiscuous mode
[   66.378524][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.380924][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.382432][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.411810][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.419420][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.422811][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.427440][ T5714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.430791][ T5714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.437288][ T5714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.440573][ T5714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.532809][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.535295][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.574872][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.580201][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.865226][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.968731][ T5940] netlink: 532 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.987970][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'.
[   67.175991][ T5961] netlink: 'syz.1.13': attribute type 25 has an invalid length.
[   67.471536][ T5976] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   67.474650][ T5976] netlink: 17 bytes leftover after parsing attributes in process `syz.1.18'.
[   67.577027][ T5856] Bluetooth: hci0: command tx timeout
[   67.579677][ T5856] Bluetooth: hci1: command tx timeout
[   67.582720][ T5243] Bluetooth: hci2: command tx timeout
[   67.963786][    C0] hrtimer: interrupt took 75845 ns
[   68.394600][ T6010] netlink: 'syz.2.33': attribute type 25 has an invalid length.
[   68.473364][  T792] cfg80211: failed to load regulatory.db
[   68.551005][ T6015] Zero length message leads to an empty skb
[   69.052069][ T6038] netlink: 'syz.0.46': attribute type 7 has an invalid length.
[   69.269277][ T6046] netlink: 'syz.2.49': attribute type 29 has an invalid length.
[   69.282765][ T6046] netlink: 'syz.2.49': attribute type 29 has an invalid length.
[   69.390525][ T6046] netlink: zone id is out of range
[   69.393273][ T6046] netlink: zone id is out of range
[   69.395119][ T6046] netlink: zone id is out of range
[   69.408624][ T6046] netlink: zone id is out of range
[   69.410780][ T6046] netlink: zone id is out of range
[   69.412635][ T6046] netlink: zone id is out of range
[   69.414434][ T6046] netlink: zone id is out of range
[   69.436105][ T6046] netlink: zone id is out of range
[   69.442002][ T6053] netlink: del zone limit has 4 unknown bytes
[   69.446177][ T6046] netlink: zone id is out of range
[   69.580022][ T6063] netlink: 'syz.1.56': attribute type 10 has an invalid length.
[   69.585193][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.609169][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.629579][ T6063] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   69.656550][ T5243] Bluetooth: hci2: command tx timeout
[   69.659003][ T5856] Bluetooth: hci1: command tx timeout
[   69.661286][ T5856] Bluetooth: hci0: command tx timeout
[   69.793731][ T6063] netlink: 'syz.1.56': attribute type 3 has an invalid length.
[   69.800469][ T6063] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.56'.
[   69.947629][ T6063] syz.1.56 (6063) used greatest stack depth: 20480 bytes left
[   70.040945][ T6074] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   70.043811][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'.
[   71.209612][ T6090] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   71.420471][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.425505][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.448191][ T6108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'.
[   71.472438][ T6110] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.513281][ T6110] netlink: 156 bytes leftover after parsing attributes in process `syz.1.77'.
[   71.548394][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[   71.570550][    C0] Illegal XDP return value 16128 on prog  (id 35) dev veth1_to_team, expect packet loss!
[   71.741683][ T5243] Bluetooth: hci2: command tx timeout
[   71.743790][ T5243] Bluetooth: hci0: command tx timeout
[   71.746359][ T5862] Bluetooth: hci1: command tx timeout
[   71.802463][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   72.410087][ T6146] syzkaller0: entered promiscuous mode
[   72.411945][ T6146] syzkaller0: entered allmulticast mode
[   72.480076][ T6149] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET)
[   73.574359][ T6149] syz.1.94 (6149) used greatest stack depth: 20416 bytes left
[   73.634941][ T6164] sit0: entered allmulticast mode
[   73.761794][ T6164] sit0: entered promiscuous mode
[   73.817266][ T6168] validate_nla: 2 callbacks suppressed
[   73.817302][ T6168] netlink: 'syz.2.101': attribute type 3 has an invalid length.
[   73.822600][ T6168] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.101'.
[   75.613554][ T6177] wg0 speed is unknown, defaulting to 1000
[   75.624096][ T6177] wg0 speed is unknown, defaulting to 1000
[   75.628642][ T6177] wg0 speed is unknown, defaulting to 1000
[   75.644877][ T6177] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   75.680861][ T6177] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   75.722838][ T6177] wg0 speed is unknown, defaulting to 1000
[   75.729010][ T6177] wg0 speed is unknown, defaulting to 1000
[   75.734737][ T6177] wg0 speed is unknown, defaulting to 1000
[   76.133946][ T6210] =======================================================
[   76.133946][ T6210] WARNING: The mand mount option has been deprecated and
[   76.133946][ T6210]          and is ignored by this kernel. Remove the mand
[   76.133946][ T6210]          option from the mount to silence this warning.
[   76.133946][ T6210] =======================================================
[   76.170525][ T6214] netlink: 'syz.1.124': attribute type 1 has an invalid length.
[   76.226864][ T6220] netlink: 'syz.0.126': attribute type 2 has an invalid length.
[   76.235218][ T6220] netlink: 'syz.0.126': attribute type 2 has an invalid length.
[   76.291069][ T6223] netlink: 22 bytes leftover after parsing attributes in process `syz.0.128'.
[   76.339437][ T6224] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   76.363883][ T6224] netlink: 'syz.1.125': attribute type 2 has an invalid length.
[   76.416842][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   78.408717][ T6259] warning: `syz.2.140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.461536][ T6267] netlink: 104 bytes leftover after parsing attributes in process `syz.0.143'.
[   78.543565][ T5243] Bluetooth: hci0: Dropping invalid advertising data
[   78.547114][ T5243] Bluetooth: hci0: unknown advertising packet type: 0xff
[   78.605734][ T6275] bridge_slave_1: left allmulticast mode
[   78.617650][ T6275] bridge_slave_1: left promiscuous mode
[   78.620474][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.679497][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'.
[   78.686427][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[   79.285279][ T6275] bridge_slave_0: left allmulticast mode
[   79.288007][ T6275] bridge_slave_0: left promiscuous mode
[   79.290479][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.848450][ T6315] net_ratelimit: 14 callbacks suppressed
[   82.848474][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.002938][ T6327] sit0: entered allmulticast mode
[   83.064142][ T6327] sit0: entered promiscuous mode
[   83.438298][ T6336] netlink: 'syz.1.164': attribute type 3 has an invalid length.
[   83.441335][ T6336] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.164'.
[   84.353188][ T6343] delete_channel: no stack
[   84.463064][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'.
[   84.467497][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'.
[   85.040959][ T6382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.189'.
[   85.153216][ T6392] netlink: 148 bytes leftover after parsing attributes in process `syz.0.193'.
[   85.213001][ T6394] netlink: 208 bytes leftover after parsing attributes in process `syz.0.194'.
[   85.447840][ T6404] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.199'.
[   85.568512][ T6406] sit0: entered allmulticast mode
[   85.661750][ T6406] sit0: entered promiscuous mode
[   85.781934][ T6410] netlink: 'syz.0.200': attribute type 3 has an invalid length.
[   85.785284][ T6410] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.200'.
[   85.808385][ T6412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.202'.
[   85.811942][ T6412] netlink: 108 bytes leftover after parsing attributes in process `syz.1.202'.
[   86.430936][ T6417] wg0 speed is unknown, defaulting to 1000
[   86.784421][ T6446] sctp: [Deprecated]: syz.1.213 (pid 6446) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.784421][ T6446] Use struct sctp_sack_info instead
[   86.850536][ T6445] openvswitch: netlink: IPv6 tunnel dst address is zero
[   86.907727][ T6448] netlink: 'syz.0.216': attribute type 11 has an invalid length.
