last executing test programs:

6m33.637582284s ago: executing program 2 (id=351):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

6m33.569050207s ago: executing program 2 (id=352):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f000300000008004b00134e9c0008000300000000000800150004000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
socket$packet(0x11, 0x2, 0x300)

6m33.565487164s ago: executing program 2 (id=354):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x2) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES8=<r3=>r1, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
r5 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r5, 0x0, 0x0)
r6 = socket$kcm(0x23, 0x5, 0x0) (async, rerun: 32)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfe53) (async, rerun: 32)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x2e02, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0xa)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2482, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x8539}, 0x4100, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40}, 0x0, 0x2, r8, 0x0) (async)
sendmsg$kcm(r6, 0x0, 0x10004851) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r10, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070000040000040200000000000096b0ca3f0c21f0000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async, rerun: 32)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6b75, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r9, @ANYRES8=r3, @ANYRESHEX, @ANYRESHEX=r7, @ANYBLOB="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"/380, @ANYRES32=0x0, @ANYRES32=r4, @ANYRESHEX=r10], 0xd8}}, 0x40) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
r13 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
socket$kcm(0xa, 0x1, 0x106) (async)
socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)

6m33.439561041s ago: executing program 2 (id=358):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0xffffffff, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)=ANY=[@ANYBLOB='nod'])
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {r3, 0x2}}]}, 0x158}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5}, 0x50)

6m33.20594632s ago: executing program 2 (id=361):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="1b00000019007f089ea6690ca4dc04f11c672274119dd27d616f3a", 0x1b}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'blkio'}, {0x2d, 'pids'}, {0x2d, 'net_cls'}, {0x2d, 'pids'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2d, 'net_cls'}, {0x2b, 'hugetlb'}]}, 0x3b)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

6m32.947557327s ago: executing program 2 (id=362):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x828, 0x0, 0x0, 0x0, 0x80000009, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r0}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
close(r2)

6m32.823870727s ago: executing program 32 (id=362):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x828, 0x0, 0x0, 0x0, 0x80000009, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r0}, 0x10)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
close(r2)

3.255021464s ago: executing program 1 (id=3297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000600000008000000ad00000000000000238b4ec88a6a109657df55dff48b999b32574cd8fe072c8f271a5bc68490e91846e7d27f97fd8553152a4f97d2f58b7c85f9ff94270106b1a04b72b007490bf6f4ca034f207c9a972c498dfa5c265ac5540e472a277ef6b3e97710b4db5e0532bfdb6ca9c66ece321523c868845c7736fb3e97c10133e71676b978adfb195e688c4d0746e0028c887e0ef477538eea6b8d340d4a60c237f230ea7edfcdbb53704c66bc83189965ae97bfad2b132c2d16fd14d1", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x5392f5b1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xb, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x9, 0x4}, {0xa, 0x2}, {0xf, 0x4}, {0x7, 0x3}, {0x10, 0x5}, {0x2, 0x2}]}]}, {0x0, [0x0, 0x3e, 0x5f, 0x30, 0x30, 0x5f, 0x2e, 0x0, 0x30]}}, &(0x7f0000000240)=""/248, 0x67, 0xf8, 0x0, 0x2}, 0x28)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x80}}, 0x10, 0x0}, 0x3000c085)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
sendmsg$AUDIT_USER(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0xf8, 0x3ed, 0x1, 0x70bd27, 0x25dfdbfd, "d18c9d19999585833ca9ebb429059710e47dcf4071b430fc4d3b536e68dc75b72aecae0bc2b5704c54f208dce76f89457b3b68311fb2a48151d6638670194023abac1be59caf89ceba1153197a4b6c42f50006e875cd5501955f324ab2cb7f9bc5f86130da7117b45c3361572621fc61a360013dc1060d94fb7ea898f59fd1837d6dd84782402b77df7c3cbe98d8295452e5687f9dc16e26379e410c15e829cdd20c9faa58d230c4561a9f4edc5f6cfbd863405e42d891fafc523799350c5ef29f566442cda91c051489c05ac037901c281b95026dee98eb1ef314ebe261d76445691f244248f677", ["", "", "", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xffffffbf, 0xfb0a, 0x6, 0x52080, r0, 0x6, '\x00', r1, r3, 0x2, 0x5, 0x1, 0x8, @void, @value, @value=r5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6}, 0x4)

2.910009096s ago: executing program 3 (id=3298):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xc)
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r6 = socket$kcm(0x22, 0x2, 0x21)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00000000bfa1000000000000070c000000ffffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0x3, &(0x7f0000000440)=""/224}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r8}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r9}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2d, 'memory'}]}, 0x8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, &(0x7f00000001c0), 0x0}, 0x20)
close(r6)

2.590256114s ago: executing program 0 (id=3301):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async, rerun: 32)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000001f00)=""/4078, 0xfee}, {&(0x7f00000013c0)=""/6, 0x6}, {&(0x7f0000000000)=""/103, 0x67}], 0x5}, 0x0)

2.499945268s ago: executing program 0 (id=3302):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2})
ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = getpid()
r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, r5, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000})
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
r7 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)}], 0x1}, 0x20005)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000022c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$rds(r2, &(0x7f0000000880)={&(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/110, 0x6e}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/180, 0xb4}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f0000000700)=""/253, 0xfd}], 0x8, 0x0, 0x0, 0x801}, 0x800)
fstat(r3, &(0x7f0000000200))
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f3, &(0x7f0000000080))
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000140)={r8})

2.346779348s ago: executing program 1 (id=3303):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4884}, 0x4000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

2.344960834s ago: executing program 0 (id=3304):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xcdbe3ea5e06002db}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async)
sendmsg$nl_netfilter(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000002880)=ANY=[@ANYBLOB="1400000010115fda07010329"], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x4000080)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0xf5, 0x10, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x12}, 0x80, 0x0}, 0x24000059)

2.210009024s ago: executing program 0 (id=3305):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x2, 0x5, 0xfc, 0x4, 0x0, 0x5d00000000000000, 0x400, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x41, 0x2, 0x4, 0x9, 0x7f, 0xd, 0x8, 0x0, 0x6, 0x0, 0x1012})
r2 = socket$kcm(0x2a, 0x7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003478800036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f", 0x86}], 0x1}, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
close(r3)
r4 = socket$kcm(0x2b, 0x1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
close(r4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x541b, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfb, 0x60000000, 0x0, 0x70, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f", 0x2}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5)
close(0x3)

2.139795438s ago: executing program 1 (id=3306):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) (async)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0xffff8001, 0x8}, 0xc) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
r10 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r13, r11, 0x4, r12}, 0x10) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps    \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000e000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000fdff00000000b7e2ffffffffffff840000008283304199751a109caea10c000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x77, &(0x7f0000000080)=""/119, 0x40f00, 0x40, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000100)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x4, 0xfffffff7, 0x7}, 0x10, 0x19db4, r0, 0x9, &(0x7f0000000540)=[r5, r6, r0, r7, r9, r11, r14, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x3, 0xc, 0x5}, {0x5, 0x2, 0x9, 0x4}, {0x3, 0x5, 0xf, 0x6}, {0x5, 0x2, 0xc, 0x3}, {0x4, 0x3, 0x0, 0x8}, {0x3, 0x2, 0x10, 0x3}, {0x3, 0x1, 0xb, 0x3}, {0x2, 0x5, 0xb, 0xc}, {0x2, 0x2, 0xd}], 0x10, 0xa}, 0x94)

2.049345845s ago: executing program 1 (id=3307):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x3100, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f000000cf3d)=""/195}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x29, 0x43, &(0x7f0000000000)=r2, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)="7f86aec00eaf768854b3408b0100a300000000", 0x0, 0x5}, 0x38)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffeffffffffc, 0xffffffffffffffff, 0x2)
r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24040010)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200350000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x77ab, '\x00', 0x0, r3, 0x2, 0x2, 0x4}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x200}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x4000800)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, &(0x7f0000000240)=""/58, &(0x7f0000000280), &(0x7f0000000380), 0x1, r5}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xe644787bb2aa715b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x448}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.047610177s ago: executing program 3 (id=3308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="a01d8de04ed19204acf523ece9badebf18ad99d02d653f7d6954bb59518409866a67a76fe3961698f70a94b27037e49c80c92d311dbbe73380edee7e9fbf10dbf37dfc9292dc000a17298ba87a7964e27d8e2bc1414620702be47baf08e42f89afa8ad05a9b28488998ecd32751f3157de272519225ec14878df695dbc40df094046b99fafb440df79b6dd84e73249b35927a34fd42fed4fc8d5cca5d9638f3cdb8341893b8440e40a140c0c0002"], 0x294}, 0x1, 0x0, 0x0, 0x400c811}, 0x4008094)

1.952637886s ago: executing program 1 (id=3309):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="14000000000000002900000032000000fec00000000000007000000000000000000000000700000007073d0000007f441477517f00000100000009e0000002000080010100071f49ac1e01017f000001e0000006e0000002ac1414aaac141411ac1414aa4424ec5164010140000000097f00000100000dfe7f000001000000057f000001000000081c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0xa8}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) (async)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) (async)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4008094)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4)
sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x90) (async)
sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

788.023804ms ago: executing program 3 (id=3310):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x2, 0x922000000001, 0x106)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64)
r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/259, 0x103}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2}, 0x14000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
socket$kcm(0x2, 0x3, 0x84) (async)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xa) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x1a, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48)
r4 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48)

579.179761ms ago: executing program 1 (id=3311):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x7, 0x0, 0x0, 0x1, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, &(0x7f0000000040)={0x0}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000001ac0)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000003c0)="c5", 0x1}, {0x0}], 0x2}, 0x4040)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)=""/4081, 0xff1}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000500)=""/192, 0xc0}], 0x4}, 0x40012100)
r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000400)={[{0x2b, 'cpu'}, {0x0, 'net'}, {0x2d, 'cpuacct'}, {0x2d, 'pids'}, {0x2b, 'blkio'}]}, 0x20)

577.760745ms ago: executing program 3 (id=3312):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000)
socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) (async)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091106a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791040000000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20044050)

509.695875ms ago: executing program 0 (id=3313):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-010d \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @fwd={0xa}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xc, 0x3}, {0x9, 0x2}, {0xb, 0x4}, {0xb, 0x4}, {0x10, 0x4}, {0x5}, {0x9, 0x3}, {0x8, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f00000002c0)=""/85, 0x89, 0x55, 0x1, 0x1}, 0x28) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x4}, @fwd={0xa}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xc, 0x3}, {0x9, 0x2}, {0xb, 0x4}, {0xb, 0x4}, {0x10, 0x4}, {0x5}, {0x9, 0x3}, {0x8, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f00000002c0)=""/85, 0x89, 0x55, 0x1, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x14, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x72}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x2c, &(0x7f0000000200)=""/44, 0x41000, 0x4, '\x00', 0x0, @lirc_mode2=0x10, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000005c0)=[{0x1, 0x5, 0xb, 0x2}, {0x2, 0x1, 0x6, 0x7}], 0x10, 0xfffffff9}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xffff, 0x8}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004071}, 0x800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0xffff, 0x8}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004071}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0x21, 0x5, 0x2)
setsockopt$sock_attach_bpf(r8, 0x110, 0x3, 0x0, 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

508.240696ms ago: executing program 3 (id=3314):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2274], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000003900070100000000fcdbdf25017c0000080001"], 0x1c}}, 0x4010) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='([!^\x00')
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1c, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x600, 0x4000000}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008001be0ffff00fe4002002f77fbac141416e000000162079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e)

405.670179ms ago: executing program 0 (id=3315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x93, 0x6, "b275ed2068beeff636028662c15c0947fe312865e05f6dcec455ea6c2b0677b069660a9292cd33faf4cf190159401c1bb27b6e2ea5ef02b091bc665741683afedef1d286b9b3b96910db2cab8ff5168965f7fa7ffe0f9b439b2eeeb4fd0c7328d3e3745d4b4a7b382a932421bf3593ad7f5740a16c654d093b8359931ab27f15648f8a4b904c6c941498efda788cd4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x68002)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x140c, 0x2, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x21)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000700)='\'\x00')
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x1412, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x100480a0}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x7, 0x1, 0x600, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x48014)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xf, 0x10, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x22}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x1, 0x51, &(0x7f0000000a80)=""/81, 0x40f00, 0xd8cf3eb738e0afe0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x8, 0x2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[r4], &(0x7f0000000bc0)=[{0x3, 0x4, 0xe, 0x5}, {0x5, 0x4, 0xa, 0x8}, {0x3, 0x2, 0x1, 0xa}], 0x10, 0x1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x9b, &(0x7f0000000d80)=[{}], 0x8, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000fc0)={r5, r6, 0x25, 0xc, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0)
r10 = getpid()
write$cgroup_pid(r9, &(0x7f0000001040)=r10, 0x12)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4ed9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x8000)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x4, '\x00', r6, r0, 0x3, 0x4, 0x4}, 0x50)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r5, r12, 0x20, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r3}, &(0x7f0000001280), &(0x7f00000012c0)='%+9llu \x00'}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340)=r7, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0xf3d1724c572ef709, 0x9, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x0, 0x5, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f0000001400)='syzkaller\x00', 0x200, 0x3f, &(0x7f0000001440)=""/63, 0x40f00, 0x60, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000001480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x4, 0x9, 0xd, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[r11], 0x0, 0x10, 0x8001}, 0x94)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@fwd={0x5}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @func={0xa, 0x0, 0x0, 0xc, 0x4}, @volatile={0xb}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f0000001800)=""/112, 0x73, 0x70, 0x0, 0x0, 0x10000, @value=r8}, 0x28)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001940)=@generic={&(0x7f0000001900)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x6, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xffff}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000001640)='syzkaller\x00', 0x4, 0xfe, &(0x7f0000001680)=""/254, 0x40f00, 0x26, '\x00', r6, 0x0, r13, 0x8, &(0x7f00000018c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980)=[r11, r14, r3, r3], &(0x7f00000019c0)=[{0x5, 0x3, 0x7, 0x5}, {0x2, 0x5, 0x7, 0x5}], 0x10, 0x4}, 0x94)
write$cgroup_pid(r9, &(0x7f0000001ac0), 0x12)

