last executing test programs:

33.866013106s ago: executing program 2 (id=380):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef3}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='itimer_expire\x00', r6}, 0x18)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000000000000000000001e00000020000000000000000000000004e20000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82)
ioctl$TUNSETCARRIER(r4, 0x80487436, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="9930f8f7", 0x4}], 0x1}, 0x4c080)
sendmsg$inet(r0, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

32.443214132s ago: executing program 2 (id=387):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)

32.350390995s ago: executing program 2 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd70001c000000140000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x48050)

32.294366595s ago: executing program 2 (id=391):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x1, 0x0, 0x0, 0x4b2, 0x30801, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfff, 0x5}, 0x2610, 0xd8d5, 0x8, 0x8, 0xfffffffff7ffbbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

31.937322859s ago: executing program 2 (id=395):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

31.293655399s ago: executing program 2 (id=401):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004)

16.266517412s ago: executing program 32 (id=401):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004)

3.875133043s ago: executing program 3 (id=776):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x1)

3.786008067s ago: executing program 3 (id=777):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x4}, 0x0, 0x0, r3, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002d000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)

3.467245491s ago: executing program 3 (id=780):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000003900)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff7}}], 0x18}, 0x8000)

3.461020134s ago: executing program 3 (id=781):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x0)

3.369536645s ago: executing program 3 (id=782):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

3.367824007s ago: executing program 3 (id=783):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33f2ff8689b3f20e"])

444.009006ms ago: executing program 1 (id=830):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a0000ff87000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa330000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac"], 0x184}}, 0x0)

425.257583ms ago: executing program 0 (id=831):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000700000000010000000000008e01000000010000000061"], 0x0, 0x37, 0x0, 0x1}, 0x28)

330.539867ms ago: executing program 0 (id=832):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xfffffffffffffebe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27fffffe, 0x0, 0x2b, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x6e, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

330.282623ms ago: executing program 1 (id=833):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

277.185953ms ago: executing program 0 (id=834):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70d000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

212.11885ms ago: executing program 1 (id=835):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804)

211.750738ms ago: executing program 0 (id=836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

154.019509ms ago: executing program 1 (id=837):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x92}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0xfd122f3cb48753c8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

153.737066ms ago: executing program 0 (id=838):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)

74.066936ms ago: executing program 1 (id=839):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

722.328µs ago: executing program 1 (id=840):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], 0x0, 0x87, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000b40), 0x0, 0x0, 0x7d, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0x20c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e30, 0x3, 0xa, 0x20, 0x10, 0x3a, r2}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x3, 0x2e}}, @sa={0xe4, 0x6, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x8, 0x4e24, 0x3ba4, 0x1, 0x0, 0xc0, 0x16}, {@in6=@mcast2, 0x4d2, 0x6c}, @in=@loopback, {0x9e90, 0x7, 0x85f, 0x3, 0x7fffffff, 0x2, 0xa, 0x1}, {0x7, 0xf, 0x80000000, 0x8}, {0x5, 0x6, 0x80000000}, 0x70bd28, 0x3506, 0xa, 0x4, 0xd, 0x1}}, @etimer_thresh={0x8, 0xc, 0x81}]}, 0x20c}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0x20a22000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="9930", 0x2}], 0x1}, 0x4c080)
sendmsg$inet(r4, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004}, 0x4010)
r7 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0)
recvmsg(r7, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/206, 0xce}], 0x6, &(0x7f0000000700)=""/239, 0xef}, 0x40000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080))