[   86.912794][ T6448] netlink: 'syz.0.216': attribute type 15 has an invalid length.
[   86.917236][ T6448] netlink: 'syz.0.216': attribute type 16 has an invalid length.
[   86.920365][ T6448] netlink: 'syz.0.216': attribute type 21 has an invalid length.
[   86.923523][ T6448] netlink: 'syz.0.216': attribute type 25 has an invalid length.
[   86.926280][ T6448] netlink: 'syz.0.216': attribute type 27 has an invalid length.
[   86.928814][ T6448] netlink: 'syz.0.216': attribute type 28 has an invalid length.
[   86.931490][ T6448] netlink: 'syz.0.216': attribute type 29 has an invalid length.
[   87.119333][ T6458] wg0 speed is unknown, defaulting to 1000
[   87.149180][ T6459] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   88.460626][ T6491] validate_nla: 1 callbacks suppressed
[   88.460641][ T6491] netlink: 'syz.0.234': attribute type 10 has an invalid length.
[   88.568747][ T6491] team0 (unregistering): Port device team_slave_0 removed
[   88.575912][ T6491] team0 (unregistering): Port device team_slave_1 removed
[   90.090548][ T6530] netlink: 'syz.1.250': attribute type 4 has an invalid length.
[   90.093132][ T6530] netlink: 116 bytes leftover after parsing attributes in process `syz.1.250'.
[   91.296379][ T6542] netlink: 'syz.0.253': attribute type 2 has an invalid length.
[   91.855401][ T6550] netlink: 'syz.0.255': attribute type 3 has an invalid length.
[   91.873663][ T6550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.255'.
[   92.813332][ T6574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.266'.
[   93.199981][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.267'.
[   93.419530][ T6584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.271'.
[   93.424879][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'.
[   94.409553][ T6610] netlink: 60 bytes leftover after parsing attributes in process `syz.0.281'.
[   94.419196][ T6610] unsupported nlmsg_type 40
[   95.229627][ T5243] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10
[   95.992714][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.040973][ T6644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.171492][ T6648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.298'.
[   97.334761][ T6656] netlink: 'syz.0.303': attribute type 11 has an invalid length.
[   97.338896][ T6656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.303'.
[   97.391919][ T6662] netlink: 52 bytes leftover after parsing attributes in process `syz.1.306'.
[   97.432762][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'.
[   97.454969][ T6664] netlink: 'syz.0.307': attribute type 10 has an invalid length.
[   97.458505][ T6664] netlink: 55 bytes leftover after parsing attributes in process `syz.0.307'.
[   98.402469][ T6664] syz.0.307 (6664) used greatest stack depth: 20024 bytes left
[   98.954732][ T6689] netlink: 'syz.1.317': attribute type 1 has an invalid length.
[  100.058548][ T6713] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.328'.
[  100.105716][ T6695] syz.0.320 (6695) used greatest stack depth: 19896 bytes left
[  100.420668][ T6727] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.333'.
[  100.454180][ T6729] netlink: 'syz.1.334': attribute type 21 has an invalid length.
[  101.168397][ T6729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.334'.
[  101.172303][ T6729] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[  101.578001][ T6745] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[  101.866770][ T6750] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.257386][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  103.261968][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  103.268479][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  103.272994][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  103.280181][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  103.324008][ T6783] wg0 speed is unknown, defaulting to 1000
[  103.468806][ T6783] chnl_net:caif_netlink_parms(): no params data found
[  103.791070][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.794056][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.798014][ T6783] bridge_slave_0: entered allmulticast mode
[  103.802491][ T6783] bridge_slave_0: entered promiscuous mode
[  103.809419][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.812299][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.815152][ T6783] bridge_slave_1: entered allmulticast mode
[  103.820030][ T6783] bridge_slave_1: entered promiscuous mode
[  103.859470][ T6783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.867348][ T6783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.948282][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.999570][ T6783] team0: Port device team_slave_0 added
[  104.009151][ T6783] team0: Port device team_slave_1 added
[  104.169841][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.209940][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.219411][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.231995][ T6783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.240169][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.248085][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.291912][ T6783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.301008][ T6800] sit0: left promiscuous mode
[  104.497550][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.515756][ T6801] netlink: 'syz.0.360': attribute type 3 has an invalid length.
[  104.519171][ T6801] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.360'.
[  104.529540][ T6800] sit0: entered promiscuous mode
[  104.908249][ T6797] syz.1.359 (6797) used greatest stack depth: 18280 bytes left
[  105.342026][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.361808][  T792] wg0 speed is unknown, defaulting to 1000
[  105.364415][  T792] syz0: Port: 1 Link DOWN
[  105.405789][ T6783] hsr_slave_0: entered promiscuous mode
[  105.409462][ T6783] hsr_slave_1: entered promiscuous mode
[  105.412523][ T6783] debugfs: 'hsr0' already exists in 'hsr'
[  105.414897][ T6783] Cannot create hsr debugfs directory
[  105.736394][ T5856] Bluetooth: hci3: command tx timeout
[  106.172558][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.178314][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.182363][   T13] bond0 (unregistering): Released all slaves
[  106.265008][ T6828] wg0 speed is unknown, defaulting to 1000
[  106.339527][ T6783] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.360785][ T6783] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.384335][ T6783] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.424668][ T6783] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  106.497159][ T6854] netlink: 'syz.0.379': attribute type 12 has an invalid length.
[  106.499827][ T6854] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.379'.
[  106.559214][   T13] hsr_slave_0: left promiscuous mode
[  106.563313][   T13] hsr_slave_1: left promiscuous mode
[  106.570995][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.573100][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'.
[  106.574265][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.582041][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.586043][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.612221][   T13] veth1_macvtap: left promiscuous mode
[  106.614763][   T13] veth0_macvtap: left promiscuous mode
[  106.617931][   T13] veth1_vlan: left promiscuous mode
[  106.620312][   T13] veth0_vlan: left promiscuous mode
[  106.933159][   T13] team0 (unregistering): Port device team_slave_1 removed
[  106.960560][   T13] team0 (unregistering): Port device team_slave_0 removed
[  107.350946][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.368449][ T6783] 8021q: adding VLAN 0 to HW filter on device team0
[  107.391872][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.395170][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.406991][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.409441][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.426529][ T6864] netlink: 'syz.1.382': attribute type 21 has an invalid length.
[  107.429545][ T6864] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.382'.
[  107.774363][ T5856] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  107.816936][ T5856] Bluetooth: hci3: command tx timeout
[  107.844164][ T6783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.996785][ T6783] veth0_vlan: entered promiscuous mode
[  108.004527][ T6783] veth1_vlan: entered promiscuous mode
[  108.056712][ T6783] veth0_macvtap: entered promiscuous mode
[  108.068059][ T6783] veth1_macvtap: entered promiscuous mode
[  108.094144][ T6882] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  108.103783][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.127793][ T6882] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.172240][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.199078][ T5893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.202581][ T5893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.207517][ T5893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.210558][ T5893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.276442][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.278899][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.297258][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.300200][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.422688][ T5856] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  109.667775][ T6953] netlink: 'syz.1.405': attribute type 1 has an invalid length.