242.254627ms ago: executing program 33 (id=3315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x93, 0x6, "b275ed2068beeff636028662c15c0947fe312865e05f6dcec455ea6c2b0677b069660a9292cd33faf4cf190159401c1bb27b6e2ea5ef02b091bc665741683afedef1d286b9b3b96910db2cab8ff5168965f7fa7ffe0f9b439b2eeeb4fd0c7328d3e3745d4b4a7b382a932421bf3593ad7f5740a16c654d093b8359931ab27f15648f8a4b904c6c941498efda788cd4"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x140d, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x68002)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x140c, 0x2, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x21)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000700)='\'\x00')
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x1412, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x100480a0}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x7, 0x1, 0x600, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x48014)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xf, 0x10, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x22}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='syzkaller\x00', 0x1, 0x51, &(0x7f0000000a80)=""/81, 0x40f00, 0xd8cf3eb738e0afe0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x8, 0x2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[r4], &(0x7f0000000bc0)=[{0x3, 0x4, 0xe, 0x5}, {0x5, 0x4, 0xa, 0x8}, {0x3, 0x2, 0x1, 0xa}], 0x10, 0x1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x9b, &(0x7f0000000d80)=[{}], 0x8, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000fc0)={r5, r6, 0x25, 0xc, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0)
r10 = getpid()
write$cgroup_pid(r9, &(0x7f0000001040)=r10, 0x12)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4ed9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x8000)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x4, '\x00', r6, r0, 0x3, 0x4, 0x4}, 0x50)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001200)='syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r5, r12, 0x20, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r3}, &(0x7f0000001280), &(0x7f00000012c0)='%+9llu \x00'}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340)=r7, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0xf3d1724c572ef709, 0x9, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x0, 0x5, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f0000001400)='syzkaller\x00', 0x200, 0x3f, &(0x7f0000001440)=""/63, 0x40f00, 0x60, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000001480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x4, 0x9, 0xd, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[r11], 0x0, 0x10, 0x8001}, 0x94)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@fwd={0x5}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @func={0xa, 0x0, 0x0, 0xc, 0x4}, @volatile={0xb}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f0000001800)=""/112, 0x73, 0x70, 0x0, 0x0, 0x10000, @value=r8}, 0x28)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001940)=@generic={&(0x7f0000001900)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x6, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xffff}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000001640)='syzkaller\x00', 0x4, 0xfe, &(0x7f0000001680)=""/254, 0x40f00, 0x26, '\x00', r6, 0x0, r13, 0x8, &(0x7f00000018c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980)=[r11, r14, r3, r3], &(0x7f00000019c0)=[{0x5, 0x3, 0x7, 0x5}, {0x2, 0x5, 0x7, 0x5}], 0x10, 0x4}, 0x94)
write$cgroup_pid(r9, &(0x7f0000001ac0), 0x12)

5.274744ms ago: executing program 3 (id=3317):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba83"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f00000002c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="9bb2", 0x2}], 0x1}, 0x4000044)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x1, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffd, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x82, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)

0s ago: executing program 34 (id=3317):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000717c33ba83"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2, &(0x7f00000002c0), 0x4)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="9bb2", 0x2}], 0x1}, 0x4000044)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x1, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffd, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x82, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00')
perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