0s ago: executing program 0 (id=841):
r0 = getpid()
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
fstat(r1, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x4, 0x0, 0x3b)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xa001}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000001ac0)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000017c0)=[{0x0}], 0x1}, 0x4040)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8251' (ED25519) to the list of known hosts.
syzkaller login: [   55.853106][ T5827] cgroup: Unknown subsys name 'net'
[   56.001002][ T5827] cgroup: Unknown subsys name 'cpuset'
[   56.005167][ T5827] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.812981][ T5827] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.660739][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.499734][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.503429][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.506858][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.510905][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.514889][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.584338][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.587726][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.592130][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.595243][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.598571][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.644296][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.647832][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.650810][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.653655][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.656116][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.844389][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   70.052510][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.055332][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.059137][ T5880] bridge_slave_0: entered allmulticast mode
[   70.062799][ T5880] bridge_slave_0: entered promiscuous mode
[   70.076011][ T5886] chnl_net:caif_netlink_parms(): no params data found
[   70.084236][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.086811][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.090727][ T5880] bridge_slave_1: entered allmulticast mode
[   70.094533][ T5880] bridge_slave_1: entered promiscuous mode
[   70.133042][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.148046][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.151726][ T5883] chnl_net:caif_netlink_parms(): no params data found
[   70.248732][ T5880] team0: Port device team_slave_0 added
[   70.264950][ T5880] team0: Port device team_slave_1 added
[   70.337674][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.341295][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.343863][ T5886] bridge_slave_0: entered allmulticast mode
[   70.346678][ T5886] bridge_slave_0: entered promiscuous mode
[   70.350971][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.353568][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.356012][ T5886] bridge_slave_1: entered allmulticast mode
[   70.362577][ T5886] bridge_slave_1: entered promiscuous mode
[   70.376969][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.379955][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.390283][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.396190][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.400551][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.402950][ T5883] bridge_slave_0: entered allmulticast mode
[   70.405687][ T5883] bridge_slave_0: entered promiscuous mode
[   70.423897][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.426474][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.436255][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.440750][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.443547][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.446562][ T5883] bridge_slave_1: entered allmulticast mode
[   70.451066][ T5883] bridge_slave_1: entered promiscuous mode
[   70.485124][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.502096][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.506996][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.514750][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.582260][ T5886] team0: Port device team_slave_0 added
[   70.590647][ T5880] hsr_slave_0: entered promiscuous mode
[   70.593959][ T5880] hsr_slave_1: entered promiscuous mode
[   70.610662][ T5886] team0: Port device team_slave_1 added
[   70.615323][ T5883] team0: Port device team_slave_0 added
[   70.653026][ T5883] team0: Port device team_slave_1 added
[   70.682242][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.684818][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.694499][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.734050][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.736664][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.748569][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.765959][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.769571][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.779789][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.796584][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.799468][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.809925][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.871551][ T5886] hsr_slave_0: entered promiscuous mode
[   70.874554][ T5886] hsr_slave_1: entered promiscuous mode
[   70.877372][ T5886] debugfs: 'hsr0' already exists in 'hsr'
[   70.880060][ T5886] Cannot create hsr debugfs directory
[   70.952126][ T5883] hsr_slave_0: entered promiscuous mode
[   70.954487][ T5883] hsr_slave_1: entered promiscuous mode
[   70.956763][ T5883] debugfs: 'hsr0' already exists in 'hsr'
[   70.959336][ T5883] Cannot create hsr debugfs directory
[   71.173397][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.189596][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.206820][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.214565][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.221324][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.225817][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.281543][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.289127][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.296734][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.312075][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.401079][ T5883] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.407283][ T5883] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.422630][ T5883] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.439702][ T5883] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.500505][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.538664][ T5882] Bluetooth: hci0: command tx timeout