[  109.784082][ T6958] lo speed is unknown, defaulting to 1000
[  109.896215][ T5856] Bluetooth: hci3: command tx timeout
[  110.090390][ T6958] lo speed is unknown, defaulting to 1000
[  110.115181][ T6958] lo speed is unknown, defaulting to 1000
[  110.529444][ T6958] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  110.624039][ T6958] lo speed is unknown, defaulting to 1000
[  110.628506][ T6958] lo speed is unknown, defaulting to 1000
[  110.632859][ T6958] lo speed is unknown, defaulting to 1000
[  110.688538][ T6973] netlink: 'syz.3.412': attribute type 10 has an invalid length.
[  111.260406][ T6973] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  111.334911][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[  111.340069][ T6987] netlink: 'syz.0.417': attribute type 2 has an invalid length.
[  111.344245][ T6987] netlink: 'syz.0.417': attribute type 1 has an invalid length.
[  111.356927][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[  111.609691][ T7005] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.425'.
[  111.615951][ T7005] netlink: 5 bytes leftover after parsing attributes in process `syz.0.425'.
[  111.980548][ T5856] Bluetooth: hci3: command tx timeout
[  112.011688][ T7025] netlink: 763 bytes leftover after parsing attributes in process `syz.3.435'.
[  112.346153][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'.
[  112.351212][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'.
[  112.354131][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'.
[  112.368880][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'.
[  112.723932][ T7067] netlink: 'syz.1.453': attribute type 11 has an invalid length.
[  114.061416][ T7107] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[  114.067668][ T7107] netlink: 348 bytes leftover after parsing attributes in process `syz.0.470'.
[  114.402566][ T7112] @: renamed from bond_slave_0 (while UP)
[  114.784900][ T7129] openvswitch: netlink: Message has 5588 unknown bytes.
[  114.790274][ T7129] openvswitch: netlink: Actions may not be safe on all matching packets
[  114.826048][ T7132] syz.3.480 (7132) used obsolete PPPIOCDETACH ioctl
[  115.072858][ T7145] tun0: tun_chr_ioctl cmd 1074025677
[  115.077806][ T7145] tun0: linktype set to 270
[  115.377306][ T7159] macsec0: entered promiscuous mode
[  115.379678][ T7159] macsec0: entered allmulticast mode
[  115.381828][ T7159] veth1_macvtap: entered allmulticast mode
[  116.885277][ T7215] __nla_validate_parse: 8 callbacks suppressed
[  116.885295][ T7215] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.517'.
[  117.022395][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'.
[  117.034896][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'.
[  117.236538][ T7237] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.528'.
[  117.450922][ T7245] netlink: 'syz.1.531': attribute type 12 has an invalid length.
[  117.454658][ T7245] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.531'.
[  117.494803][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'.
[  117.498892][ T7247] netlink: 356 bytes leftover after parsing attributes in process `syz.1.532'.
[  118.523145][ T7297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.203008][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  119.216934][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.220861][ T7333] netlink: 6 bytes leftover after parsing attributes in process `syz.0.558'.
[  120.186428][ T7363] netlink: 'syz.0.570': attribute type 29 has an invalid length.
[  120.191586][ T7363] netlink: 'syz.0.570': attribute type 29 has an invalid length.
[  120.195930][ T7363] netlink: 508 bytes leftover after parsing attributes in process `syz.0.570'.
[  120.199402][ T7363] unsupported nla_type 58
[  121.030603][ T7401] veth1_to_bond: entered allmulticast mode
[  121.634027][ T7435] netlink: 'syz.0.598': attribute type 29 has an invalid length.
[  121.729857][ T7442] netlink: 'syz.1.602': attribute type 21 has an invalid length.
[  122.833005][ T7503] __nla_validate_parse: 3 callbacks suppressed
[  122.833020][ T7503] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.630'.
[  122.851402][ T7503] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.630'.
[  122.902429][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.633'.
[  122.926336][ T7509] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  123.913888][ T7532] netlink: 'syz.1.643': attribute type 39 has an invalid length.
[  124.308559][ T5856] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  124.579360][ T7567] netlink: 'syz.0.659': attribute type 3 has an invalid length.
[  124.584452][ T7567] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  124.588188][ T7567] netlink: 'syz.0.659': attribute type 2 has an invalid length.
[  124.593583][ T7567] netlink: 'syz.0.659': attribute type 8 has an invalid length.
[  124.598379][ T7567] netlink: 'syz.0.659': attribute type 10 has an invalid length.
[  124.605633][ T7567] netlink: 'syz.0.659': attribute type 11 has an invalid length.
[  124.608078][ T7567] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.659'.
[  125.664869][ T7619] netlink: 830 bytes leftover after parsing attributes in process `syz.0.681'.
[  125.773443][ T7623] proc: Unknown parameter 'uid'
[  126.376048][ T5856] Bluetooth: hci3: command tx timeout
[  126.558844][ T7633] netlink: 'syz.0.689': attribute type 1 has an invalid length.
[  126.683550][ T7643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.831205][ T7650] netlink: 188 bytes leftover after parsing attributes in process `syz.0.696'.
[  126.860881][ T7649] netlink: 'syz.1.697': attribute type 10 has an invalid length.
[  127.020019][ T7649] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  127.442149][ T7657] syzkaller0: entered promiscuous mode
[  127.448402][ T7657] syzkaller0: entered allmulticast mode
[  127.570017][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'.
[  127.572806][ T7665] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  127.934917][ T7679] syzkaller0: entered promiscuous mode
[  127.937750][ T7679] syzkaller0: entered allmulticast mode
[  129.658027][ T7724] veth0_vlan: entered allmulticast mode
[  129.995738][ T7728] veth0_vlan: left promiscuous mode
[  130.001780][ T7728] veth0_vlan: entered promiscuous mode
[  130.101344][ T7734] netlink: 192 bytes leftover after parsing attributes in process `syz.3.734'.
[  130.319004][ T7742] netlink: 830 bytes leftover after parsing attributes in process `syz.3.736'.
[  130.670467][ T7749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.774409][ T7757] xt_policy: neither incoming nor outgoing policy selected
[  130.854393][ T7761] netlink: 'syz.0.745': attribute type 6 has an invalid length.
[  130.874075][ T7761] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.745'.
[  131.029020][ T7771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.751'.
[  131.278063][ T7782] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  131.281302][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'.
[  131.480644][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.858806][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  132.443139][ T7803] netlink: 'syz.3.764': attribute type 25 has an invalid length.
[  132.446187][ T7803] netlink: 'syz.3.764': attribute type 28 has an invalid length.
[  132.612848][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.765'.
[  132.643733][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.765'.
[  132.708335][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  132.859556][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.862370][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  133.064977][ T7828] netlink: 220 bytes leftover after parsing attributes in process `syz.1.774'.
[  134.383854][ T7872] netlink: 'syz.0.791': attribute type 12 has an invalid length.
[  135.213989][ T7920] netlink: 'syz.1.810': attribute type 27 has an invalid length.
[  135.217153][ T7920] __nla_validate_parse: 8 callbacks suppressed
[  135.217167][ T7920] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.810'.
[  135.270156][ T7924] netlink: 'syz.1.812': attribute type 22 has an invalid length.
[  135.638955][ T7940] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.819'.
[  135.661989][ T7940] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.819'.
[  136.550333][ T7957] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.825'.
[  136.553993][ T7957] netlink: zone id is out of range
[  136.556691][ T7957] netlink: zone id is out of range
[  136.558738][ T7957] netlink: get zone limit has 8 unknown bytes
[  136.702120][ T7964] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.828'.
[  137.672469][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'.