t promiscuous mode
[  237.472982][T10083] batadv_slave_0: left promiscuous mode
[  237.476169][T10083] batadv0: left promiscuous mode
[  237.478831][T10083] team0: Device bond0 is already an upper device of the team interface
[  237.719455][T10105] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1143'.
[  237.805472][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'.
[  237.932329][T10110] =======================================================
[  237.932329][T10110] WARNING: The mand mount option has been deprecated and
[  237.932329][T10110]          and is ignored by this kernel. Remove the mand
[  237.932329][T10110]          option from the mount to silence this warning.
[  237.932329][T10110] =======================================================
[  237.937196][T10113] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1146'.
[  237.950136][T10110] bpf: Bad value for 'uid'
[  237.954744][T10114] netlink: 'syz.0.1144': attribute type 10 has an invalid length.
[  237.959241][T10114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1144'.
[  238.006291][T10116] netlink: 'syz.1.1147': attribute type 21 has an invalid length.
[  238.017849][T10121] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1148'.
[  238.038013][T10123] delete_channel: no stack
[  238.086878][T10126] netlink: 'syz.3.1149': attribute type 29 has an invalid length.
[  239.683407][T10165] validate_nla: 3 callbacks suppressed
[  239.683432][T10165] netlink: 'syz.0.1161': attribute type 7 has an invalid length.
[  241.379238][T10198] __nla_validate_parse: 9 callbacks suppressed
[  241.379265][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1170'.
[  241.931221][T10209] netlink: 'syz.3.1174': attribute type 39 has an invalid length.
[  242.205672][T10236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1180'.
[  242.211207][T10234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1180'.
[  242.218264][T10236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1180'.
[  242.366609][T10234] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1180'.
[  242.547131][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  242.551673][T10243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'.
[  242.558687][T10243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'.
[  243.235934][T10245] netlink: 'syz.0.1183': attribute type 10 has an invalid length.
[  243.249649][T10245] team0: Device veth0_vlan failed to register rx_handler
[  243.480574][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1188'.
[  243.484942][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1188'.
[  246.486080][T10314] delete_channel: no stack
[  246.488301][T10314] delete_channel: no stack
[  246.491745][T10316] __nla_validate_parse: 10 callbacks suppressed
[  246.491760][T10316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1201'.
[  246.524906][T10318] netlink: 'syz.1.1203': attribute type 1 has an invalid length.
[  246.528044][T10318] netlink: 'syz.1.1203': attribute type 1 has an invalid length.
[  246.558598][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'.
[  246.564404][T10322] openvswitch: netlink: nsh attr 165 is out of range max 3
[  246.567294][T10322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.590410][T10326] netlink: 'syz.1.1205': attribute type 41 has an invalid length.
[  246.594331][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1205'.
[  246.654356][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'.
[  246.744840][T10331] netlink: 'syz.0.1207': attribute type 1 has an invalid length.
[  246.748168][T10331] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1207'.
[  248.306654][T10378] netlink: 'syz.3.1218': attribute type 22 has an invalid length.
[  248.307143][T10377] netlink: 'syz.3.1218': attribute type 22 has an invalid length.
[  248.310530][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'.
[  248.323016][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'.
[  248.460243][T10389] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1222'.
[  248.910078][T10396] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1225'.
[  248.941477][T10396] openvswitch: netlink: Message has 6 unknown bytes.
[  249.247628][T10408] netlink: 'syz.3.1228': attribute type 16 has an invalid length.
[  249.251565][T10408] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1228'.
[  250.316838][T10452] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  250.469846][T10456] netlink: 'syz.1.1245': attribute type 1 has an invalid length.
[  250.476145][T10456] netlink: 'syz.1.1245': attribute type 3 has an invalid length.
[  250.560655][T10462] netlink: 'syz.1.1248': attribute type 10 has an invalid length.
[  250.564095][T10463] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  250.572395][T10463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.582672][T10462] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  250.589633][T10462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.340776][T10501] bond0: entered promiscuous mode
[  251.344843][T10501] @: entered promiscuous mode
[  251.347391][T10501] bond_slave_1: entered promiscuous mode
[  251.350039][T10501] batadv0: entered promiscuous mode
[  251.380422][T10501] team0: Port device bond0 removed
[  251.383812][T10501] bridge0: port 3(bond0) entered blocking state
[  251.390189][T10501] bridge0: port 3(bond0) entered disabled state
[  251.392637][T10501] bond0: entered allmulticast mode
[  251.395741][T10501] @: entered allmulticast mode
[  251.397677][T10501] bond_slave_1: entered allmulticast mode
[  251.399747][T10501] batadv0: entered allmulticast mode
[  251.412068][  T794] syz1: Port: 1 Link DOWN
[  251.501718][T10510] __nla_validate_parse: 19 callbacks suppressed
[  251.501735][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1259'.
[  251.517385][T10510] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1259'.
[  251.663426][ T5884] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  251.667961][ T5884] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  252.262550][T10528] IPv6: Can't replace route, no match found
[  252.364630][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'.
[  252.399741][T10533] validate_nla: 2 callbacks suppressed
[  252.399799][T10533] netlink: 'syz.1.1264': attribute type 16 has an invalid length.
[  252.411490][T10533] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1264'.
[  252.457816][T10533] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.696836][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  252.986422][T10545] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1268'.
[  253.766595][T10564] netlink: 'syz.1.1274': attribute type 10 has an invalid length.
[  253.830198][T10564] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  253.834286][T10564] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  253.839678][T10564] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  253.958741][T10571] netlink: 'syz.0.1276': attribute type 16 has an invalid length.
[  253.964139][T10571] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1276'.
[  254.007880][T10570] netlink: 809 bytes leftover after parsing attributes in process `syz.0.1276'.
[  254.013827][T10570] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.1276'.
[  254.018998][T10570] netlink: 809 bytes leftover after parsing attributes in process `syz.0.1276'.
[  254.250374][T10587] netlink: 'syz.1.1280': attribute type 1 has an invalid length.
[  254.255536][T10587] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1280'.
[  254.900222][T10602] macsec0: left promiscuous mode
[  254.915405][T10602] veth1_macvtap: entered promiscuous mode
[  254.919400][T10602] macsec0: entered promiscuous mode
[  254.922076][T10602] macsec0: entered allmulticast mode
[  254.924948][T10602] veth1_macvtap: entered allmulticast mode
[  255.245486][T10614] netlink: 'syz.3.1290': attribute type 3 has an invalid length.
[  255.248473][T10614] netlink: 'syz.3.1290': attribute type 8 has an invalid length.
[  255.251398][T10614] netlink: 'syz.3.1290': attribute type 6 has an invalid length.
[  255.255670][T10614] netlink: 'syz.3.1290': attribute type 21 has an invalid length.
[  255.258970][T10614] netlink: 'syz.3.1290': attribute type 10 has an invalid length.
[  255.730841][T10623] netlink: 'syz.3.1294': attribute type 21 has an invalid length.
[  257.515585][T10658] syzkaller0: entered promiscuous mode
[  257.517854][T10658] syzkaller0: entered allmulticast mode
[  257.649539][T10668] netlink: 'syz.1.1305': attribute type 21 has an invalid length.
[  257.659866][T10668] __nla_validate_parse: 4 callbacks suppressed
[  257.659886][T10668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1305'.
[  257.772030][T10673] syzkaller1: tun_chr_ioctl cmd 1074025673
[  257.775425][T10672] syzkaller1: tun_chr_ioctl cmd 1074025676
[  257.778276][T10672] syzkaller1: owner set to 778
[  257.787463][T10673] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1307'.
[  258.030273][T10684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1303'.
[  258.123541][T10691] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1312'.
[  258.169188][T10693] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1313'.
[  258.275828][T10688] delete_channel: no stack
[  258.404674][T10699] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1315'.
[  259.045095][T10720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1319'.
[  259.049177][T10720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1319'.
[  259.148433][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'.
[  259.154153][T10724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.160377][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1321'.
[  259.255895][T10726] netlink: 'syz.0.1322': attribute type 3 has an invalid length.
[  259.395035][T10732] netlink: 'syz.3.1324': attribute type 21 has an invalid length.
[  259.398922][T10732] netlink: 'syz.3.1324': attribute type 1 has an invalid length.
[  259.466970][T10738] tun0: tun_chr_ioctl cmd 1074025677
[  259.469925][T10738] tun0: linktype set to 270
[  260.868397][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  260.871768][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  263.582002][T10773] __nla_validate_parse: 3 callbacks suppressed
[  263.582015][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'.
[  263.589958][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'.
[  263.594940][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'.
[  263.600135][T10773] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1335'.
[  263.606085][T10775] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1336'.
[  263.710209][T10777] netlink: 'syz.3.1338': attribute type 10 has an invalid length.
[  263.715579][T10777] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1338'.
[  263.727996][T10777] team0: entered promiscuous mode
[  263.731174][T10777] C: entered promiscuous mode
[  263.738582][T10777] team_slave_1: entered promiscuous mode
[  263.754288][T10777] bridge0: port 4(team0) entered blocking state
[  263.761316][T10777] bridge0: port 4(team0) entered disabled state
[  263.767565][T10777] team0: entered allmulticast mode
[  263.770002][T10777] C: entered allmulticast mode
[  263.772219][T10777] team_slave_1: entered allmulticast mode
[  263.816487][T10780] netlink: 'syz.3.1338': attribute type 29 has an invalid length.
[  263.910442][T10782] IPv6: ipvlan0: Disabled Multicast RS
[  264.627086][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  264.627624][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  264.754677][T10810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1348'.
[  264.760171][T10810] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1348'.
[  265.856562][T10827] netlink: 'syz.1.1352': attribute type 4 has an invalid length.
[  265.867896][T10827] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  266.892420][T10840] IPv6: NLM_F_REPLACE set, but no existing node found!
[  269.686617][T10908] __nla_validate_parse: 3 callbacks suppressed
[  269.686630][T10908] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1377'.
[  269.692510][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'.
[  269.722307][T10910] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1376'.
[  269.729685][T10909] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1376'.
[  270.561168][T10922] lo: entered allmulticast mode
[  270.572550][T10922] lo: entered promiscuous mode
[  270.576736][T10922] lo: left allmulticast mode
[  270.819208][T10924] syzkaller0: entered promiscuous mode
[  270.822008][T10924] syzkaller0: entered allmulticast mode
[  271.849971][T10941] netlink: 'syz.3.1385': attribute type 22 has an invalid length.
[  271.855336][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'.
[  273.412476][T10975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1393'.
[  273.423827][T10967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1393'.
[  273.445228][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'.
[  273.760388][T10984] netlink: 'syz.1.1395': attribute type 1 has an invalid length.
[  273.867777][T10991] netlink: 'syz.0.1396': attribute type 39 has an invalid length.
[  274.100695][T10996] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  274.104305][T10996] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  274.145944][T11002] sctp: [Deprecated]: syz.3.1399 (pid 11002) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.145944][T11002] Use struct sctp_sack_info instead
[  274.224838][T11010] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1401'.
[  274.238579][T11008] netlink: 'syz.1.1401': attribute type 29 has an invalid length.
[  274.652497][T11031] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1407'.
[  274.801343][T11037] netlink: 'syz.0.1411': attribute type 2 has an invalid length.
[  274.805136][T11037] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1411'.
[  274.968680][T11039] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1412'.
[  275.043920][T11044] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1414'.
[  276.086367][T11064] ksmbd: Unknown IPC event: 1, ignore.
[  276.168108][T11066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.736190][T11075] netlink: 'syz.3.1425': attribute type 25 has an invalid length.
[  276.745254][T11075] netlink: 'syz.3.1425': attribute type 7 has an invalid length.
[  276.749154][T11077] netlink: 'syz.1.1424': attribute type 10 has an invalid length.
[  276.764623][T11077] team0: Cannot enslave team device to itself
[  276.848363][T11075] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1425'.
[  277.253580][T11094] netlink: 'syz.3.1430': attribute type 6 has an invalid length.
[  277.317489][T11099] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1431'.
[  278.158907][T11109] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1434'.
[  278.361056][T11116] netlink: 'syz.1.1437': attribute type 15 has an invalid length.
[  278.367648][T11116] netlink: 11318 bytes leftover after parsing attributes in process `syz.1.1437'.
[  278.737455][T11126] netlink: 'syz.3.1439': attribute type 10 has an invalid length.
[  278.754060][T11127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1438'.
[  279.116886][T11157] netlink: 'syz.1.1445': attribute type 3 has an invalid length.
[  279.119962][T11157] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1445'.
[  279.266173][T11162] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1447'.
[  279.384127][T11167] netlink: 'syz.1.1446': attribute type 2 has an invalid length.
[  280.559135][T11188] __nla_validate_parse: 2 callbacks suppressed
[  280.559156][T11188] netlink: 1018 bytes leftover after parsing attributes in process `syz.3.1457'.
[  280.575489][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'.
[  280.728233][T11192] netlink: 'syz.3.1458': attribute type 2 has an invalid length.
[  280.731370][T11192] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1458'.
[  281.207814][T11208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1461'.
[  281.212420][T11208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1461'.
[  281.228930][T11208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1461'.
[  281.236453][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'.
[  281.236477][T11208] netlink: 'syz.0.1461': attribute type 3 has an invalid length.
[  281.240698][T11211] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1463'.
[  281.246018][T11208] netlink: 'syz.0.1461': attribute type 2 has an invalid length.
[  281.251781][T11208] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.1461'.
[  281.297344][T11213] nft_compat: unsupported protocol 1
[  281.301340][T11213] netlink: 'syz.3.1464': attribute type 39 has an invalid length.
[  281.340810][T11215] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1465'.
[  282.062461][T11219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  282.532458][T11232] netlink: 'syz.1.1470': attribute type 29 has an invalid length.
[  283.979943][T11279] netlink: 'syz.3.1485': attribute type 25 has an invalid length.
[  283.985041][T11279] netlink: 'syz.3.1485': attribute type 39 has an invalid length.
[  285.300888][T11309] delete_channel: no stack
[  285.331440][T11315] openvswitch: netlink: Missing valid actions attribute.
[  285.336877][T11315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.392044][T11318] netlink: 'syz.0.1495': attribute type 1 has an invalid length.
[  285.399349][T11318] netlink: 'syz.0.1495': attribute type 2 has an invalid length.
[  285.401861][T11320] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  285.407307][T11318] netlink: 'syz.0.1495': attribute type 7 has an invalid length.
[  285.414348][T11318] netlink: 'syz.0.1495': attribute type 1 has an invalid length.
[  285.414397][T11320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.417691][T11318] netlink: 'syz.0.1495': attribute type 2 has an invalid length.
[  286.978300][T11372] __nla_validate_parse: 4 callbacks suppressed
[  286.978315][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'.
[  287.021594][T11374] netlink: 'syz.0.1514': attribute type 21 has an invalid length.
[  287.025562][T11374] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1514'.
[  287.029975][T11374] netlink: 'syz.0.1514': attribute type 5 has an invalid length.
[  287.033364][T11374] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1514'.
[  287.138639][T11379] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1515'.
[  287.143812][T11379] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  287.148123][T11379] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  287.387309][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'.
[  287.799320][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'.
[  287.866081][T11414] validate_nla: 2 callbacks suppressed
[  287.866103][T11414] netlink: 'syz.1.1525': attribute type 33 has an invalid length.
[  287.877550][T11414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.120159][T11418] netlink: 'syz.1.1527': attribute type 6 has an invalid length.
[  288.133225][T11418] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1527'.
[  288.587981][T11428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  288.900473][T11437] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1532'.
[  288.943059][T11439] netlink: 'syz.0.1531': attribute type 21 has an invalid length.
[  288.947026][T11440] netlink: 'syz.0.1531': attribute type 21 has an invalid length.
[  288.950559][T11440] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1531'.
[  289.379623][T11454] netlink: 'syz.1.1537': attribute type 12 has an invalid length.
[  290.149149][T11464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.526094][T11476] openvswitch: netlink: Missing valid actions attribute.
[  290.529503][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.386702][T11483] lo speed is unknown, defaulting to 1000
[  293.388889][T11483] lo speed is unknown, defaulting to 1000
[  293.391548][T11483] lo speed is unknown, defaulting to 1000
[  293.404278][T11483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  293.434949][T11483] lo speed is unknown, defaulting to 1000
[  293.440438][T11483] lo speed is unknown, defaulting to 1000
[  293.445702][T11483] lo speed is unknown, defaulting to 1000
[  293.536654][T11497] siw: device registration error -23
[  293.585979][T11497] netlink: 'syz.0.1551': attribute type 21 has an invalid length.
[  293.713314][T11502] __nla_validate_parse: 6 callbacks suppressed
[  293.713328][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1553'.