[  137.828997][ T8004] netlink: 'syz.0.846': attribute type 13 has an invalid length.
[  137.849661][ T8000] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  137.877049][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.847'.
[  137.880242][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.847'.
[  137.932161][ T8010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.850'.
[  137.937755][ T8010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.850'.
[  137.972269][ T8012] netlink: 'syz.3.849': attribute type 39 has an invalid length.
[  138.815241][ T8035] netlink: 'syz.3.861': attribute type 13 has an invalid length.
[  138.819329][ T8035] netlink: 'syz.3.861': attribute type 17 has an invalid length.
[  139.349214][ T8035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.472358][ T8061] openvswitch: netlink: Missing valid actions attribute.
[  139.477337][ T8061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.653881][ T5856] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  140.298562][ T5856] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  140.653861][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.1.875'.
[  140.707027][ T8092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.876'.
[  140.710596][ T8092] netlink: 'syz.0.876': attribute type 1 has an invalid length.
[  140.751372][ T8096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.877799][ T8104] tap0: tun_chr_ioctl cmd 35108
[  141.160263][ T8114] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.887'.
[  141.464166][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'.
[  142.344489][ T8156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.352714][ T8156] IPv6: NLM_F_CREATE should be set when creating new route
[  142.355265][ T8156] IPv6: NLM_F_CREATE should be set when creating new route
[  143.010212][ T8121] lo speed is unknown, defaulting to 1000
[  143.247889][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'.
[  143.533503][ T8175] netlink: 'syz.3.915': attribute type 10 has an invalid length.
[  143.541697][ T8178] netlink: 17 bytes leftover after parsing attributes in process `syz.0.916'.
[  143.547770][ T8178] netlink: zone id is out of range
[  143.550209][ T8178] netlink: zone id is out of range
[  143.552283][ T8178] netlink: zone id is out of range
[  143.554302][ T8178] netlink: zone id is out of range
[  143.565833][ T8178] netlink: zone id is out of range
[  143.567948][ T8178] netlink: zone id is out of range
[  143.570005][ T8178] netlink: zone id is out of range
[  143.572098][ T8178] netlink: zone id is out of range
[  143.574170][ T8178] netlink: zone id is out of range
[  143.587782][ T8178] netlink: zone id is out of range
[  144.560452][ T8201] netlink: 'syz.1.928': attribute type 13 has an invalid length.
[  144.605062][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.930'.
[  144.612198][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.930'.
[  144.626490][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.930'.
[  145.039023][ T8231] netlink: 'syz.3.942': attribute type 10 has an invalid length.
[  145.042014][ T8231] netlink: 'syz.3.942': attribute type 19 has an invalid length.
[  145.044791][ T8231] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.942'.
[  145.093770][ T8233] syzkaller1: tun_chr_ioctl cmd 1074025677
[  145.096640][ T8233] syzkaller1: linktype set to 823
[  145.480658][ T5856] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255
[  146.603192][ T8307] __nla_validate_parse: 1 callbacks suppressed
[  146.603209][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'.
[  146.758447][ T5856] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  147.216166][ T8317] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.982'.
[  147.420888][ T8329] lo speed is unknown, defaulting to 1000
[  147.628522][ T8342] sit0: entered allmulticast mode
[  147.633406][ T8342] sit0: entered promiscuous mode
[  148.298133][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'.
[  148.301918][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'.
[  148.450164][ T8370] netlink: 'syz.3.1002': attribute type 1 has an invalid length.
[  148.577860][ T8377] netlink: 'syz.1.1006': attribute type 1 has an invalid length.
[  148.580542][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  148.588801][ T8377] netlink: 'syz.1.1006': attribute type 2 has an invalid length.
[  148.592422][ T8377] netlink: 'syz.1.1006': attribute type 8 has an invalid length.
[  148.595106][ T8377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1006'.
[  149.022342][ T8392] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  149.323017][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  149.606696][ T8421] bridge0: port 3(ip6gretap0) entered blocking state
[  149.609505][ T8421] bridge0: port 3(ip6gretap0) entered disabled state
[  149.615065][ T8421] ip6gretap0: entered allmulticast mode
[  149.627199][ T8421] ip6gretap0: entered promiscuous mode
[  149.630002][ T8421] bridge0: port 3(ip6gretap0) entered blocking state
[  149.632987][ T8421] bridge0: port 3(ip6gretap0) entered forwarding state
[  149.792374][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1028'.
[  151.200339][ T8485] netlink: 'syz.0.1050': attribute type 3 has an invalid length.
[  151.203418][ T8485] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1050'.
[  151.401056][ T8493] netlink: 'syz.1.1055': attribute type 27 has an invalid length.
[  151.415337][ T8497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1056'.
[  151.517991][ T8501] netlink: 'syz.1.1058': attribute type 7 has an invalid length.
[  151.618851][ T8507] netlink: 'syz.0.1061': attribute type 29 has an invalid length.
[  151.623564][ T8507] netlink: 'syz.0.1061': attribute type 29 has an invalid length.
[  154.969701][ T5856] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  155.312284][ T8542] netlink: 'syz.1.1075': attribute type 32 has an invalid length.
[  155.640704][ T8561] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1081'.
[  155.845546][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'.
[  155.848661][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1087'.
[  156.172484][ T8602] netlink: 'syz.0.1099': attribute type 29 has an invalid length.
[  157.155821][ T8635] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  157.167027][ T8635] CPU: 1 UID: 0 PID: 8635 Comm: syz.3.1114 Not tainted syzkaller #0 PREEMPT(full) 
[  157.167056][ T8635] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.167067][ T8635] Call Trace:
[  157.167072][ T8635]  <TASK>
[  157.167081][ T8635]  dump_stack_lvl+0x189/0x250
[  157.167108][ T8635]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.167126][ T8635]  ? __pfx__printk+0x10/0x10
[  157.167150][ T8635]  ? __rcu_read_unlock+0x84/0xe0
[  157.167171][ T8635]  ? kernfs_path_from_node+0x2f/0x290
[  157.167189][ T8635]  ? kernfs_path_from_node+0x250/0x290
[  157.167205][ T8635]  ? kernfs_path_from_node+0x2f/0x290
[  157.167227][ T8635]  sysfs_warn_dup+0x8e/0xa0
[  157.167242][ T8635]  sysfs_do_create_link_sd+0xc0/0x110
[  157.167259][ T8635]  device_add_class_symlinks+0x1cf/0x240
[  157.167281][ T8635]  device_add+0x475/0xb50
[  157.167407][ T8635]  wiphy_register+0x1ba6/0x28d0
[  157.167465][ T8635]  ? __pfx_wiphy_register+0x10/0x10
[  157.167496][ T8635]  ieee80211_register_hw+0x3484/0x4100
[  157.167512][ T8635]  ? preempt_schedule+0xae/0xc0
[  157.167537][ T8635]  ? ieee80211_register_hw+0x14d1/0x4100
[  157.167565][ T8635]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  157.167609][ T8635]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.167636][ T8635]  ? __hrtimer_setup+0x187/0x210
[  157.167654][ T8635]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  157.167673][ T8635]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  157.167714][ T8635]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  157.167728][ T8635]  ? trace_kmalloc+0x1f/0xd0
[  157.167740][ T8635]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  157.167756][ T8635]  ? kstrndup+0xbf/0x160
[  157.167785][ T8635]  hwsim_new_radio_nl+0xea4/0x1b10
[  157.167805][ T8635]  ? perf_trace_preemptirq_template+0x280/0x340
[  157.167898][ T8635]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.167920][ T8635]  ? irqentry_exit+0x74/0x90
[  157.167938][ T8635]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.167970][ T8635]  genl_family_rcv_msg_doit+0x215/0x300
[  157.167992][ T8635]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  157.168036][ T8635]  ? bpf_lsm_capable+0x9/0x20
[  157.168053][ T8635]  ? security_capable+0x7e/0x2e0
[  157.168077][ T8635]  genl_rcv_msg+0x60e/0x790
[  157.168097][ T8635]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.168112][ T8635]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.168127][ T8635]  ? irqentry_enter+0x3d/0x60
[  157.168148][ T8635]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  157.168172][ T8635]  netlink_rcv_skb+0x208/0x470
[  157.168266][ T8635]  ? __lock_acquire+0xab9/0xd20
[  157.168287][ T8635]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.168303][ T8635]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.168336][ T8635]  ? down_read+0x1ad/0x2e0
[  157.168360][ T8635]  genl_rcv+0x28/0x40
[  157.168372][ T8635]  netlink_unicast+0x82f/0x9e0
[  157.168391][ T8635]  ? __pfx_netlink_unicast+0x10/0x10
[  157.168405][ T8635]  ? netlink_sendmsg+0x642/0xb30
[  157.168418][ T8635]  ? skb_put+0x11b/0x210
[  157.168438][ T8635]  netlink_sendmsg+0x805/0xb30
[  157.168460][ T8635]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.168480][ T8635]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.168495][ T8635]  __sock_sendmsg+0x21c/0x270
[  157.168509][ T8635]  ____sys_sendmsg+0x505/0x830
[  157.168529][ T8635]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.168557][ T8635]  ? import_iovec+0x74/0xa0
[  157.168579][ T8635]  ___sys_sendmsg+0x21f/0x2a0
[  157.168599][ T8635]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.168642][ T8635]  ? __fget_files+0x2a/0x420
[  157.168657][ T8635]  ? __fget_files+0x3a0/0x420
[  157.168679][ T8635]  __x64_sys_sendmsg+0x19b/0x260
[  157.168700][ T8635]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  157.168730][ T8635]  ? do_syscall_64+0xbe/0x3b0
[  157.168749][ T8635]  do_syscall_64+0xfa/0x3b0
[  157.168767][ T8635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.168778][ T8635]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  157.168793][ T8635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.168805][ T8635] RIP: 0033:0x7fc20118ec29
[  157.168820][ T8635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.168878][ T8635] RSP: 002b:00007fc201f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.168898][ T8635] RAX: ffffffffffffffda RBX: 00007fc2013d5fa0 RCX: 00007fc20118ec29
[  157.168908][ T8635] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007
[  157.168917][ T8635] RBP: 00007fc201211e41 R08: 0000000000000000 R09: 0000000000000000
[  157.168925][ T8635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.168932][ T8635] R13: 00007fc2013d6038 R14: 00007fc2013d5fa0 R15: 00007ffccfc0d328
[  157.168954][ T8635]  </TASK>
[  157.383530][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1116'.
[  157.483281][ T8646] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1119'.
[  157.696990][ T8662] netlink: 8153 bytes leftover after parsing attributes in process `syz.1.1126'.
[  157.700356][ T8662] net_ratelimit: 73 callbacks suppressed
[  157.700369][ T8662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.904200][ T8684] netlink: 'syz.0.1136': attribute type 49 has an invalid length.
[  158.166811][ T8694] netlink: 'syz.3.1140': attribute type 29 has an invalid length.
[  158.172611][ T8694] netlink: 'syz.3.1140': attribute type 29 has an invalid length.
[  158.197067][ T8694] netlink: 'syz.3.1140': attribute type 29 has an invalid length.
[  158.212326][ T8694] netlink: 'syz.3.1140': attribute type 29 has an invalid length.
[  158.242526][ T8696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.299317][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'.
[  159.273912][ T8704] can: request_module (can-proto-0) failed.
[  159.348763][ T8716] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1150'.
[  159.352338][ T8716] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1150'.
[  159.367263][ T8716] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1150'.
[  159.659372][ T8726] netlink: 'syz.0.1155': attribute type 29 has an invalid length.
[  159.697843][ T8734] netlink: 'syz.0.1155': attribute type 29 has an invalid length.
[  159.727377][ T8726] netlink: 'syz.0.1155': attribute type 29 has an invalid length.
[  160.819286][ T8748] __nla_validate_parse: 1 callbacks suppressed
[  160.819297][ T8748] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1161'.
[  160.852582][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1160'.
[  160.983429][ T8758] validate_nla: 3 callbacks suppressed
[  160.983440][ T8758] netlink: 'syz.0.1166': attribute type 33 has an invalid length.
[  160.988793][ T8758] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1166'.
[  161.020600][ T8760] macvtap0: refused to change device tx_queue_len
[  161.069061][ T8764] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  161.071723][ T8764] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  161.217790][ T8776] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1176'.
[  161.422998][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'.
[  161.435872][ T8784] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1179'.
[  163.799831][ T8870] openvswitch: netlink: IPv6 tunnel dst address is zero
[  164.138954][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'.
[  164.281221][ T8886] team0: Port device team_slave_0 removed
[  164.285399][ T8886] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  164.341292][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'.
[  164.568037][ T8901] netlink: 'syz.0.1230': attribute type 2 has an invalid length.
[  164.571510][ T8901] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1230'.
[  164.835797][ T8905] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1232'.
[  165.209051][ T8926] siw: device registration error -23
[  166.430404][ T8962] netlink: 'syz.0.1256': attribute type 27 has an invalid length.
[  166.433694][ T8962] __nla_validate_parse: 8 callbacks suppressed
[  166.433707][ T8962] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1256'.
[  166.650632][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'.
[  166.867225][ T8994] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1271'.
[  166.890840][ T8989] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1268'.
[  167.836183][ T9040] netlink: 'syz.1.1290': attribute type 11 has an invalid length.
[  167.838643][ T9040] netlink: 'syz.1.1290': attribute type 6 has an invalid length.