[  293.766497][T11506] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1554'.
[  293.803171][T11506] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1554'.
[  293.848614][T11513] : renamed from veth0_to_bond (while UP)
[  293.927846][T11520] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  293.933658][T11520] netlink: 'syz.3.1559': attribute type 10 has an invalid length.
[  294.166724][T11525] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1561'.
[  294.170549][T11525] batadv_slave_1: entered promiscuous mode
[  294.225426][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'.
[  294.229440][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'.
[  294.737119][T11530] netlink: 'syz.3.1562': attribute type 10 has an invalid length.
[  295.027749][T11530] team0: left allmulticast mode
[  295.030386][T11530] C: left allmulticast mode
[  295.032707][T11530] team_slave_1: left allmulticast mode
[  295.038101][T11530] team0: left promiscuous mode
[  295.040527][T11530] C: left promiscuous mode
[  295.043819][T11530] team_slave_1: left promiscuous mode
[  295.046771][T11530] bridge0: port 4(team0) entered disabled state
[  295.056910][T11530] 8021q: adding VLAN 0 to HW filter on device team0
[  295.062741][T11530] bond0: (slave team0): Enslaving as an active interface with an up link
[  295.067461][T11531] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  295.177545][T11535] lo speed is unknown, defaulting to 1000
[  295.579232][T11547] syzkaller0: entered promiscuous mode
[  295.581792][T11547] syzkaller0: entered allmulticast mode
[  295.817417][T11561] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1572'.
[  297.252068][T11568] syzkaller0: entered promiscuous mode
[  297.255722][T11568] syzkaller0: entered allmulticast mode
[  297.420955][T11595] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1577'.
[  298.632184][T11595] C: renamed from team_slave_0 (while UP)
[  298.640726][T11595] netlink: 'syz.0.1577': attribute type 3 has an invalid length.
[  298.645535][T11595] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1577'.
[  298.650717][T11595] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  298.826921][T11617] netlink: 'syz.0.1581': attribute type 10 has an invalid length.
[  298.830642][T11617] team0: Device ipvlan1 failed to register rx_handler
[  298.869510][T11612] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1580'.
[  299.005989][T11629] netlink: 208344 bytes leftover after parsing attributes in process `syz.3.1585'.
[  299.009539][T11629] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  299.012607][T11629] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  299.537029][T11643] netlink: 'syz.3.1589': attribute type 3 has an invalid length.
[  299.540894][T11643] netlink: 'syz.3.1589': attribute type 1 has an invalid length.
[  299.546574][T11643] netlink: 201352 bytes leftover after parsing attributes in process `syz.3.1589'.
[  299.660968][T11647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1592'.
[  299.740663][T11651] netlink: 'syz.1.1591': attribute type 2 has an invalid length.
[  299.746151][T11651] netlink: 'syz.1.1591': attribute type 1 has an invalid length.
[  299.812718][T11658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1595'.
[  299.818434][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1595'.
[  299.827600][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'.
[  299.905286][T11662] netlink: 'syz.3.1595': attribute type 16 has an invalid length.
[  299.909243][T11662] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1595'.
[  300.111424][T11670] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1597'.
[  301.093243][T11697] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1607'.
[  301.121103][T11697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.126947][   T48] lo speed is unknown, defaulting to 1000
[  301.129208][   T48] syz2: Port: 1 Link DOWN
[  301.350899][T11714] netlink: 'syz.3.1612': attribute type 25 has an invalid length.
[  301.356817][T11714] netlink: 'syz.3.1612': attribute type 21 has an invalid length.
[  301.436424][T11717] warn_alloc: 2 callbacks suppressed
[  301.436443][T11717] syz.1.1610: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  301.449209][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.1.1610 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  301.449237][T11717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.449249][T11717] Call Trace:
[  301.449258][T11717]  <TASK>
[  301.449266][T11717]  dump_stack_lvl+0x189/0x250
[  301.449299][T11717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.449323][T11717]  ? __pfx__printk+0x10/0x10
[  301.449349][T11717]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  301.449371][T11717]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  301.449394][T11717]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  301.449420][T11717]  warn_alloc+0x214/0x310
[  301.449450][T11717]  ? stack_depot_save_flags+0x40/0x860
[  301.449478][T11717]  ? __pfx_warn_alloc+0x10/0x10
[  301.449508][T11717]  ? kasan_save_track+0x4f/0x80
[  301.449533][T11717]  ? xskq_create+0x56/0x170
[  301.449555][T11717]  ? xsk_init_queue+0xb0/0x110
[  301.449607][T11717]  ? xsk_setsockopt+0x57b/0x8d0
[  301.449628][T11717]  ? do_sock_setsockopt+0x17c/0x1b0
[  301.449645][T11717]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  301.449662][T11717]  ? do_syscall_64+0xfa/0x3b0
[  301.449690][T11717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.449723][T11717]  __vmalloc_node_range_noprof+0x125/0x12f0
[  301.449781][T11717]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  301.449817][T11717]  ? __kasan_kmalloc+0x93/0xb0
[  301.449846][T11717]  vmalloc_user_noprof+0xad/0xf0
[  301.449872][T11717]  ? xskq_create+0xbf/0x170
[  301.449901][T11717]  xskq_create+0xbf/0x170
[  301.449929][T11717]  xsk_init_queue+0xb0/0x110
[  301.449955][T11717]  xsk_setsockopt+0x57b/0x8d0
[  301.449980][T11717]  ? __pfx_xsk_setsockopt+0x10/0x10
[  301.450003][T11717]  ? __pfx_aa_sk_perm+0x10/0x10
[  301.450031][T11717]  ? __fget_files+0x2a/0x420
[  301.450047][T11717]  ? aa_sock_opt_perm+0xff/0x1b0
[  301.450067][T11717]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  301.450088][T11717]  ? __pfx_xsk_setsockopt+0x10/0x10
[  301.450110][T11717]  do_sock_setsockopt+0x17c/0x1b0
[  301.450134][T11717]  __x64_sys_setsockopt+0x13f/0x1b0
[  301.450158][T11717]  do_syscall_64+0xfa/0x3b0
[  301.450182][T11717]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.450205][T11717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.450223][T11717]  ? exc_page_fault+0x9f/0xf0
[  301.450249][T11717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  301.450268][T11717] RIP: 0033:0x7f671b98ebe9
[  301.450285][T11717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.450302][T11717] RSP: 002b:00007f671c841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  301.450322][T11717] RAX: ffffffffffffffda RBX: 00007f671bbb6270 RCX: 00007f671b98ebe9
[  301.450336][T11717] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  301.450349][T11717] RBP: 00007f671ba11e19 R08: 0000000000000004 R09: 0000000000000000
[  301.450360][T11717] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  301.450372][T11717] R13: 00007f671bbb6308 R14: 00007f671bbb6270 R15: 00007ffc4dab0f78
[  301.450401][T11717]  </TASK>
[  301.450410][T11717] Mem-Info:
[  301.577423][T11723] nbd: must specify a size in bytes for the device
[  301.583605][T11717] active_anon:21442 inactive_anon:0 isolated_anon:0
[  301.583605][T11717]  active_file:14858 inactive_file:38302 isolated_file:0
[  301.583605][T11717]  unevictable:1768 dirty:75 writeback:0
[  301.583605][T11717]  slab_reclaimable:9931 slab_unreclaimable:58264
[  301.583605][T11717]  mapped:22137 shmem:18732 pagetables:1163
[  301.583605][T11717]  sec_pagetables:0 bounce:0
[  301.583605][T11717]  kernel_misc_reclaimable:0
[  301.583605][T11717]  free:230745 free_pcp:31225 free_cma:0
[  301.620858][T11717] Node 0 active_anon:52112kB inactive_anon:0kB active_file:25328kB inactive_file:16504kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36760kB dirty:232kB writeback:0kB shmem:45800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3824kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  301.633061][T11717] Node 1 active_anon:33656kB inactive_anon:0kB active_file:34104kB inactive_file:136704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51788kB dirty:68kB writeback:0kB shmem:29128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8112kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  301.646525][T11717] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  301.657510][T11717] lowmem_reserve[]: 0 811 811 811 811
[  301.660122][T11717] Node 0 DMA32 free:309704kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52112kB inactive_anon:0kB active_file:25328kB inactive_file:16504kB unevictable:3536kB writepending:232kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:56232kB local_pcp:19504kB free_cma:0kB
[  301.676247][T11717] lowmem_reserve[]: 0 0 0 0 0
[  301.678623][T11717] Node 1 DMA32 free:443796kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14820kB local_pcp:8556kB free_cma:0kB
[  301.693703][T11717] lowmem_reserve[]: 0 0 854 854 854
[  301.696205][T11717] Node 1 Normal free:154120kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33656kB inactive_anon:0kB active_file:34104kB inactive_file:136704kB unevictable:3536kB writepending:68kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:54048kB local_pcp:31904kB free_cma:0kB
[  301.711588][T11717] lowmem_reserve[]: 0 0 0 0 0
[  301.714340][T11717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  301.720420][T11717] Node 0 DMA32: 2*4kB (ME) 6*8kB (E) 23*16kB (UE) 99*32kB (UE) 133*64kB (UME) 183*128kB (UE) 119*256kB (UME) 82*512kB (UME) 55*1024kB (U) 11*2048kB (UM) 30*4096kB (UM) = 309704kB
[  301.729313][T11717] Node 1 DMA32: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 2*32kB (M) 2*64kB (M) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 104*4096kB (UM) = 443796kB
[  301.737338][T11717] Node 1 Normal: 2*4kB (ME) 262*8kB (UME) 229*16kB (UME) 8*32kB (UME) 85*64kB (UME) 144*128kB (UME) 59*256kB (UME) 61*512kB (UME) 56*1024kB (UME) 8*2048kB (U) 1*4096kB (U) = 154056kB
[  301.746516][T11717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  301.750512][T11717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  301.754835][T11717] 71892 total pagecache pages
[  301.757372][T11717] 0 pages in swap cache
[  301.759369][T11717] Free swap  = 124996kB
[  301.761317][T11717] Total swap = 124996kB
[  301.763688][T11717] 786301 pages RAM
[  301.765793][T11717] 0 pages HighMem/MovableOnly
[  301.767992][T11717] 241330 pages reserved
[  301.770002][T11717] 0 pages cma reserved
[  303.389032][T11754] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  303.391796][T11754] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  303.923130][T11775] __nla_validate_parse: 45 callbacks suppressed
[  303.923143][T11775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1626'.
[  303.928916][T11775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1626'.
[  304.088700][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.093851][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.098493][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.104093][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.108715][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.113589][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.118365][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.123341][T11789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  304.304312][T11797] netlink: 'syz.1.1632': attribute type 5 has an invalid length.
[  304.516571][T11803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.169144][T11817] openvswitch: netlink: Message has 6 unknown bytes.
[  307.964037][T11888] netlink: 'syz.3.1656': attribute type 10 has an invalid length.
[  308.017962][T11887] netlink: 'syz.0.1657': attribute type 10 has an invalid length.
[  308.081108][T11887] team0: Port device wlan1 added
[  308.411492][T11901] syzkaller0: entered promiscuous mode
[  308.414118][T11901] syzkaller0: entered allmulticast mode
[  309.167481][T11912] __nla_validate_parse: 37 callbacks suppressed
[  309.167596][T11912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1665'.
[  309.409441][T11916] netlink: 472 bytes leftover after parsing attributes in process `syz.0.1666'.
[  309.504384][T11921] netlink: 'syz.0.1667': attribute type 1 has an invalid length.
[  309.508020][T11921] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1667'.
[  310.108133][T11925] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1669'.
[  310.112351][T11925] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1669'.
[  310.262335][ T5884] syzkaller0: tun_net_xmit 76
[  310.265599][ T5884] syzkaller0: tun_net_xmit 48
[  310.275037][T11936] syzkaller0: create flow: hash 1277519549 index 1
[  310.283805][ T5315] syzkaller0: tun_net_xmit 76
[  310.296494][T11939] 0: renamed from bond_slave_1 (while UP)
[  310.343264][ T5315] syzkaller0: tun_net_xmit 76
[  310.388140][T11936] netlink: 'syz.3.1672': attribute type 21 has an invalid length.
[  310.433106][T11936] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1672'.
[  310.453415][ T5315] syzkaller0: tun_net_xmit 76
[  310.486801][T11935] syzkaller0: delete flow: hash 1277519549 index 1
[  311.884732][T11957] *O: renamed from ip6_vti0 (while UP)
[  312.052240][T11971] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1682'.
[  312.434681][T11979] netlink: 'syz.0.1684': attribute type 2 has an invalid length.
[  312.438776][T11979] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1684'.
[  312.443502][T11979] nbd: must specify at least one socket
[  312.970559][T11985] netlink: 203760 bytes leftover after parsing attributes in process `syz.3.1686'.
[  312.978305][T11985] netlink: zone id is out of range
[  312.981094][T11985] netlink: zone id is out of range
[  312.984248][T11985] netlink: zone id is out of range
[  312.986970][T11985] netlink: zone id is out of range
[  312.989669][T11985] netlink: zone id is out of range
[  312.992363][T11985] netlink: zone id is out of range
[  312.997575][T11985] netlink: zone id is out of range
[  313.000832][T11985] netlink: zone id is out of range
[  313.004946][T11985] netlink: get zone limit has 8 unknown bytes
[  313.440622][T11997] lo speed is unknown, defaulting to 1000
[  313.461271][T12001] xt_policy: too many policy elements
[  313.468880][T11998] lo speed is unknown, defaulting to 1000
[  313.823016][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'.
[  313.924650][T12013] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  313.929604][T12013] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  314.441916][T12019] __nla_validate_parse: 1 callbacks suppressed
[  314.441933][T12019] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1696'.
[  314.809082][T12029] netlink: 'syz.0.1699': attribute type 8 has an invalid length.
[  314.812756][T12029] netlink: 'syz.0.1699': attribute type 3 has an invalid length.
[  314.819335][T12029] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1699'.
[  314.880562][T12036] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  314.943169][   T55] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  316.547833][T12076] netlink: 1018 bytes leftover after parsing attributes in process `syz.1.1711'.
[  316.669088][T12080] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1712'.
[  316.761642][T12082] syzkaller0: entered promiscuous mode
[  316.768433][T12082] syzkaller0: entered allmulticast mode
[  317.219139][T12091] netlink: 'syz.0.1716': attribute type 2 has an invalid length.
[  317.222176][T12091] netlink: 'syz.0.1716': attribute type 9 has an invalid length.
[  317.225508][T12091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1716'.
[  318.510895][T12104] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1721'.
[  318.529165][T12102] netlink: 'syz.1.1719': attribute type 39 has an invalid length.
[  319.010919][T12114] netlink: 'syz.3.1725': attribute type 1 has an invalid length.
[  319.020368][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'.
[  319.092745][T12117] syzkaller0: entered promiscuous mode
[  319.095286][T12117] syzkaller0: entered allmulticast mode
[  320.011392][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'.
[  320.581905][T12136] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1732'.
[  320.647678][T12143] netlink: 'syz.1.1735': attribute type 4 has an invalid length.
[  320.722017][T12151] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1739'.
[  321.876978][T12183] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1747'.
[  321.994091][   T33] audit: type=1107 audit(1755237554.348:2): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='
[  321.994091][   T33] aZ~y&q'
[  322.045949][T12191] netlink: 'syz.1.1750': attribute type 3 has an invalid length.
[  322.049311][T12191] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1750'.
[  322.107167][T12194] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1752'.
[  322.116906][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1752'.
[  322.311890][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  322.314520][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  323.496133][T12231] netlink: 'syz.3.1761': attribute type 7 has an invalid length.
[  323.843214][T12245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.883776][T12247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1767'.
[  324.028428][T12252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1769'.
[  324.148348][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'.
[  324.506405][T12296] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  324.510237][T12296] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  325.054200][T12300] cgroup: fork rejected by pids controller in /syz3
[  325.082921][T12337] __nla_validate_parse: 2 callbacks suppressed
[  325.082936][T12337] netlink: 798 bytes leftover after parsing attributes in process `syz.1.1784'.
[  325.391594][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'.
[  325.401867][T12359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1787'.
[  325.407268][T12359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1787'.
[  325.413718][T12359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1787'.
[  325.483917][T12369] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  325.618937][T12378] netlink: 'syz.0.1791': attribute type 2 has an invalid length.
[  325.622696][T12378] netlink: 'syz.0.1791': attribute type 1 has an invalid length.
[  325.628592][T12378] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1791'.
[  325.632311][T12378] block nbd5: not configured, cannot reconfigure
[  325.719763][T12378] netlink: 'syz.0.1791': attribute type 14 has an invalid length.
[  325.725901][T12378] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1791'.
[  325.953532][T12400] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1798'.
[  325.978606][T12400] netlink: 'syz.0.1798': attribute type 21 has an invalid length.
[  325.983251][T12400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1798'.
[  326.228341][T12417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  326.388903][T12422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1803'.
[  326.530460][T12427] netlink: zone id is out of range
[  326.535924][T12427] netlink: zone id is out of range
[  326.541424][T12427] netlink: zone id is out of range
[  326.558177][T12427] netlink: zone id is out of range
[  326.560169][T12427] netlink: zone id is out of range
[  326.562291][T12427] netlink: zone id is out of range
[  326.566088][T12427] netlink: zone id is out of range
[  326.568008][T12427] netlink: zone id is out of range
[  326.576362][T12427] netlink: 'syz.0.1805': attribute type 4 has an invalid length.
[  326.867921][T12444] netlink: 'syz.0.1812': attribute type 1 has an invalid length.
[  328.409209][T12482] sctp: [Deprecated]: syz.1.1822 (pid 12482) Use of int in maxseg socket option.
[  328.409209][T12482] Use struct sctp_assoc_value instead
[  328.790427][T12514] netlink: 'syz.3.1830': attribute type 27 has an invalid length.
[  328.938266][T12522] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  328.964124][T12523] netlink: 'syz.0.1833': attribute type 11 has an invalid length.
[  328.967159][T12522] netlink: 'syz.0.1833': attribute type 11 has an invalid length.
[  329.039199][T12529] netlink: 'syz.3.1834': attribute type 2 has an invalid length.
[  329.074419][T12525] lo speed is unknown, defaulting to 1000
[  329.856412][T12541] netlink: 'syz.1.1838': attribute type 1 has an invalid length.
[  330.037811][T12546] netlink: 'syz.1.1840': attribute type 6 has an invalid length.
[  330.214906][T12555] __nla_validate_parse: 51 callbacks suppressed
[  330.214925][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1842'.
[  330.360098][T12558] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1843'.
[  330.369736][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1843'.
[  331.395375][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1851'.
[  331.450184][T12586] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1850'.
[  332.341209][T12597] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  332.345988][T12597] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.628523][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[  333.082193][T12622] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1863'.
[  333.199067][T12631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.205261][T12631] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.220081][T12631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.226300][T12631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.233681][T12631] batman_adv: batadv0: Interface deactivated: vlan1
[  333.237166][T12631] batman_adv: batadv0: Removing interface: vlan1
[  333.393867][T12631] bond0: (slave batadv0): Releasing backup interface
[  333.406246][T12631] batadv0 (unregistering): left promiscuous mode
[  333.410672][T12631] batadv0 (unregistering): left allmulticast mode
[  333.603278][T12640] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1868'.
[  333.608219][T12640] net_ratelimit: 18 callbacks suppressed
[  333.608271][T12640] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  333.738503][T12640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.064971][T12656] netlink: 'syz.3.1874': attribute type 4 has an invalid length.
[  334.070260][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'.
[  334.335416][T12671] netlink: 294 bytes leftover after parsing attributes in process `syz.1.1878'.
[  334.354968][T12663] delete_channel: no stack
[  334.565829][T12680] netlink: 'syz.1.1881': attribute type 4 has an invalid length.
[  335.657843][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'.
[  335.661463][T12711] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  335.664683][T12711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.471914][T12730] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1889'.
[  336.478257][T12730] openvswitch: netlink: Message has 6 unknown bytes.
[  336.505565][T12737] netlink: 3576 bytes leftover after parsing attributes in process `syz.3.1892'.
[  336.540740][T12730] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  336.545986][T12730] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  336.591097][T12737] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1892'.
[  337.491579][T12755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1897'.
[  337.495688][T12755] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1897'.
[  337.499100][T12755] netlink: 'syz.0.1897': attribute type 5 has an invalid length.
[  337.502056][T12755] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1897'.
[  337.971484][T12764] netlink: 'syz.0.1900': attribute type 16 has an invalid length.
[  337.973139][T12763] netlink: 'syz.0.1900': attribute type 16 has an invalid length.
[  337.975022][T12764] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1900'.
[  337.978746][T12763] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1900'.
[  337.990101][T12763] netlink: 809 bytes leftover after parsing attributes in process `syz.0.1900'.
[  338.385572][T12775] netlink: 'syz.0.1904': attribute type 4 has an invalid length.
[  338.604442][T12791] netlink: 'syz.3.1910': attribute type 1 has an invalid length.
[  338.673476][T12796] netlink: 'syz.0.1912': attribute type 21 has an invalid length.
[  338.676824][T12796] netlink: 'syz.0.1912': attribute type 20 has an invalid length.
[  340.249868][T12845] netlink: 'syz.3.1927': attribute type 21 has an invalid length.
[  340.550855][T12850] netlink: 'syz.1.1929': attribute type 29 has an invalid length.
[  341.002110][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  341.002292][T12877] __nla_validate_parse: 14 callbacks suppressed
[  341.002303][T12877] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1937'.
[  341.072137][T12887] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1939'.
[  341.079013][T12887] netlink: 6200 bytes leftover after parsing attributes in process `syz.3.1939'.
[  341.082525][T12887] netlink: 126 bytes leftover after parsing attributes in process `syz.3.1939'.
[  341.097342][T12887] tc_dump_action: action bad kind
[  341.367546][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'.
[  341.437152][T12907] netlink: 'syz.0.1944': attribute type 3 has an invalid length.
[  341.440379][T12907] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.1944'.
[  341.446862][T12907] netlink: 'syz.0.1944': attribute type 3 has an invalid length.
[  341.450239][T12907] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.1944'.
[  341.459239][T12907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1944'.
[  342.461346][T12923] netlink: 'syz.0.1949': attribute type 10 has an invalid length.
[  342.465519][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1949'.
[  343.743529][T12923] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  343.747659][T12923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.098729][T12951] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.1957'.
[  344.596999][T12976] syzkaller0: entered promiscuous mode
[  344.599861][T12976] syzkaller0: entered allmulticast mode
[  344.752024][T12978] Dead loop on virtual device *O, fix it urgently!
[  344.756313][T12978] netlink: 'syz.0.1964': attribute type 1 has an invalid length.
[  345.506472][T13004] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  345.664450][T13007] netlink: 'syz.3.1972': attribute type 16 has an invalid length.
[  345.773283][T13012] netlink: 'syz.3.1974': attribute type 6 has an invalid length.
[  345.776532][T13012] netlink: 'syz.3.1974': attribute type 1 has an invalid length.
[  346.087250][T13020] syzkaller0: refused to change device tx_queue_len
[  346.167708][T13022] __nla_validate_parse: 5 callbacks suppressed
[  346.167721][T13022] netlink: 1053 bytes leftover after parsing attributes in process `syz.3.1977'.
[  346.526117][T13031] netlink: 'syz.3.1979': attribute type 21 has an invalid length.
[  346.542744][T13031] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1979'.
[  346.570141][T13031] syzkaller0: entered promiscuous mode
[  346.588369][T13031] syzkaller0: entered allmulticast mode
[  347.055959][T13059] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1985'.
[  347.059808][T13059] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1985'.
[  347.469949][   T55] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  347.473667][   T55] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  347.477499][   T55] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  347.480368][   T55] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x65
[  347.744851][   T55] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  348.282121][T13081] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1993'.
[  348.367961][T13085] netlink: 825 bytes leftover after parsing attributes in process `syz.3.1995'.
[  348.371361][T13085] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.1995'.
[  348.414090][T13087] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1996'.
[  348.431242][T13090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1997'.
[  348.440817][T13090] netlink: 'syz.3.1997': attribute type 41 has an invalid length.
[  348.444729][T13090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'.
[  348.780126][T13098] pim6reg0: tun_chr_ioctl cmd 1074025681
[  349.684163][T13133] lo speed is unknown, defaulting to 1000
[  349.988319][T13112] delete_channel: no stack
[  350.137959][T13146] netlink: 'syz.1.2015': attribute type 4 has an invalid length.
[  350.954820][T13164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  351.893445][T13195] netlink: 'syz.0.2029': attribute type 64 has an invalid length.
[  352.180757][T13207] netlink: 'syz.1.2035': attribute type 10 has an invalid length.
[  352.184756][T13207] __nla_validate_parse: 3 callbacks suppressed
[  352.184767][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2035'.
[  352.247953][T13207] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  352.599481][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'.
[  352.823514][T13227] netlink: 'syz.3.2039': attribute type 10 has an invalid length.
[  353.218284][T13234] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2042'.
[  353.525773][T13247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.698192][T13252] IPv6: NLM_F_REPLACE set, but no existing node found!
[  353.714127][T13256] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2047'.
[  353.729950][T13250] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2047'.
[  353.900157][T13250] netlink: 'syz.1.2047': attribute type 10 has an invalid length.
[  354.028114][T13250] veth1_macvtap (unregistering): left allmulticast mode
[  354.587135][T13276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.055106][T13291] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2058'.
[  355.058764][T13291] netlink: zone id is out of range
[  355.060862][T13291] netlink: zone id is out of range
[  355.063432][T13291] netlink: zone id is out of range
[  355.065443][T13291] netlink: zone id is out of range
[  355.067377][T13291] netlink: zone id is out of range
[  355.069490][T13291] netlink: zone id is out of range
[  355.590671][T13306] netlink: 'syz.1.2062': attribute type 39 has an invalid length.
[  356.657308][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2073'.
[  356.665180][T13344] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2073'.
[  356.888826][T13348] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2074'.
[  357.530375][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'.
[  357.590069][T13366] netlink: 825 bytes leftover after parsing attributes in process `syz.3.2079'.
[  357.595101][T13366] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.2079'.
[  357.746509][T13373] netlink: 'syz.1.2081': attribute type 9 has an invalid length.
[  357.750023][T13373] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2081'.
[  358.066055][T13394] netlink: 'syz.0.2087': attribute type 1 has an invalid length.
[  358.335431][T13399] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2088'.
[  358.402238][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'.
[  358.427345][T13402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'.
[  358.636119][T13408] netlink: 'syz.1.2091': attribute type 10 has an invalid length.
[  358.645187][T13406] netlink: 'syz.3.2090': attribute type 6 has an invalid length.
[  358.648173][T13408] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2091'.
[  358.670862][T13406] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2090'.
[  358.807520][T13412] netlink: 'syz.1.2092': attribute type 11 has an invalid length.
[  358.811335][T13412] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2092'.
[  359.818519][T13449] syzkaller0: entered promiscuous mode
[  359.821145][T13449] syzkaller0: entered allmulticast mode
[  359.880531][T13451] netlink: 'syz.3.2102': attribute type 29 has an invalid length.
[  361.243661][T13451] netlink: 'syz.3.2102': attribute type 29 has an invalid length.
[  361.249424][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  361.255191][T13458] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.259991][T13458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.264982][T13458] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.559248][T13462] netlink: 'syz.0.2104': attribute type 4 has an invalid length.
[  362.203261][T13485] lo speed is unknown, defaulting to 1000
[  362.679955][   T55] Bluetooth: hci0: ISO packet for unknown connection handle 2574
[  362.759323][T13505] __nla_validate_parse: 4 callbacks suppressed
[  362.759339][T13505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2115'.
[  362.775643][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'.
[  362.920368][T13504] netlink: 'syz.1.2116': attribute type 23 has an invalid length.
[  362.922382][T13506] netlink: 'syz.1.2116': attribute type 23 has an invalid length.
[  363.067094][T13513] netlink: 'syz.0.2118': attribute type 10 has an invalid length.
[  363.078795][T13513] lo: entered promiscuous mode
[  363.098261][T13513] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  363.268703][T13527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2123'.
[  363.366073][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2124'.
[  363.371937][T13532] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2124'.
[  364.401969][T13550] IPv6: NLM_F_REPLACE set, but no existing node found!
[  365.573946][T13563] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2133'.
[  365.929346][T13568] netlink: 'syz.3.2135': attribute type 13 has an invalid length.
[  366.041596][T13572] netlink: 'syz.3.2136': attribute type 2 has an invalid length.
[  366.045517][T13572] netlink: 12374 bytes leftover after parsing attributes in process `syz.3.2136'.
[  366.054345][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2136'.
[  367.224355][T13588] netlink: 'syz.1.2140': attribute type 2 has an invalid length.
[  367.233705][T13588] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2140'.
[  367.249530][T13588] net_ratelimit: 77 callbacks suppressed
[  367.249548][T13588] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  367.260911][T13587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2141'.
[  368.213051][   T24] page_pool_release_retry() stalled pool shutdown: id 71, 1 inflight 60 sec
[  370.295483][T13599] __nla_validate_parse: 5 callbacks suppressed
[  370.295508][T13599] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2142'.
[  370.389570][T13603] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2145'.
[  370.530827][T13608] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2146'.
[  371.565699][T13636] lo speed is unknown, defaulting to 1000
[  371.611140][T13642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2152'.
[  371.628161][T13642] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2152'.
[  371.803225][T13655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2156'.
[  371.811370][T13655] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2156'.
[  372.100088][T13665] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2158'.
[  375.782447][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'.
[  375.790369][T13682] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.2162'.
[  376.488594][T13709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2171'.
[  376.499130][T13710] netlink: 'syz.1.2172': attribute type 12 has an invalid length.
[  376.505308][T13710] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2172'.
[  376.509346][T13709] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2171'.
[  376.521938][T13709] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2171'.
[  376.642342][T13716] netlink: 'syz.1.2173': attribute type 10 has an invalid length.
[  376.648171][T13716] geneve0: entered promiscuous mode
[  376.659288][T13716] geneve0: entered allmulticast mode
[  376.662292][T13716] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  376.707471][T13720] netlink: 'syz.0.2175': attribute type 3 has an invalid length.
[  376.710839][T13720] netlink: 'syz.0.2175': attribute type 1 has an invalid length.
[  376.715312][T13720] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2175'.
[  377.387837][T13744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2181'.
[  377.398840][T13744] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2181'.
[  377.423701][T13744] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2181'.
[  378.465652][T13776] netlink: 'syz.1.2188': attribute type 39 has an invalid length.
[  378.898057][T13794] netlink: 'syz.0.2193': attribute type 2 has an invalid length.
[  379.534498][   T55] Bluetooth: hci2: ISO packet for unknown connection handle 52
[  379.752697][T13818] netlink: 'syz.1.2200': attribute type 4 has an invalid length.
[  379.758098][T13818] netlink: 'syz.1.2200': attribute type 11 has an invalid length.
[  379.785283][T13822] netlink: 'syz.3.2201': attribute type 11 has an invalid length.
[  379.946372][T13834] nft_compat: unsupported protocol 1
[  379.962151][T13832] netlink: 'syz.0.2204': attribute type 8 has an invalid length.
[  380.007547][   T55] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  380.007572][   T55] Bluetooth: unknown link type 8
[  380.014506][   T55] Bluetooth: hci0: connection err: -111
[  381.329543][T13863] lo speed is unknown, defaulting to 1000
[  381.401061][T13863] __nla_validate_parse: 12 callbacks suppressed
[  381.401074][T13863] netlink: 183676 bytes leftover after parsing attributes in process `syz.3.2214'.
[  381.618235][T13880] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2218'.
[  381.622369][T13881] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2218'.
[  381.999373][T13884] Dead loop on virtual device *O, fix it urgently!
[  383.239589][T13880] @: renamed from bond_slave_0 (while UP)
[  383.416610][T13905] netlink: 'syz.1.2223': attribute type 11 has an invalid length.
[  383.420602][T13905] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2223'.
[  383.468620][T13904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.489829][T13907] validate_nla: 2 callbacks suppressed
[  383.489847][T13907] netlink: 'syz.3.2224': attribute type 2 has an invalid length.
[  383.497036][T13907] netlink: 'syz.3.2224': attribute type 1 has an invalid length.
[  383.501486][T13907] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2224'.
[  383.509650][T13907] nbd: must specify at least one socket
[  384.616793][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  384.619836][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  384.867723][T13917] netlink: 'syz.3.2227': attribute type 2 has an invalid length.
[  384.871681][T13917] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2227'.
[  384.876729][T13917] nbd: must specify at least one socket
[  384.879479][T13919] netlink: 'syz.1.2228': attribute type 3 has an invalid length.
[  384.882575][T13919] netlink: 199752 bytes leftover after parsing attributes in process `syz.1.2228'.
[  385.156839][T13934] netlink: 'syz.1.2232': attribute type 23 has an invalid length.
[  385.238679][T13938] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2233'.
[  385.273579][T13938] bridge0: port 3(dummy0) entered disabled state
[  385.543346][T13938] dummy0 (unregistering): left allmulticast mode
[  385.546592][T13938] bridge0: port 3(dummy0) entered disabled state
[  385.681918][T13943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2234'.
[  385.705224][T13943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2234'.
[  385.940795][T13953] syzkaller0: entered promiscuous mode
[  385.943296][T13953] syzkaller0: entered allmulticast mode
[  386.162755][T13958] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  386.170526][T13958] openvswitch: netlink: Key type 256 is out of range max 32
[  386.257616][T13962] netlink: 'syz.3.2238': attribute type 3 has an invalid length.
[  386.541415][T13972] netlink: 'syz.3.2243': attribute type 21 has an invalid length.
[  386.555560][T13972] IPv6: NLM_F_CREATE should be specified when creating new route
[  386.564142][T13972] IPv6: Can't replace route, no match found
[  386.720290][T13976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.730574][T13976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.736380][T13976] batman_adv: batadv0: Removing interface: team0
[  386.764097][T13976] bond0: (slave batadv0): Releasing backup interface
[  387.436363][T14000] __nla_validate_parse: 2 callbacks suppressed
[  387.436380][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'.
[  387.449299][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'.
[  387.464296][T13998] netlink: 'syz.0.2248': attribute type 9 has an invalid length.
[  387.467980][T13998] netlink: 'syz.0.2248': attribute type 8 has an invalid length.