[  172.534990][ T9060] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  173.157856][ T9084] syz.1.1308: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  173.163434][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.1.1308 Not tainted syzkaller #0 PREEMPT(full) 
[  173.163449][ T9084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.163455][ T9084] Call Trace:
[  173.163460][ T9084]  <TASK>
[  173.163466][ T9084]  dump_stack_lvl+0x189/0x250
[  173.163483][ T9084]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.163495][ T9084]  ? __pfx__printk+0x10/0x10
[  173.163512][ T9084]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.163529][ T9084]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.163542][ T9084]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  173.163554][ T9084]  warn_alloc+0x214/0x310
[  173.163564][ T9084]  ? stack_depot_save_flags+0x40/0x860
[  173.163574][ T9084]  ? __pfx_warn_alloc+0x10/0x10
[  173.163584][ T9084]  ? kasan_save_track+0x4f/0x80
[  173.163596][ T9084]  ? xskq_create+0x56/0x170
[  173.163605][ T9084]  ? xsk_init_queue+0xb0/0x110
[  173.163612][ T9084]  ? xsk_setsockopt+0x57b/0x8d0
[  173.163618][ T9084]  ? do_sock_setsockopt+0x17c/0x1b0
[  173.163628][ T9084]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  173.163637][ T9084]  ? do_syscall_64+0xfa/0x3b0
[  173.163647][ T9084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.163659][ T9084]  __vmalloc_node_range_noprof+0x125/0x12f0
[  173.163680][ T9084]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  173.163691][ T9084]  ? __kasan_kmalloc+0x93/0xb0
[  173.163700][ T9084]  vmalloc_user_noprof+0xad/0xf0
[  173.163708][ T9084]  ? xskq_create+0xbf/0x170
[  173.163717][ T9084]  xskq_create+0xbf/0x170
[  173.163727][ T9084]  xsk_init_queue+0xb0/0x110
[  173.163737][ T9084]  xsk_setsockopt+0x57b/0x8d0
[  173.163746][ T9084]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.163754][ T9084]  ? __pfx_aa_sk_perm+0x10/0x10
[  173.163764][ T9084]  ? __fget_files+0x2a/0x420
[  173.163771][ T9084]  ? aa_sock_opt_perm+0xff/0x1b0
[  173.163782][ T9084]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  173.163792][ T9084]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.163807][ T9084]  do_sock_setsockopt+0x17c/0x1b0
[  173.163826][ T9084]  __x64_sys_setsockopt+0x13f/0x1b0
[  173.163845][ T9084]  do_syscall_64+0xfa/0x3b0
[  173.163862][ T9084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.163874][ T9084]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  173.163891][ T9084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.163901][ T9084] RIP: 0033:0x7fb13cb8ec29
[  173.163910][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.163917][ T9084] RSP: 002b:00007fb13d99b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  173.163927][ T9084] RAX: ffffffffffffffda RBX: 00007fb13cdd5fa0 RCX: 00007fb13cb8ec29
[  173.163933][ T9084] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  173.163938][ T9084] RBP: 00007fb13cc11e41 R08: 0000000000000004 R09: 0000000000000000
[  173.163943][ T9084] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  173.163948][ T9084] R13: 00007fb13cdd6038 R14: 00007fb13cdd5fa0 R15: 00007ffeabd556a8
[  173.163961][ T9084]  </TASK>
[  173.164009][ T9084] Mem-Info:
[  173.272521][ T9091] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1310'.
[  173.470533][ T9084] active_anon:13317 inactive_anon:0 isolated_anon:0
[  173.470533][ T9084]  active_file:11394 inactive_file:38284 isolated_file:0
[  173.470533][ T9084]  unevictable:1768 dirty:267 writeback:0
[  173.470533][ T9084]  slab_reclaimable:9896 slab_unreclaimable:67172
[  173.470533][ T9084]  mapped:18047 shmem:2452 pagetables:1044
[  173.470533][ T9084]  sec_pagetables:0 bounce:0
[  173.470533][ T9084]  kernel_misc_reclaimable:0
[  173.470533][ T9084]  free:268096 free_pcp:13398 free_cma:0
[  173.500305][ T9084] Node 0 active_anon:11716kB inactive_anon:0kB active_file:40828kB inactive_file:25692kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22172kB dirty:764kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5468kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.512874][ T9084] Node 1 active_anon:41552kB inactive_anon:0kB active_file:4748kB inactive_file:127444kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50016kB dirty:304kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6444kB pagetables:1928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.527817][ T9084] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  173.607323][ T9084] lowmem_reserve[]: 0 811 811 811 811
[  173.610099][ T9084] Node 0 DMA32 free:384484kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11580kB inactive_anon:0kB active_file:40828kB inactive_file:25692kB unevictable:3536kB writepending:764kB present:1556484kB managed:830840kB mlocked:0kB bounce:0kB free_pcp:23296kB local_pcp:19016kB free_cma:0kB
[  173.630364][ T9084] lowmem_reserve[]: 0 0 0 0 0
[  173.634317][ T9084] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  173.728905][ T9084] lowmem_reserve[]: 0 0 854 854 854
[  173.731617][ T9084] Node 1 Normal free:213652kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41688kB inactive_anon:0kB active_file:4748kB inactive_file:127444kB unevictable:3536kB writepending:304kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31132kB local_pcp:14488kB free_cma:0kB
[  173.751944][ T9084] lowmem_reserve[]: 0 0 0 0 0
[  173.754892][ T9084] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  173.762242][ T9084] Node 0 DMA32: 253*4kB (U) 330*8kB (UM) 437*16kB (UME) 363*32kB (UME) 327*64kB (UME) 226*128kB (UME) 54*256kB (UME) 22*512kB (UME) 14*1024kB (UME) 7*2048kB (UME) 63*4096kB (UM) = 383924kB
[  173.874985][ T9084] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  173.882568][ T9084] Node 1 Normal: 57*4kB (UME) 31*8kB (UM) 192*16kB (UME) 265*32kB (UE) 140*64kB (U) 59*128kB (UM) 19*256kB (UM) 10*512kB (UME) 3*1024kB (UE) 2*2048kB (UE) 41*4096kB (M) = 213628kB
[  173.892020][ T9084] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.895864][ T9084] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.899404][ T9084] 52132 total pagecache pages
[  173.901221][ T9084] 0 pages in swap cache
[  173.902864][ T9084] Free swap  = 124996kB
[  173.904598][ T9084] Total swap = 124996kB
[  173.907941][ T9084] 786301 pages RAM
[  173.909526][ T9084] 0 pages HighMem/MovableOnly
[  173.911873][ T9084] 241359 pages reserved
[  173.913592][ T9084] 0 pages cma reserved
[  174.030657][ T9113] netlink: 'syz.1.1320': attribute type 39 has an invalid length.
[  174.033842][ T9113] veth0_macvtap: left promiscuous mode
[  174.110221][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1322'.
[  174.350333][ T9129] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1327'.
[  174.357191][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'.
[  174.367576][ T9130] netlink: 'syz.1.1326': attribute type 22 has an invalid length.
[  174.370817][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'.
[  174.391999][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'.
[  175.009917][ T9149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.436566][ T9151] netlink: 'syz.1.1336': attribute type 39 has an invalid length.
[  175.767077][ T9159] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1341'.
[  177.323488][ T9207] syzkaller0: refused to change device tx_queue_len
[  177.391626][ T9214] netlink: 'syz.0.1361': attribute type 2 has an invalid length.
[  177.393610][ T9213] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1360'.
[  177.394188][ T9214] netlink: 130532 bytes leftover after parsing attributes in process `syz.0.1361'.
[  177.500623][ T9223] netlink: 'syz.1.1364': attribute type 11 has an invalid length.
[  177.503205][ T9223] netlink: 8420 bytes leftover after parsing attributes in process `syz.1.1364'.
[  178.381515][ T9263] __nla_validate_parse: 1 callbacks suppressed
[  178.381571][ T9263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1383'.
[  179.500067][ T9307] netlink: 'syz.3.1403': attribute type 10 has an invalid length.
[  179.514206][ T9306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.531218][    T9] lo speed is unknown, defaulting to 1000
[  179.553346][ T9307] team0: Cannot enslave team device to itself
[  179.596684][ T9284] delete_channel: no stack
[  180.706497][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'.