[  387.471629][T13998] netlink: 143452 bytes leftover after parsing attributes in process `syz.0.2248'.
[  387.611758][T14009] netlink: 'syz.1.2253': attribute type 21 has an invalid length.
[  387.763847][T14023] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2257'.
[  388.617642][T14044] can: request_module (can-proto-0) failed.
[  388.704160][T14041] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2263'.
[  388.708162][T14041] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  388.937491][T14056] bond0: left allmulticast mode
[  388.946771][T14055] netlink: 'syz.3.2266': attribute type 64 has an invalid length.
[  388.969705][T14056] @: left allmulticast mode
[  388.972076][T14056] 0: left allmulticast mode
[  388.992928][T14056] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  389.004986][T14056] geneve0: left allmulticast mode
[  389.010268][T14056] bridge0: port 3(bond0) entered disabled state
[  389.028629][T14056] bridge_slave_1: left allmulticast mode
[  389.030935][T14056] bridge_slave_1: left promiscuous mode
[  389.038083][T14056] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.066559][T14056] bridge_slave_0: left promiscuous mode
[  389.090373][T14056] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.414836][T14062] netlink: 'syz.1.2268': attribute type 1 has an invalid length.
[  389.418317][T14062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.510819][T14064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2270'.
[  389.518847][T14064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2270'.
[  389.524371][T14064] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2270'.
[  389.585792][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'.
[  389.637697][T14068] netlink: 'syz.3.2272': attribute type 39 has an invalid length.
[  389.721391][T14070] delete_channel: no stack
[  389.724633][T14070] delete_channel: no stack
[  389.780364][T14072] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2271'.
[  390.226887][T14076] bpf: Bad value for 'gid'
[  390.372405][T14079] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  390.428821][T14084] lo speed is unknown, defaulting to 1000
[  391.516182][T14120] openvswitch: netlink: Flow key attr not present in new flow.
[  393.240128][T14155] __nla_validate_parse: 3 callbacks suppressed
[  393.240141][T14155] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2296'.
[  393.287791][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'.
[  393.479400][T14163] netlink: 'syz.0.2299': attribute type 10 has an invalid length.
[  393.494565][T14163] team0: Port device wlan1 removed
[  393.501698][T14163] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  393.998376][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'.
[  394.200437][T14182] can: request_module (can-proto-0) failed.
[  394.498360][T14192] netlink: 'syz.1.2307': attribute type 10 has an invalid length.
[  394.505727][T14192] 8021q: adding VLAN 0 to HW filter on device team0
[  394.510101][T14192] team0: entered promiscuous mode
[  394.512625][T14192] C: entered promiscuous mode
[  394.516216][T14192] team_slave_1: entered promiscuous mode
[  394.518595][T14192] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  394.522437][T14192] bond0: (slave team0): Enslaving as an active interface with an up link
[  394.539632][T14192] netdevsim netdevsim1 : renamed from netdevsim0
[  394.815195][T14189] delete_channel: no stack
[  394.883682][T14200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2312'.
[  394.898353][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'.
[  394.903347][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2312'.
[  394.958629][T14208] netlink: 'syz.3.2316': attribute type 21 has an invalid length.
[  395.006737][T14208] syzkaller0: entered promiscuous mode
[  395.009085][T14208] syzkaller0: entered allmulticast mode
[  396.004106][T14221] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  396.704979][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'.
[  396.708390][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'.
[  397.091260][   T55] Bluetooth: hci0: Malformed LE Event: 0x0b
[  397.895805][T14247] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2328'.
[  398.479561][T14257] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2331'.
[  398.516263][T14259] netlink: 'syz.3.2332': attribute type 1 has an invalid length.
[  398.520231][T14260] netlink: 'syz.3.2332': attribute type 1 has an invalid length.
[  398.606669][T14266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2335'.
[  398.625366][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2334'.
[  398.885097][T14277] netlink: 'syz.0.2338': attribute type 5 has an invalid length.
[  399.042414][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  399.310707][T14300] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2345'.
[  399.330799][T14302] netlink: 'syz.1.2346': attribute type 1 has an invalid length.
[  400.147739][T14320] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2351'.
[  400.358970][T14322] netlink: 'syz.3.2352': attribute type 39 has an invalid length.
[  400.504093][T14340] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2355'.
[  400.507485][T14340] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2355'.
[  400.591604][T14345] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2358'.
[  401.501008][T14357] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.2361'.
[  401.558337][T14362] netlink: 'syz.3.2361': attribute type 1 has an invalid length.
[  401.562309][T14362] netlink: 'syz.3.2361': attribute type 2 has an invalid length.
[  401.568011][T14362] netlink: 'syz.3.2361': attribute type 2 has an invalid length.
[  402.271267][T14384] netlink: 'syz.3.2369': attribute type 21 has an invalid length.
[  402.374163][   T55] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  402.449873][T14394] netlink: 'syz.3.2372': attribute type 10 has an invalid length.
[  402.781084][T14407] raw_sendmsg: syz.3.2377 forgot to set AF_INET. Fix it!
[  403.451417][T14455] syzkaller0: entered promiscuous mode
[  403.453882][T14455] syzkaller0: entered allmulticast mode
[  403.559774][T14462] siw: device registration error -23
[  403.799702][T14470] Dead loop on virtual device *O, fix it urgently!
[  404.454007][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  404.843994][T14464] netlink: 'syz.1.2392': attribute type 29 has an invalid length.
[  404.916691][T14480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.968559][T14485] netlink: 'syz.0.2397': attribute type 6 has an invalid length.
[  404.972299][T14485] __nla_validate_parse: 12 callbacks suppressed
[  404.972310][T14485] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2397'.
[  405.053198][ T5237] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  405.282545][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'.
[  405.632487][T14494] syzkaller0: entered promiscuous mode
[  405.635860][T14494] syzkaller0: entered allmulticast mode
[  405.804571][T14509] netlink: 'syz.3.2403': attribute type 7 has an invalid length.
[  407.009749][T14529] netlink: 'syz.0.2411': attribute type 5 has an invalid length.
[  407.012710][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  407.357608][T14539] syzkaller0: entered promiscuous mode
[  407.360157][T14539] syzkaller0: entered allmulticast mode
[  407.523390][T14548] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.2415'.
[  407.528158][T14548] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.2415'.
[  407.532705][T14548] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.2415'.
[  407.545968][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'.
[  407.941725][T14556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2420'.
[  408.129699][T14573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2422'.
[  408.133851][T14569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2422'.
[  408.879503][T14589] netlink: 'syz.1.2429': attribute type 10 has an invalid length.
[  408.882656][T14589] dummy0: entered promiscuous mode
[  409.059143][T14601] netlink: 'syz.1.2432': attribute type 29 has an invalid length.
[  409.076247][T14601] : entered promiscuous mode
[  409.807455][T14616] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[  410.293600][T14636] netlink: 'syz.1.2443': attribute type 21 has an invalid length.
[  410.298110][T14636] netlink: 'syz.1.2443': attribute type 6 has an invalid length.
[  410.301191][T14636] __nla_validate_parse: 3 callbacks suppressed
[  410.301200][T14636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2443'.
[  410.310264][T14640] netlink: 'syz.3.2444': attribute type 2 has an invalid length.
[  410.316347][T14640] netlink: 'syz.3.2444': attribute type 1 has an invalid length.
[  410.349954][T14644] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2446'.
[  410.356874][T14645] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2446'.
[  410.461257][T14653] netlink: 4091 bytes leftover after parsing attributes in process `syz.3.2448'.
[  410.468942][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'.
[  410.512479][T14656] netlink: 'syz.3.2449': attribute type 39 has an invalid length.
[  410.722857][T14663] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2452'.
[  410.866317][T14663] netlink: 'syz.1.2452': attribute type 21 has an invalid length.
[  410.870709][T14663] netlink: 'syz.1.2452': attribute type 6 has an invalid length.
[  410.876263][T14663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2452'.
[  411.244479][T14680] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.2454'.
[  411.249106][T14679] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.2454'.
[  411.435612][T14693] netlink: 'syz.0.2457': attribute type 10 has an invalid length.
[  411.652009][T14701] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2460'.
[  411.901942][T14709] ref_ctr_offset mismatch. inode: 0x112a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  412.117988][ T5237] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  412.118022][ T5237] Bluetooth: hci0: connection err: -111
[  412.398823][T14723] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[  412.404748][T14723] lo: left promiscuous mode
[  412.411668][T14723] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  412.417852][T14723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  412.544958][T14731] netlink: 'syz.1.2469': attribute type 39 has an invalid length.
[  412.593078][T14733] netlink: 'syz.3.2468': attribute type 10 has an invalid length.
[  412.596078][T14733] team0: entered promiscuous mode
[  412.598013][T14733] C: entered promiscuous mode
[  412.749519][T14733] team_slave_1: entered promiscuous mode
[  413.425762][T14733] bond0: (slave team0): Releasing backup interface
[  413.432710][T14733] bridge0: port 4(team0) entered blocking state
[  413.435936][T14733] bridge0: port 4(team0) entered disabled state
[  413.438456][T14733] team0: entered allmulticast mode
[  413.440549][T14733] C: entered allmulticast mode
[  413.442390][T14733] team_slave_1: entered allmulticast mode
[  413.568139][T14746] rdma_rxe: rxe_newlink: failed to add vcan0
[  413.571367][T14746] netlink: 'syz.1.2473': attribute type 29 has an invalid length.
[  413.575037][T14746] netlink: 'syz.1.2473': attribute type 29 has an invalid length.
[  413.586487][T14748] netlink: zone id is out of range
[  413.590395][T14748] netlink: zone id is out of range
[  413.593906][T14748] netlink: zone id is out of range
[  413.596121][T14748] netlink: zone id is out of range
[  413.598440][T14748] netlink: zone id is out of range
[  413.601055][T14748] netlink: zone id is out of range
[  413.602476][T14749] netlink: 'syz.0.2471': attribute type 21 has an invalid length.
[  413.607118][T14748] netlink: zone id is out of range
[  413.611011][T14748] netlink: zone id is out of range
[  413.620431][T14748] netlink: zone id is out of range
[  413.760362][T14759] lo: entered promiscuous mode
[  413.767621][   T48] lo speed is unknown, defaulting to 1000
[  413.771106][   T48] syz2: Port: 1 Link ACTIVE
[  414.108202][T14770] syzkaller0: entered promiscuous mode
[  414.112234][T14770] syzkaller0: entered allmulticast mode
[  414.750809][T14795] netlink: 'syz.1.2491': attribute type 6 has an invalid length.
[  414.877350][T14813] syzkaller1: tun_chr_ioctl cmd 1074025676
[  414.879811][T14813] syzkaller1: owner set to 778
[  414.884169][T14813] syzkaller1: tun_chr_ioctl cmd 1074025694
[  414.939298][T14821] nft_compat: unsupported protocol 5
[  415.356291][T14839] __nla_validate_parse: 12 callbacks suppressed
[  415.356306][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2500'.
[  416.273670][T14861] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2506'.
[  416.558666][T14874] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  416.562705][T14874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  417.114628][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'.
[  417.121380][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'.
[  417.175625][T14888] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2511'.
[  417.427327][T14904] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2516'.
[  417.582482][T14919] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2517'.
[  418.341394][T14929] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2524'.
[  418.629982][T14946] validate_nla: 2 callbacks suppressed
[  418.630002][T14946] netlink: 'syz.0.2530': attribute type 1 has an invalid length.
[  418.636387][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2530'.
[  418.821610][T14954] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2532'.
[  419.739250][T14970] netlink: 'syz.1.2538': attribute type 10 has an invalid length.
[  419.958993][T14979] netlink: 'syz.3.2541': attribute type 29 has an invalid length.
[  419.972978][T14985] netlink: 'syz.0.2544': attribute type 4 has an invalid length.
[  419.977152][T14979] netlink: 'syz.3.2541': attribute type 29 has an invalid length.
[  419.994992][T14979] netlink: 'syz.3.2541': attribute type 29 has an invalid length.
[  420.096110][T14987] netlink: 'syz.0.2545': attribute type 4 has an invalid length.
[  420.239379][T15002] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  420.253511][T15002] netlink: 'syz.3.2549': attribute type 10 has an invalid length.
[  420.622383][T15010] openvswitch: netlink: Actions may not be safe on all matching packets
[  421.481937][T15037] netlink: 'syz.3.2557': attribute type 11 has an invalid length.
[  421.499892][T15030] netlink: 'syz.3.2557': attribute type 5 has an invalid length.
[  421.612010][T15041] __nla_validate_parse: 3 callbacks suppressed
[  421.612063][T15041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'.
[  421.957521][T15056] : renamed from gre0 (while UP)
[  422.445879][T15062] IPv6: NLM_F_CREATE should be specified when creating new route
[  423.252181][T15085] sit0: left promiscuous mode
[  423.481978][T15081] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2571'.
[  424.018127][T15085] sit0: entered promiscuous mode
[  424.298746][T15098] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2575'.
[  424.444262][T15114] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2579'.
[  424.447886][T15114] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  424.451845][T15114] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  425.502756][T15145] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2587'.
[  425.614406][T15154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  425.817144][T15157] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2589'.
[  425.873448][T15158] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2589'.
[  426.251252][T15168] validate_nla: 2 callbacks suppressed
[  426.251265][T15168] netlink: 'syz.3.2592': attribute type 21 has an invalid length.
[  426.260404][T15168] netlink: 'syz.3.2592': attribute type 6 has an invalid length.
[  426.265206][T15168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2592'.
[  426.281491][T15168] openvswitch: netlink: Flow actions attr not present in new flow.
[  426.287435][T15168] syzkaller0: entered promiscuous mode
[  426.296131][T15169] netlink: 'syz.3.2592': attribute type 21 has an invalid length.
[  426.301228][T15169] netlink: 'syz.3.2592': attribute type 6 has an invalid length.
[  426.304872][T15169] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2592'.
[  426.514324][T15175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2594'.
[  426.518764][T15175] netlink: 'syz.3.2594': attribute type 23 has an invalid length.
[  426.865663][T15181] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2595'.
[  426.986264][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'.
[  426.990901][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2596'.
[  427.020023][T15183] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  427.025726][T15184] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  427.113476][T15188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2597'.
[  427.465068][T15190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2598'.
[  427.477074][T15192] netlink: 'syz.0.2599': attribute type 21 has an invalid length.
[  427.481086][T15192] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2599'.
[  427.484173][T15190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2598'.
[  427.497534][T15192] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2599'.
[  427.529066][T15190] netlink: 'syz.3.2598': attribute type 10 has an invalid length.
[  427.568985][T15190] bond0: entered promiscuous mode
[  427.571515][T15190] @: entered promiscuous mode
[  427.578146][T15190] bond_slave_1: entered promiscuous mode
[  427.582563][T15190] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  427.942541][T15206] sit0: entered allmulticast mode
[  428.937207][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2609'.
[  428.941421][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2609'.
[  429.200930][T15234] syzkaller0: entered promiscuous mode
[  429.203408][T15234] syzkaller0: entered allmulticast mode
[  429.556244][T15240] netlink: 'syz.3.2612': attribute type 19 has an invalid length.
[  432.451000][T15271] __nla_validate_parse: 4 callbacks suppressed
[  432.451051][T15271] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2618'.
[  432.695760][T15277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2619'.
[  432.701839][T15274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2619'.
[  432.709919][T15277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2619'.
[  432.841826][T15274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.640127][T15289] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2623'.
[  433.724787][T15289] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2623'.
[  433.887158][T15297] netlink: 'syz.1.2626': attribute type 29 has an invalid length.
[  433.897509][T15297] netlink: 'syz.1.2626': attribute type 29 has an invalid length.
[  433.927846][T15297] netlink: 'syz.1.2626': attribute type 29 has an invalid length.
[  434.315661][T15322] netlink: 'syz.1.2630': attribute type 1 has an invalid length.
[  434.561151][T15330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2635'.
[  434.673053][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'.
[  434.778961][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'.
[  435.083459][T15340] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2638'.
[  436.412590][T15381] sit0: left promiscuous mode
[  436.434550][T15381] sit0: entered promiscuous mode
[  436.807846][T15397] netlink: 'syz.1.2655': attribute type 10 has an invalid length.
[  436.911086][T15412] netlink: 'syz.3.2659': attribute type 4 has an invalid length.
[  436.911089][T15413] netlink: 'syz.3.2659': attribute type 4 has an invalid length.
[  437.218769][T15422] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  437.226342][T15421] delete_channel: no stack
[  437.228316][T15421] delete_channel: no stack
[  437.503645][T15443] __nla_validate_parse: 2 callbacks suppressed
[  437.503664][T15443] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2666'.
[  437.711649][T15449] netlink: 'syz.3.2669': attribute type 3 has an invalid length.
[  437.715237][T15449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2669'.
[  439.324834][T15451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.432086][T15474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2677'.
[  439.460573][T15477] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2676'.
[  439.877357][T15482] syzkaller0: tun_chr_ioctl cmd 1074025677