[  180.757982][ T9353] ==================================================================
[  180.761190][ T9353] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  180.764337][ T9353] Read of size 2 at addr ffff88811c6369c2 by task syz.3.1423/9353
[  180.768675][ T9353] 
[  180.769663][ T9353] CPU: 0 UID: 0 PID: 9353 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT(full) 
[  180.769682][ T9353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.769714][ T9353] Call Trace:
[  180.769722][ T9353]  <TASK>
[  180.769729][ T9353]  dump_stack_lvl+0x189/0x250
[  180.769751][ T9353]  ? __kasan_check_byte+0x12/0x40
[  180.769768][ T9353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.769784][ T9353]  ? lock_release+0x4b/0x3e0
[  180.769806][ T9353]  ? __virt_addr_valid+0x4a5/0x5c0
[  180.769825][ T9353]  print_report+0xca/0x240
[  180.769838][ T9353]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  180.769857][ T9353]  kasan_report+0x118/0x150
[  180.769871][ T9353]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  180.769893][ T9353]  __xfrm_state_lookup+0x6ad/0x8d0
[  180.769914][ T9353]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  180.769934][ T9353]  ? xfrm_state_lookup+0x45/0x1e0
[  180.769954][ T9353]  xfrm_state_lookup+0x11e/0x1e0
[  180.769976][ T9353]  pfkey_get+0x2ae/0x880
[  180.769997][ T9353]  pfkey_sendmsg+0xbfe/0x1090
[  180.770014][ T9353]  ? trace_sched_exit_tp+0x36/0x110
[  180.770035][ T9353]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  180.770060][ T9353]  ? aa_sock_msg_perm+0xf1/0x1d0
[  180.770078][ T9353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  180.770103][ T9353]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  180.770121][ T9353]  __sock_sendmsg+0x21c/0x270
[  180.770139][ T9353]  ____sys_sendmsg+0x505/0x830
[  180.770160][ T9353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.770182][ T9353]  ? import_iovec+0x74/0xa0
[  180.770204][ T9353]  ___sys_sendmsg+0x21f/0x2a0
[  180.770221][ T9353]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.770252][ T9353]  ? __fget_files+0x2a/0x420
[  180.770266][ T9353]  ? __fget_files+0x3a0/0x420
[  180.770283][ T9353]  __x64_sys_sendmsg+0x19b/0x260
[  180.770302][ T9353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.770323][ T9353]  ? rcu_is_watching+0x15/0xb0
[  180.770337][ T9353]  ? do_syscall_64+0xbe/0x3b0
[  180.770356][ T9353]  do_syscall_64+0xfa/0x3b0
[  180.770373][ T9353]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.770389][ T9353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.770401][ T9353]  ? exc_page_fault+0x9f/0xf0
[  180.770418][ T9353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.770430][ T9353] RIP: 0033:0x7fc20118ec29
[  180.770445][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.770456][ T9353] RSP: 002b:00007fc201f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.770471][ T9353] RAX: ffffffffffffffda RBX: 00007fc2013d5fa0 RCX: 00007fc20118ec29
[  180.770482][ T9353] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  180.770492][ T9353] RBP: 00007fc201211e41 R08: 0000000000000000 R09: 0000000000000000
[  180.770501][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.770508][ T9353] R13: 00007fc2013d6038 R14: 00007fc2013d5fa0 R15: 00007ffccfc0d328
[  180.770525][ T9353]  </TASK>
[  180.770530][ T9353] 
[  180.876132][ T9353] Allocated by task 7661:
[  180.877853][ T9353]  kasan_save_track+0x3e/0x80
[  180.879715][ T9353]  __kasan_slab_alloc+0x6c/0x80
[  180.881442][ T9353]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  180.883567][ T9353]  xfrm_state_alloc+0x24/0x2f0
[  180.885147][ T9353]  __find_acq_core+0x8a7/0x1c00
[  180.886747][ T9353]  xfrm_find_acq+0x78/0xa0
[  180.888189][ T9353]  xfrm_alloc_userspi+0x6b3/0xc90
[  180.889773][ T9353]  xfrm_user_rcv_msg+0x7a3/0xab0
[  180.891452][ T9353]  netlink_rcv_skb+0x208/0x470
[  180.893090][ T9353]  xfrm_netlink_rcv+0x79/0x90
[  180.894584][ T9353]  netlink_unicast+0x82f/0x9e0
[  180.896319][ T9353]  netlink_sendmsg+0x805/0xb30
[  180.898212][ T9353]  __sock_sendmsg+0x21c/0x270
[  180.899904][ T9353]  ____sys_sendmsg+0x505/0x830
[  180.901757][ T9353]  ___sys_sendmsg+0x21f/0x2a0
[  180.903585][ T9353]  __x64_sys_sendmsg+0x19b/0x260
[  180.905555][ T9353]  do_syscall_64+0xfa/0x3b0
[  180.907442][ T9353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.909742][ T9353] 
[  180.910640][ T9353] Freed by task 5892:
[  180.912143][ T9353]  kasan_save_track+0x3e/0x80
[  180.913864][ T9353]  kasan_save_free_info+0x46/0x50
[  180.915375][ T9353]  __kasan_slab_free+0x5b/0x80
[  180.916987][ T9353]  kmem_cache_free+0x18f/0x400
[  180.918586][ T9353]  xfrm_state_gc_task+0x52d/0x6b0
[  180.920588][ T9353]  process_scheduled_works+0xae1/0x17b0
[  180.922546][ T9353]  worker_thread+0x8a0/0xda0
[  180.924179][ T9353]  kthread+0x711/0x8a0
[  180.925584][ T9353]  ret_from_fork+0x439/0x7d0
[  180.927315][ T9353]  ret_from_fork_asm+0x1a/0x30
[  180.929240][ T9353] 
[  180.930355][ T9353] The buggy address belongs to the object at ffff88811c636880
[  180.930355][ T9353]  which belongs to the cache xfrm_state of size 928
[  180.935210][ T9353] The buggy address is located 322 bytes inside of
[  180.935210][ T9353]  freed 928-byte region [ffff88811c636880, ffff88811c636c20)
[  180.939580][ T9353] 
[  180.940344][ T9353] The buggy address belongs to the physical page:
[  180.942767][ T9353] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811c636400 pfn:0x11c634
[  180.945979][ T9353] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  180.949053][ T9353] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  180.951415][ T9353] page_type: f5(slab)
[  180.952698][ T9353] raw: 057ff00000000040 ffff888104fb43c0 dead000000000122 0000000000000000
[  180.955402][ T9353] raw: ffff88811c636400 00000000800e0005 00000000f5000000 0000000000000000
[  180.958579][ T9353] head: 057ff00000000040 ffff888104fb43c0 dead000000000122 0000000000000000
[  180.961346][ T9353] head: ffff88811c636400 00000000800e0005 00000000f5000000 0000000000000000
[  180.964069][ T9353] head: 057ff00000000002 ffffea0004718d01 00000000ffffffff 00000000ffffffff
[  180.966802][ T9353] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  180.969538][ T9353] page dumped because: kasan: bad access detected
[  180.971586][ T9353] page_owner tracks the page as allocated
[  180.973514][ T9353] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6276, tgid 6269 (syz.0.144), ts 78691878227, free_ts 78630453281
[  180.979308][ T9353]  post_alloc_hook+0x240/0x2a0
[  180.980650][ T9353]  get_page_from_freelist+0x21e4/0x22c0
[  180.982634][ T9353]  __alloc_frozen_pages_noprof+0x181/0x370
[  180.984511][ T9353]  alloc_pages_mpol+0x232/0x4a0
[  180.986044][ T9353]  allocate_slab+0x8a/0x370
[  180.987551][ T9353]  ___slab_alloc+0xbeb/0x1420
[  180.989117][ T9353]  kmem_cache_alloc_noprof+0x283/0x3c0
[  180.990922][ T9353]  xfrm_state_alloc+0x24/0x2f0
[  180.992446][ T9353]  __find_acq_core+0x8a7/0x1c00
[  180.993977][ T9353]  xfrm_find_acq+0x78/0xa0
[  180.995397][ T9353]  xfrm_alloc_userspi+0x6b3/0xc90