[  439.881458][T15482] syzkaller0: Linktype set failed because interface is up
[  439.886151][T15488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2677'.
[  439.891307][ T5884] syzkaller0: tun_net_xmit 76
[  439.896388][ T5884] syzkaller0: tun_net_xmit 48
[  439.913074][ T5919] syzkaller0: tun_net_xmit 76
[  440.481474][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'.
[  441.139984][T15499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'.
[  441.149271][T15500] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'.
[  441.160407][T15501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2682'.
[  441.446193][T15504] netlink: 'syz.1.2683': attribute type 3 has an invalid length.
[  441.450840][T15504] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2683'.
[  441.460411][T15504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  441.474010][ T5237] Bluetooth: hci2: ISO packet too small
[  441.526701][T15520] netlink: 'syz.3.2687': attribute type 4 has an invalid length.
[  441.530673][T15520] netlink: 'syz.3.2687': attribute type 4 has an invalid length.
[  442.597793][T15563] __nla_validate_parse: 6 callbacks suppressed
[  442.597916][T15563] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2700'.
[  442.735081][ T5237] Bluetooth: hci2: unexpected event for opcode 0x0013
[  442.803137][T15570] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2701'.
[  442.936880][T15579] netlink: 'syz.3.2704': attribute type 10 has an invalid length.
[  442.939968][T15579] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2704'.
[  442.947437][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2704'.
[  443.049680][T15584] netlink: 'syz.3.2706': attribute type 10 has an invalid length.
[  443.052778][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2706'.
[  443.140649][T15591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'.
[  443.145784][T15591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'.
[  443.158061][T15591] netlink: 'syz.3.2708': attribute type 23 has an invalid length.
[  443.710662][T15598] netlink: 'syz.1.2712': attribute type 10 has an invalid length.
[  443.714550][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2712'.
[  443.721313][T15598] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  443.731638][T15598] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2712'.
[  443.743240][T15601] netlink: 'syz.0.2711': attribute type 39 has an invalid length.
[  443.747734][T15604] netlink: 'syz.0.2711': attribute type 39 has an invalid length.
[  443.900883][T15613] netlink: 'syz.0.2715': attribute type 9 has an invalid length.
[  443.971908][T15620] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2716'.
[  445.143969][ T5237] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  445.176218][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  445.183493][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  445.994195][T15671] bond0: left promiscuous mode
[  445.996175][T15671] @: left promiscuous mode
[  445.998213][T15671] bond_slave_1: left promiscuous mode
[  446.000601][T15671] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  446.005913][T15671] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.010926][T15671] bond0: entered promiscuous mode
[  446.013532][T15671] @: entered promiscuous mode
[  446.015925][T15671] bond_slave_1: entered promiscuous mode
[  446.018180][T15671] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  446.021036][T15671] bond0: entered allmulticast mode
[  446.023469][T15671] @: entered allmulticast mode
[  446.025490][T15671] bond_slave_1: entered allmulticast mode
[  446.027819][T15671] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  446.031396][T15671] team0: Port device bond0 added
[  446.774583][ T5237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  446.777902][ T5237] Bluetooth: hci2: Injecting HCI hardware error event
[  446.781193][ T5237] Bluetooth: hci2: hardware error 0x00
[  447.173970][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  447.351199][T15703] validate_nla: 7 callbacks suppressed
[  447.351313][T15703] netlink: 'syz.1.2739': attribute type 10 has an invalid length.
[  448.062623][T15706] __nla_validate_parse: 6 callbacks suppressed
[  448.062636][T15706] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2740'.
[  448.137510][T15713] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2741'.
[  448.340711][T15717] can: request_module (can-proto-0) failed.
[  448.646380][T15736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2747'.
[  448.853043][ T5237] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  448.882165][T15742] netlink: 'syz.3.2748': attribute type 10 has an invalid length.
[  449.408186][T15757] netlink: 'syz.0.2752': attribute type 10 has an invalid length.
[  449.776214][T15764] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2755'.
[  454.232645][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2769'.
[  454.261660][T15815] netlink: 'syz.3.2768': attribute type 1 has an invalid length.
[  454.271031][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'.
[  454.276302][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'.
[  454.358737][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2771'.
[  454.362627][T15825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2771'.
[  454.368165][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2771'.
[  454.596967][T15836] netlink: 'syz.0.2775': attribute type 22 has an invalid length.
[  454.600291][T15836] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  454.603847][T15836] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2775'.
[  454.618584][T15836] netlink: 'syz.0.2775': attribute type 3 has an invalid length.
[  454.621530][T15836] netlink: 'syz.0.2775': attribute type 1 has an invalid length.
[  454.624577][T15836] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2775'.
[  455.324387][T15842] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2776'.
[  455.659523][T15866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.664150][T15867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.338780][T15875] netlink: 'syz.1.2786': attribute type 1 has an invalid length.
[  456.395297][   T33] audit: type=1107 audit(1755237688.778:3): pid=15880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ut<>4	NsH(E0ub\>YK)^uc31Cfx6M'
[  456.439275][T15887] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2787'.
[  456.470792][T15885] netlink: 'syz.1.2789': attribute type 29 has an invalid length.
[  456.479351][T15885] netlink: 'syz.1.2789': attribute type 29 has an invalid length.
[  456.496183][T15885] netlink: 'syz.1.2789': attribute type 29 has an invalid length.
[  456.561812][T15897] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  456.566546][T15891] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  457.962771][T15941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  458.025317][T15938] syzkaller0: entered promiscuous mode
[  458.027980][T15938] syzkaller0: entered allmulticast mode
[  460.731247][T15979] syzkaller0: entered promiscuous mode
[  460.733645][T15979] syzkaller0: entered allmulticast mode
[  460.738230][T15979] __nla_validate_parse: 3 callbacks suppressed
[  460.738240][T15979] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2810'.
[  461.105837][T15989] syzkaller0: entered promiscuous mode
[  461.108835][T15989] syzkaller0: entered allmulticast mode
[  461.121314][T15988] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.2812'.
[  462.487119][T16005] netlink: 5348 bytes leftover after parsing attributes in process `syz.0.2816'.
[  462.701039][T16003] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2816'.
[  462.713207][T16004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2816'.
[  463.394021][T16035] netlink: 'syz.1.2825': attribute type 1 has an invalid length.
[  463.878681][T16043] netlink: 'syz.3.2828': attribute type 2 has an invalid length.
[  463.891304][T16043] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2828'.
[  464.128070][T16054] netlink: 'syz.1.2832': attribute type 1 has an invalid length.
[  464.138983][T16054] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2832'.
[  464.156889][T16054] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2832'.
[  464.212301][T16057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2833'.
[  464.218380][T16057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2833'.
[  465.370212][T16087] netlink: 'syz.3.2840': attribute type 1 has an invalid length.
[  465.376274][T16087] netlink: 'syz.3.2840': attribute type 3 has an invalid length.
[  467.915944][T16089] __nla_validate_parse: 11 callbacks suppressed
[  467.915963][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'.
[  468.007174][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'.
[  468.011501][T16098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.166195][T16108] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2843'.
[  468.179466][T16108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2843'.
[  468.383108][T16116] netlink: 'syz.3.2848': attribute type 2 has an invalid length.
[  468.555323][T16126] netlink: 'syz.1.2851': attribute type 10 has an invalid length.
[  468.559977][T16127] netlink: 'syz.1.2851': attribute type 10 has an invalid length.
[  468.564442][T16126] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2851'.
[  468.568846][T16127] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2851'.
[  469.021844][T16154] netlink: 'syz.3.2857': attribute type 10 has an invalid length.
[  469.028861][T16154] bond0: (slave wlan1): Releasing backup interface
[  469.035055][T16154] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  469.038616][T16154] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  469.062203][T16154] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  469.066198][T16154] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  469.071846][T16154] team0: Port device wlan1 added
[  469.089947][T16157] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  469.099106][T16157] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  469.666442][T16193] netlink: 'syz.3.2868': attribute type 10 has an invalid length.
[  469.670310][T16193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2868'.
[  469.676979][T16193] lo: left promiscuous mode
[  469.682046][T16193] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  469.689265][T16193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.708599][T16195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2869'.
[  469.715081][T16195] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  470.288868][T16209] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2873'.
[  470.300844][T16209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2873'.
[  470.519827][T16224] netlink: 'syz.3.2878': attribute type 21 has an invalid length.
[  470.524007][T16224] netlink: 'syz.3.2878': attribute type 4 has an invalid length.
[  470.811549][T16234] netlink: 'syz.3.2882': attribute type 3 has an invalid length.
[  471.822055][T16258] netlink: 'syz.1.2891': attribute type 11 has an invalid length.
[  471.984659][T16267] netlink: 'syz.1.2896': attribute type 2 has an invalid length.
[  472.011983][T16267] netlink: 'syz.1.2896': attribute type 2 has an invalid length.
[  473.052972][T16295] __nla_validate_parse: 12 callbacks suppressed
[  473.053024][T16295] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2903'.
[  473.308440][T16319] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2911'.
[  473.434551][T16323] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2911'.
[  474.270420][T16336] validate_nla: 2 callbacks suppressed
[  474.270441][T16336] netlink: 'syz.0.2915': attribute type 1 has an invalid length.
[  474.277505][T16335] delete_channel: no stack
[  474.379700][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2916'.
[  474.386599][T16345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2918'.
[  474.390494][T16345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2918'.
[  474.394743][T16345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2918'.
[  474.400518][T16345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2918'.
[  474.440344][T16339] syzkaller0: entered promiscuous mode
[  474.443349][T16339] syzkaller0: entered allmulticast mode
[  474.808721][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2920'.
[  475.003946][T16358] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.2921'.
[  475.056291][T16361] netlink: 'syz.3.2922': attribute type 10 has an invalid length.
[  475.065274][T16361] bridge0: port 5() entered blocking state
[  475.068472][T16361] bridge0: port 5() entered disabled state
[  475.071097][T16361] netdevsim netdevsim3 : entered allmulticast mode
[  475.078033][T16361] netdevsim netdevsim3 : entered promiscuous mode
[  477.015384][T16405] netlink: 'syz.0.2933': attribute type 21 has an invalid length.
[  478.735438][T16452] netlink: 'syz.0.2943': attribute type 10 has an invalid length.
[  478.740050][T16452] __nla_validate_parse: 3 callbacks suppressed
[  478.740065][T16452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2943'.
[  478.748084][T16452] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  478.757991][T16452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.786767][T16454] syzkaller0: entered promiscuous mode
[  478.789964][T16454] syzkaller0: entered allmulticast mode
[  479.390274][T16500] netlink: 'syz.1.2958': attribute type 21 has an invalid length.
[  479.395419][T16500] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2958'.
[  479.424931][T16494] netlink: 'syz.0.2955': attribute type 10 has an invalid length.
[  479.429165][T16494] netlink: 'syz.0.2955': attribute type 10 has an invalid length.
[  479.438825][T16494] team0: Device hsr_slave_0 failed to register rx_handler
[  479.583158][T16511] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2960'.
[  480.052359][T16502] delete_channel: no stack
[  480.134734][T16517] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2962'.
[  480.139183][T16517] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  480.143715][T16502] delete_channel: no stack
[  480.375688][T16529] IPv6: NLM_F_CREATE should be specified when creating new route
[  480.679318][T16539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2969'.
[  480.685113][T16539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2969'.
[  482.021620][T16555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2973'.
[  482.080248][T16560] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  482.091492][T16560] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  482.111709][T16560] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  482.219494][T16566] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  482.345066][T16577] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2978'.
[  482.565785][T16588] netlink: 'syz.1.2980': attribute type 10 has an invalid length.
[  482.590732][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'.
[  482.870665][T16595] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2983'.
[  483.464566][T16609] : mtu less than device minimum
[  483.652647][T16615] can: request_module (can-proto-5) failed.
[  483.867162][T16623] __nla_validate_parse: 4 callbacks suppressed
[  483.867187][T16623] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2992'.
[  484.601741][T16628] netlink: 'syz.1.2993': attribute type 6 has an invalid length.
[  484.606148][T16628] netlink: 'syz.1.2993': attribute type 3 has an invalid length.
[  484.614327][T16628] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2993'.
[  484.747623][T16635] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2996'.
[  484.935719][T16648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3001'.
[  484.956894][T16648] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3001'.
[  484.968987][T16648] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3001'.
[  485.006666][T16652] netlink: 183676 bytes leftover after parsing attributes in process `syz.0.3000'.
[  485.013345][T16650] lo speed is unknown, defaulting to 1000
[  485.487018][T16670] netlink: 'syz.1.3006': attribute type 23 has an invalid length.
[  486.191849][T16705] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3014'.
[  486.316828][T16711] netlink: 'syz.1.3016': attribute type 10 has an invalid length.
[  486.389379][T16713] netlink: 208344 bytes leftover after parsing attributes in process `syz.3.3017'.
[  486.398325][T16713] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  486.405120][T16713] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  486.509938][T16721] netlink: 'syz.1.3019': attribute type 1 has an invalid length.
[  487.065794][T16734] sit0: left promiscuous mode
[  487.425989][T16737] sit0: entered promiscuous mode
[  488.011787][T16752] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3027'.
[  488.275246][T16770] lo speed is unknown, defaulting to 1000
[  488.932369][T16795] netlink: 'syz.1.3040': attribute type 29 has an invalid length.
[  489.043079][T16799] __nla_validate_parse: 3 callbacks suppressed
[  489.043094][T16799] netlink: 948 bytes leftover after parsing attributes in process `syz.3.3038'.
[  489.143165][T16807] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3041'.
[  489.471196][T16818] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3046'.
[  489.508256][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'.
[  489.782176][T16821] netlink: 'syz.1.3047': attribute type 21 has an invalid length.
[  489.785322][T16821] netlink: 'syz.1.3047': attribute type 6 has an invalid length.
[  489.788206][T16821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3047'.
[  490.124134][T16828] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3049'.
[  490.223667][T16836] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.3051'.
[  490.274437][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'.
[  490.449699][T16859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  490.456977][T16859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  490.460969][T16859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  490.482772][T16859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  490.487195][T16859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  490.497444][T16859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  490.581474][T16871] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3060'.
[  490.676878][T16877] wlan1 speed is unknown, defaulting to 1000
[  490.680111][T16877] wlan1 speed is unknown, defaulting to 1000
[  490.692633][T16877] wlan1 speed is unknown, defaulting to 1000
[  490.714249][T16877] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  490.748294][T16878] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3061'.
[  490.770546][T16877] wlan1 speed is unknown, defaulting to 1000
[  490.776815][T16877] wlan1 speed is unknown, defaulting to 1000
[  490.782003][T16877] wlan1 speed is unknown, defaulting to 1000
[  491.856527][T16893] netlink: 'syz.1.3067': attribute type 21 has an invalid length.
[  492.504857][T16937] netlink: 'syz.1.3079': attribute type 39 has an invalid length.
[  492.568425][T16941] IPv6: Can't replace route, no match found
[  492.799823][T16939] netlink: 'syz.3.3080': attribute type 6 has an invalid length.
[  493.269686][T16952] netlink: 'syz.0.3085': attribute type 3 has an invalid length.
[  494.169884][T16966] __nla_validate_parse: 12 callbacks suppressed
[  494.169950][T16966] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3089'.
[  494.170108][T16972] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.3091'.
[  494.170198][T16972] netlink: 4276 bytes leftover after parsing attributes in process `syz.1.3091'.
[  494.170407][T16971] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3091'.
[  494.178085][T16966] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  494.730280][T17009] syzkaller0: entered promiscuous mode
[  494.732388][T17009] syzkaller0: entered allmulticast mode
[  495.008395][T17017] lo speed is unknown, defaulting to 1000
[  495.015650][T17017] wlan1 speed is unknown, defaulting to 1000
[  495.047053][T17020] netlink: 183676 bytes leftover after parsing attributes in process `syz.1.3103'.
[  495.550941][T17048] netlink: 'syz.0.3110': attribute type 39 has an invalid length.
[  495.775614][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'.
[  495.779090][T17052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3111'.
[  495.819514][T17055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3112'.
[  495.823352][T17055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3112'.