[  180.996994][ T9353]  xfrm_user_rcv_msg+0x7a3/0xab0
[  180.998632][ T9353]  netlink_rcv_skb+0x208/0x470
[  181.000168][ T9353]  xfrm_netlink_rcv+0x79/0x90
[  181.001654][ T9353]  netlink_unicast+0x82f/0x9e0
[  181.003170][ T9353]  netlink_sendmsg+0x805/0xb30
[  181.004691][ T9353] page last free pid 6275 tgid 6266 stack trace:
[  181.006659][ T9353]  __free_frozen_pages+0xbc4/0xd30
[  181.008543][ T9353]  stack_depot_save_flags+0x436/0x860
[  181.010344][ T9353]  kasan_save_track+0x4f/0x80
[  181.011850][ T9353]  __kasan_slab_alloc+0x6c/0x80
[  181.013493][ T9353]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  181.015530][ T9353]  __alloc_skb+0x112/0x2d0
[  181.016955][ T9353]  br_vlan_notify+0x281/0x750
[  181.018420][ T9353]  nbp_vlan_flush+0x10a/0x1b0
[  181.019946][ T9353]  del_nbp+0x575/0xa60
[  181.021314][ T9353]  br_dev_delete+0x6e/0x100
[  181.022867][ T9353]  rtnl_dellink+0x477/0x710
[  181.024615][ T9353]  rtnetlink_rcv_msg+0x7cf/0xb70
[  181.026789][ T9353]  netlink_rcv_skb+0x208/0x470
[  181.028855][ T9353]  netlink_unicast+0x82f/0x9e0
[  181.030355][ T9353]  netlink_sendmsg+0x805/0xb30
[  181.031821][ T9353]  __sock_sendmsg+0x21c/0x270
[  181.033322][ T9353] 
[  181.034097][ T9353] Memory state around the buggy address:
[  181.036075][ T9353]  ffff88811c636880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.038578][ T9353]  ffff88811c636900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.041766][ T9353] >ffff88811c636980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.044446][ T9353]                                            ^
[  181.046457][ T9353]  ffff88811c636a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.049435][ T9353]  ffff88811c636a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.052133][ T9353] ==================================================================
[  181.061981][ T9353] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  181.064870][ T9353] CPU: 1 UID: 0 PID: 9353 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT(full) 
[  181.068724][ T9353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.072635][ T9353] Call Trace:
[  181.073968][ T9353]  <TASK>
[  181.075182][ T9353]  dump_stack_lvl+0x99/0x250
[  181.077073][ T9353]  ? __asan_memcpy+0x40/0x70
[  181.078958][ T9353]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.081050][ T9353]  ? __pfx__printk+0x10/0x10
[  181.082948][ T9353]  vpanic+0x281/0x750
[  181.084510][ T9353]  ? preempt_schedule+0xae/0xc0
[  181.086434][ T9353]  ? __pfx_vpanic+0x10/0x10
[  181.088272][ T9353]  ? preempt_schedule_common+0x83/0xd0
[  181.090494][ T9353]  ? preempt_schedule+0xae/0xc0
[  181.092429][ T9353]  ? __pfx_preempt_schedule+0x10/0x10
[  181.094536][ T9353]  panic+0xb9/0xc0
[  181.096085][ T9353]  ? __pfx_panic+0x10/0x10
[  181.097824][ T9353]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  181.100149][ T9353]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  181.102235][ T9353]  check_panic_on_warn+0x89/0xb0
[  181.104210][ T9353]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  181.106270][ T9353]  end_report+0x78/0x160
[  181.107997][ T9353]  kasan_report+0x129/0x150
[  181.110151][ T9353]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  181.112188][ T9353]  __xfrm_state_lookup+0x6ad/0x8d0
[  181.114225][ T9353]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  181.116479][ T9353]  ? xfrm_state_lookup+0x45/0x1e0
[  181.118397][ T9353]  xfrm_state_lookup+0x11e/0x1e0
[  181.120255][ T9353]  pfkey_get+0x2ae/0x880
[  181.121949][ T9353]  pfkey_sendmsg+0xbfe/0x1090
[  181.123779][ T9353]  ? trace_sched_exit_tp+0x36/0x110
[  181.125740][ T9353]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  181.127638][ T9353]  ? aa_sock_msg_perm+0xf1/0x1d0
[  181.129718][ T9353]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.131652][ T9353]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  181.133647][ T9353]  __sock_sendmsg+0x21c/0x270
[  181.135467][ T9353]  ____sys_sendmsg+0x505/0x830
[  181.137422][ T9353]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.139553][ T9353]  ? import_iovec+0x74/0xa0
[  181.141403][ T9353]  ___sys_sendmsg+0x21f/0x2a0
[  181.143305][ T9353]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.145357][ T9353]  ? __fget_files+0x2a/0x420
[  181.147240][ T9353]  ? __fget_files+0x3a0/0x420
[  181.149101][ T9353]  __x64_sys_sendmsg+0x19b/0x260
[  181.151027][ T9353]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.153256][ T9353]  ? rcu_is_watching+0x15/0xb0
[  181.155509][ T9353]  ? do_syscall_64+0xbe/0x3b0
[  181.157568][ T9353]  do_syscall_64+0xfa/0x3b0
[  181.159380][ T9353]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.161394][ T9353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.163743][ T9353]  ? exc_page_fault+0x9f/0xf0
[  181.165577][ T9353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.168014][ T9353] RIP: 0033:0x7fc20118ec29
[  181.169849][ T9353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.177595][ T9353] RSP: 002b:00007fc201f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.181127][ T9353] RAX: ffffffffffffffda RBX: 00007fc2013d5fa0 RCX: 00007fc20118ec29
[  181.184227][ T9353] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  181.187276][ T9353] RBP: 00007fc201211e41 R08: 0000000000000000 R09: 0000000000000000
[  181.190567][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.194131][ T9353] R13: 00007fc2013d6038 R14: 00007fc2013d5fa0 R15: 00007ffccfc0d328
[  181.197363][ T9353]  </TASK>
[  181.199315][ T9353] Kernel Offset: disabled
[  181.201078][ T9353] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:47:01  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001183 RDI=0000000000001184 RBP=00000000000003f8 RSP=ffffc90004fd6ed0
R8 =ffff88801ff48237 R9 =1ffff11003fe9046 R10=dffffc0000000000 R11=ffffffff85504740
R12=dffffc0000000000 R13=ffffffff99b048f5 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff855047bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc201f766c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc201f75fc8 CR3=000000010ef62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc2013a7498 00007fc2013a7470 XMM03=00007fc2013a74a8 00007fc2013a74a0
XMM04=00007fc201f0d100 00007fc2013a7460 XMM05=00007fc2013a7478 00007fc2013a74c0
XMM06=00007fc2013a74b8 00007fc2013a74b0 XMM07=00007fc2013a74a8 00007fc2013a74a0
XMM08=0000000000000000 00007fc201212f0f XMM09=0000000000000000 00007fc201212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7ce1cb5e88f4f300 RBX=ffffffff81969a38 RCX=7ce1cb5e88f4f300 RDX=0000000000000001
RSI=ffffffff8d9baed8 RDI=ffffffff8be34400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136633b9b R9 =1ffff11026cc6773 R10=dffffc0000000000 R11=ffffed1026cc6774
R12=ffffffff8fa3b530 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020005000
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000011d104000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007fb13cc12f0f XMM09=0000000000000000 00007fb13cc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