[  495.961849][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'.
[  496.061465][T17065] netlink: 'syz.1.3115': attribute type 21 has an invalid length.
[  497.880359][T17137] netlink: 'syz.1.3134': attribute type 2 has an invalid length.
[  497.884456][T17137] netlink: 'syz.1.3134': attribute type 1 has an invalid length.
[  498.274676][T17153] unsupported nla_type 65024
[  498.596680][T17170] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  499.563550][T17187] netlink: 'syz.0.3149': attribute type 21 has an invalid length.
[  499.688092][T17192] __nla_validate_parse: 9 callbacks suppressed
[  499.688105][T17192] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3151'.
[  499.696992][T17193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3151'.
[  499.706811][ T5237] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  500.519007][T17217] netlink: 'syz.1.3159': attribute type 10 has an invalid length.
[  500.522095][T17217] netlink: 'syz.1.3159': attribute type 19 has an invalid length.
[  500.526233][T17217] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3159'.
[  500.700134][T17221] netlink: 'syz.3.3160': attribute type 3 has an invalid length.
[  501.640540][T17235] netlink: 'syz.1.3164': attribute type 1 has an invalid length.
[  501.656818][T17235] pim6reg1: entered allmulticast mode
[  501.973885][T17263] netlink: 'syz.0.3174': attribute type 10 has an invalid length.
[  501.977961][T17263] 8021q: adding VLAN 0 to HW filter on device team0
[  501.982058][T17263] bond0: (slave team0): Enslaving as an active interface with an up link
[  501.997777][T17263] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  502.167838][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'.
[  502.218884][T17270] netlink: 'syz.0.3175': attribute type 4 has an invalid length.
[  502.222163][T17270] netlink: 'syz.0.3175': attribute type 2 has an invalid length.
[  502.228934][T17270] netlink: 199288 bytes leftover after parsing attributes in process `syz.0.3175'.
[  502.235156][T17270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3175'.
[  502.239066][T17270] D`: renamed from hsr_slave_1
[  502.268752][T17272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3176'.
[  502.558898][T17280] delete_channel: no stack
[  502.702685][T17302] netlink: 'syz.0.3185': attribute type 26 has an invalid length.
[  502.766220][T17305] netlink: 'syz.0.3186': attribute type 10 has an invalid length.
[  503.599802][T17315] netlink: 'syz.3.3190': attribute type 2 has an invalid length.
[  503.674832][T17322] netlink: 'syz.1.3189': attribute type 10 has an invalid length.
[  503.677821][T17322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3189'.
[  503.681562][T17322] ipvlan1: entered promiscuous mode
[  503.684466][T17322] ipvlan1: entered allmulticast mode
[  503.686436][T17322] @: entered allmulticast mode
[  503.696299][T17322] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  504.143859][T17343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3197'.
[  504.306487][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3200'.
[  504.309917][T17352] openvswitch: netlink: Flow actions attr not present in new flow.
[  504.315113][T17354] openvswitch: netlink: Flow actions attr not present in new flow.
[  504.796531][T17367] syzkaller0: tun_chr_ioctl cmd 1074812117
[  504.833926][T17369] __nla_validate_parse: 1 callbacks suppressed
[  504.833938][T17369] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3205'.
[  504.994498][T17377] netlink: 'syz.0.3208': attribute type 10 has an invalid length.
[  504.997759][T17377] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3208'.
[  505.142008][T17394] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3212'.
[  505.404337][T17401] netdevsim netdevsim3 : left allmulticast mode
[  505.407331][T17401] netdevsim netdevsim3 : left promiscuous mode
[  505.410387][T17401] bridge0: port 5() entered disabled state
[  505.415701][T17401] team0: left allmulticast mode
[  505.417695][T17401] C: left allmulticast mode
[  505.419402][T17401] team_slave_1: left allmulticast mode
[  505.421445][T17401] bond0: left allmulticast mode
[  505.423504][T17401] @: left allmulticast mode
[  505.425655][T17401] bond_slave_1: left allmulticast mode
[  505.427679][T17401] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  505.430492][T17401] bridge0: port 4(team0) entered disabled state
[  505.435158][T17401] ip6gretap0: left allmulticast mode
[  505.437281][T17401] ip6gretap0: left promiscuous mode
[  505.439332][T17401] bridge0: port 3(ip6gretap0) entered disabled state
[  505.444013][T17401] bridge_slave_1: left allmulticast mode
[  505.446148][T17401] bridge_slave_1: left promiscuous mode
[  505.448265][T17401] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.452622][T17401] bridge_slave_0: left promiscuous mode
[  505.455612][T17401] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.059518][T17424] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3222'.
[  506.173504][T17436] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3221'.
[  506.183335][T17436] netlink: 'syz.1.3221': attribute type 21 has an invalid length.
[  506.186377][T17436] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3221'.
[  506.374331][T17440] netlink: 'syz.0.3223': attribute type 6 has an invalid length.
[  506.377337][T17440] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3223'.
[  506.669109][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  506.671476][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  509.187982][T17445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3225'.
[  509.209673][T17445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3225'.
[  509.213820][T17445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3225'.
[  512.216798][T17530] netlink: 'syz.3.3246': attribute type 39 has an invalid length.
[  512.434599][T17541] __nla_validate_parse: 66 callbacks suppressed
[  512.434613][T17541] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3250'.
[  512.609456][T17552] netlink: 'syz.1.3252': attribute type 1 has an invalid length.
[  512.948032][T17565] lo speed is unknown, defaulting to 1000
[  512.955846][T17565] wlan1 speed is unknown, defaulting to 1000
[  513.377138][T17574] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3257'.
[  513.381775][T17574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3257'.
[  513.490841][T17583] netlink: 'syz.0.3258': attribute type 33 has an invalid length.
[  513.687928][T17594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3263'.
[  513.691819][T17594] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3263'.
[  513.726173][T17594] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3263'.
[  513.950426][T17615] netlink: 'syz.0.3269': attribute type 21 has an invalid length.
[  513.954572][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'.
[  513.958867][T17615] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3269'.
[  513.964670][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3269'.
[  513.964784][T17615] netlink: 'syz.0.3269': attribute type 21 has an invalid length.
[  513.972760][T17615] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3269'.
[  515.323172][T17626] netlink: 'syz.0.3272': attribute type 39 has an invalid length.
[  515.355167][T17628] netlink: 'syz.1.3273': attribute type 10 has an invalid length.
[  515.695151][T17643] netlink: 'syz.1.3279': attribute type 5 has an invalid length.
[  516.262646][T17663] netlink: 'syz.1.3285': attribute type 10 has an invalid length.
[  516.383307][T17662] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  516.758642][T17663] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  516.762539][T17663] team0: Port device wlan1 removed
[  516.767866][T17663] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  516.770859][T17663] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  516.872487][T17671] netlink: 'syz.1.3289': attribute type 5 has an invalid length.
[  517.025099][T17687] openvswitch: netlink: Tunnel attr 72 out of range max 16
[  517.638725][T17710] netlink: 'syz.3.3298': attribute type 10 has an invalid length.
[  517.642259][T17710] __nla_validate_parse: 38 callbacks suppressed
[  517.642269][T17710] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3298'.
[  517.660299][T17710] delete_channel: no stack
[  517.790983][T17714] netlink: 'syz.0.3300': attribute type 7 has an invalid length.
[  517.807682][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3300'.
[  518.007645][T17720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.158700][T17725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3304'.
[  518.176250][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3304'.
[  518.179542][T17725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3304'.
[  518.183342][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3304'.
[  518.556361][T17742] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3309'.
[  518.566320][T17741] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3309'.
[  519.736193][T17750] netlink: 'syz.3.3310': attribute type 29 has an invalid length.
[  519.740362][T17751] netlink: 'syz.3.3310': attribute type 29 has an invalid length.
[  520.131309][ T5884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.195202][ T5884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.273572][ T5884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.351546][ T5884] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.453444][ T5884] bridge_slave_1: left allmulticast mode
[  520.455786][ T5884] bridge_slave_1: left promiscuous mode
[  520.458403][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.464521][ T5884] bridge_slave_0: left allmulticast mode
[  520.466804][ T5884] bridge_slave_0: left promiscuous mode
[  520.470123][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.477723][ T5884] vlan0: left allmulticast mode
[  520.479794][ T5884] vlan0: left promiscuous mode
[  520.481885][ T5884] : port 1(vlan0) entered disabled state
[  520.669941][ T5884] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  520.856764][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.864247][ T5884] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  520.871778][ T5884] bond0 (unregistering): (slave .3c): Releasing backup interface
[  520.877687][ T5884] bond0 (unregistering): (slave team0): Releasing backup interface
[  520.882057][ T5884] bond0 (unregistering): Released all slaves
[  521.675160][ T5884] hsr_slave_0: left promiscuous mode
[  521.678656][ T5884] D`: left promiscuous mode
[  521.689300][ T5884] veth1_vlan: left promiscuous mode
[  521.986014][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  522.014199][ T5884] team0 (unregistering): Port device C removed
SYZFAIL: repeatedly failed to execute the program
proc=4 req=3316 state=1 status=7 (errno 9: Bad file descriptor)
[  522.644990][ T5884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.737652][ T5884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.796464][ T5884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.872525][ T5884] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.277093][ T5884] bond0 (unregistering): left promiscuous mode
[  523.279459][ T5884] @: left promiscuous mode
[  523.281450][ T5884] bond_slave_1: left promiscuous mode
[  523.284613][ T5884] team0: Port device bond0 removed
[  523.288253][ T5884] bond0 (unregistering): (slave c@): Releasing backup interface
[  523.293416][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.297908][ T5884] bond0 (unregistering): Released all slaves
[  524.027099][ T5884] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode
[  524.032787][ T5884] team0: Port device wlan1 removed
[  524.317298][ T5884] team_slave_1 (unregistering): left promiscuous mode
[  524.320545][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  524.349590][ T5884] C (unregistering): left promiscuous mode
[  524.352528][ T5884] team0 (unregistering): Port device C removed
[  524.623592][ T5919] lo speed is unknown, defaulting to 1000
[  524.625774][ T5919] syz2: Port: 1 Link DOWN
[  525.090858][ T5884] ------------[ cut here ]------------
[  525.094079][ T5884] WARNING: CPU: 1 PID: 5884 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  525.098830][ T5884] Modules linked in:
[  525.100977][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  525.107419][ T5884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  525.111525][ T5884] Workqueue: netns cleanup_net
[  525.113880][ T5884] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  525.116502][ T5884] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 48 41 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 fe e1 f7 e8 a1 c4 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 93 c4 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  525.125023][ T5884] RSP: 0018:ffffc90003bdf898 EFLAGS: 00010293
[  525.127869][ T5884] RAX: ffffffff8a21e70f RBX: ffff8881284ba440 RCX: ffff88810921d640
[  525.131393][ T5884] RDX: 0000000000000000 RSI: ffffffff8dba5ff5 RDI: ffff88810921d640
[  525.134874][ T5884] RBP: ffffc90003bdf9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  525.138522][ T5884] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630ae0
[  525.141955][ T5884] R13: 1ffff9200077bf40 R14: ffff8881284bb8c0 R15: dffffc0000000000
[  525.145428][ T5884] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  525.149100][ T5884] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  525.151701][ T5884] CR2: 00007f671c6e7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  525.154778][ T5884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  525.157761][ T5884] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  525.160683][ T5884] Call Trace:
[  525.161900][ T5884]  <TASK>
[  525.163158][ T5884]  xfrm_net_exit+0x2d/0x70
[  525.164802][ T5884]  ops_undo_list+0x49a/0x990
[  525.166521][ T5884]  ? __pfx_ops_undo_list+0x10/0x10
[  525.168407][ T5884]  ? do_raw_spin_unlock+0x4d/0x240
[  525.170299][ T5884]  cleanup_net+0x4c5/0x800
[  525.171946][ T5884]  ? __pfx_cleanup_net+0x10/0x10
[  525.174083][ T5884]  ? _raw_spin_unlock_irq+0x23/0x50
[  525.176026][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  525.178107][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  525.180486][ T5884]  process_scheduled_works+0xae1/0x17b0
[  525.182744][ T5884]  ? __pfx_process_scheduled_works+0x10/0x10
[  525.185105][ T5884]  worker_thread+0x8a0/0xda0
[  525.186859][ T5884]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  525.189341][ T5884]  ? __kthread_parkme+0x7b/0x200
[  525.191230][ T5884]  kthread+0x711/0x8a0
[  525.192724][ T5884]  ? __pfx_worker_thread+0x10/0x10
[  525.194714][ T5884]  ? __pfx_kthread+0x10/0x10
[  525.196450][ T5884]  ? _raw_spin_unlock_irq+0x23/0x50
[  525.198411][ T5884]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.200314][ T5884]  ? __pfx_kthread+0x10/0x10
[  525.201982][ T5884]  ret_from_fork+0x3fc/0x770
[  525.203810][ T5884]  ? __pfx_ret_from_fork+0x10/0x10
[  525.205665][ T5884]  ? __switch_to_asm+0x39/0x70
[  525.207381][ T5884]  ? __switch_to_asm+0x33/0x70
[  525.209104][ T5884]  ? __pfx_kthread+0x10/0x10
[  525.210824][ T5884]  ret_from_fork_asm+0x1a/0x30
[  525.212622][ T5884]  </TASK>
[  525.213858][ T5884] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  525.216601][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00022-g07866544e410-dirty #0 PREEMPT(full) 
[  525.221757][ T5884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  525.226309][ T5884] Workqueue: netns cleanup_net
[  525.228434][ T5884] Call Trace:
[  525.229877][ T5884]  <TASK>
[  525.231065][ T5884]  dump_stack_lvl+0x99/0x250
[  525.233219][ T5884]  ? __asan_memcpy+0x40/0x70
[  525.235128][ T5884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  525.237001][ T5884]  ? __pfx__printk+0x10/0x10
[  525.238731][ T5884]  vpanic+0x281/0x750
[  525.240585][ T5884]  ? __pfx__printk+0x10/0x10
[  525.242548][ T5884]  ? __pfx_vpanic+0x10/0x10
[  525.244469][ T5884]  ? is_bpf_text_address+0x292/0x2b0
[  525.246708][ T5884]  panic+0xb9/0xc0
[  525.248382][ T5884]  ? __pfx_panic+0x10/0x10
[  525.250315][ T5884]  __warn+0x31b/0x4b0
[  525.251809][ T5884]  ? xfrm_state_fini+0x270/0x2f0
[  525.253655][ T5884]  ? xfrm_state_fini+0x270/0x2f0
[  525.255522][ T5884]  report_bug+0x2be/0x4f0
[  525.257192][ T5884]  ? xfrm_state_fini+0x270/0x2f0
[  525.259041][ T5884]  ? xfrm_state_fini+0x270/0x2f0
[  525.260917][ T5884]  ? xfrm_state_fini+0x272/0x2f0
[  525.262818][ T5884]  handle_bug+0x84/0x160
[  525.264424][ T5884]  exc_invalid_op+0x1a/0x50
[  525.266134][ T5884]  asm_exc_invalid_op+0x1a/0x20
[  525.267981][ T5884] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  525.270078][ T5884] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 48 41 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 26 fe e1 f7 e8 a1 c4 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 93 c4 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  525.277204][ T5884] RSP: 0018:ffffc90003bdf898 EFLAGS: 00010293
[  525.279381][ T5884] RAX: ffffffff8a21e70f RBX: ffff8881284ba440 RCX: ffff88810921d640
[  525.282543][ T5884] RDX: 0000000000000000 RSI: ffffffff8dba5ff5 RDI: ffff88810921d640
[  525.285976][ T5884] RBP: ffffc90003bdf9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  525.288866][ T5884] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630ae0
[  525.291773][ T5884] R13: 1ffff9200077bf40 R14: ffff8881284bb8c0 R15: dffffc0000000000
[  525.294771][ T5884]  ? xfrm_state_fini+0x26f/0x2f0
[  525.296587][ T5884]  ? xfrm_state_fini+0x26f/0x2f0
[  525.298416][ T5884]  xfrm_net_exit+0x2d/0x70
[  525.300151][ T5884]  ops_undo_list+0x49a/0x990
[  525.301939][ T5884]  ? __pfx_ops_undo_list+0x10/0x10
[  525.303998][ T5884]  ? do_raw_spin_unlock+0x4d/0x240
[  525.306490][ T5884]  cleanup_net+0x4c5/0x800
[  525.308718][ T5884]  ? __pfx_cleanup_net+0x10/0x10
[  525.311166][ T5884]  ? _raw_spin_unlock_irq+0x23/0x50
[  525.313299][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  525.315485][ T5884]  ? process_scheduled_works+0x9ef/0x17b0
[  525.317621][ T5884]  process_scheduled_works+0xae1/0x17b0
[  525.319719][ T5884]  ? __pfx_process_scheduled_works+0x10/0x10
[  525.321993][ T5884]  worker_thread+0x8a0/0xda0
[  525.323751][ T5884]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  525.326131][ T5884]  ? __kthread_parkme+0x7b/0x200
[  525.327988][ T5884]  kthread+0x711/0x8a0
[  525.329556][ T5884]  ? __pfx_worker_thread+0x10/0x10
[  525.331451][ T5884]  ? __pfx_kthread+0x10/0x10
[  525.333131][ T5884]  ? _raw_spin_unlock_irq+0x23/0x50
[  525.335010][ T5884]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.336922][ T5884]  ? __pfx_kthread+0x10/0x10
[  525.338667][ T5884]  ret_from_fork+0x3fc/0x770
[  525.340449][ T5884]  ? __pfx_ret_from_fork+0x10/0x10
[  525.342400][ T5884]  ? __switch_to_asm+0x39/0x70
[  525.344253][ T5884]  ? __switch_to_asm+0x33/0x70
[  525.346284][ T5884]  ? __pfx_kthread+0x10/0x10
[  525.348029][ T5884]  ret_from_fork_asm+0x1a/0x30
[  525.349856][ T5884]  </TASK>
[  525.351747][ T5884] Kernel Offset: disabled
[  525.353408][ T5884] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:02:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=00007fc62a42e101 RCX=9e0b3eb3ed5fb700 RDX=ffffffff902a7c00
RSI=ffffffff8be33360 RDI=ffffffff8be33320 RBP=dffffc0000000000 RSP=ffffc9000321ed30
R8 =0000000000000022 R9 =ffffffff8172c195 R10=ffffc9000321eeb8 R11=ffffffff81ac3890
R12=00007ffc5f86dc68 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffffffff8172c195
RIP=ffffffff819d6c4c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc62b0e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fc62a5876c3 00007fc62a5876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0806060168d20008 0001a0e000000007 XMM07=01a0d00300000000 ffffff0401a0c003
XMM08=04100001a0b0032c 8010004200000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f98 RCX=b8ad6e3ca22f1d00 RDX=ffffc900036af301
RSI=ffffffff8be33360 RDI=ffffffff8be33320 RBP=dffffc0000000000 RSP=ffffc900036af250
R8 =ffffc900036afdd0 R9 =0000000000000000 R10=ffffc900036af3f8 R11=fffff520006d5e81
R12=ffffc900036afde0 R13=ffffffff8172c195 R14=ffffffff8dbded18 R15=dffffc0000000000
RIP=ffffffff81a65dda RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff3198ec010 CR3=00000001301f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000048558 00007ff3196003c0 XMM01=0000000000000000 ffffa1bd23dcffdf
XMM02=0000000000000000 0000000000048558 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