[   71.540733][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   71.556212][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.561711][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.564662][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.584601][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.587445][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.618450][ T5882] Bluetooth: hci1: command tx timeout
[   71.620810][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   71.653158][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.656048][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.666515][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.669432][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.698706][ T5882] Bluetooth: hci2: command tx timeout
[   71.712146][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.753029][ T5883] 8021q: adding VLAN 0 to HW filter on device team0
[   71.784086][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.786829][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.797403][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.800253][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.931696][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.000638][ T5880] veth0_vlan: entered promiscuous mode
[   72.020876][ T5880] veth1_vlan: entered promiscuous mode
[   72.048683][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.099914][ T5880] veth0_macvtap: entered promiscuous mode
[   72.105657][ T5880] veth1_macvtap: entered promiscuous mode
[   72.122503][ T5886] veth0_vlan: entered promiscuous mode
[   72.130778][ T5886] veth1_vlan: entered promiscuous mode
[   72.157836][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.175633][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.192363][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.199366][ T5886] veth0_macvtap: entered promiscuous mode
[   72.208892][ T5886] veth1_macvtap: entered promiscuous mode
[   72.220261][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.231270][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.239564][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.253461][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.275309][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.313911][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.316579][ T5883] veth0_vlan: entered promiscuous mode
[   72.335457][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.351428][ T5883] veth1_vlan: entered promiscuous mode
[   72.367357][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.385689][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.389261][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.405063][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.409678][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.458978][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.465659][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.466871][ T5883] veth0_macvtap: entered promiscuous mode
[   72.502843][ T5883] veth1_macvtap: entered promiscuous mode
[   72.517116][   T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.520249][   T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.546589][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.589960][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.598968][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.601892][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.615920][ T5920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.620420][ T5920] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.623898][ T5920] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.627551][ T5920] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.777691][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.792805][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.844596][ T4698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.853075][ T4698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.983588][ T5882] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[   73.305154][    C1] hrtimer: interrupt took 298938 ns
[   73.483239][ T5964] netlink: 'syz.0.26': attribute type 21 has an invalid length.
[   73.619015][ T5882] Bluetooth: hci0: command tx timeout
[   73.698626][ T5882] Bluetooth: hci1: command tx timeout
[   73.778545][ T5882] Bluetooth: hci2: command tx timeout
[   75.698394][ T5882] Bluetooth: hci0: command tx timeout
[   75.780571][ T5882] Bluetooth: hci1: command tx timeout
[   75.868672][ T5882] Bluetooth: hci2: command tx timeout
[   76.709217][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.920101][ T5998] netlink: 'syz.2.42': attribute type 21 has an invalid length.
[   76.924360][ T5998] netlink: 164 bytes leftover after parsing attributes in process `syz.2.42'.
[   77.287433][ T6007] netlink: 'syz.0.46': attribute type 2 has an invalid length.
[   77.308146][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.46'.
[   77.613496][ T6013] Zero length message leads to an empty skb
[   77.692418][ T6013] syz.1.45 (6013) used obsolete PPPIOCDETACH ioctl
[   77.903378][ T6030] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.095494][ T5882] Bluetooth: hci0: command tx timeout
[   78.097928][ T5882] Bluetooth: hci1: command tx timeout
[   78.099670][   T54] Bluetooth: hci2: command tx timeout
[   78.223649][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'.
[   78.557178][ T6054] netlink: 809 bytes leftover after parsing attributes in process `syz.0.60'.
[   78.561621][ T6054] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.60'.
[   79.662376][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'.
[   80.340326][ T6107] netlink: 'syz.1.84': attribute type 3 has an invalid length.
[   80.342523][ T6107] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   80.345187][ T6107] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.84'.
[   80.508497][ T6117] netlink: 'syz.1.89': attribute type 23 has an invalid length.
[   80.869907][ T6143] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   80.961965][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.104'.
[   81.304616][ T6168] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.113'.
[   81.379950][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   81.581237][ T6185] netlink: 260 bytes leftover after parsing attributes in process `syz.2.120'.
[   81.584378][ T6185] netlink: 'syz.2.120': attribute type 1 has an invalid length.
[   81.961227][ T6207] netlink: 'syz.1.131': attribute type 4 has an invalid length.
[   82.015420][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.089070][ T6213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.134'.
[   83.564922][ T6230] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.140'.
[   84.114965][ T6244] netlink: 176 bytes leftover after parsing attributes in process `syz.2.146'.
[   84.607044][ T6256] syzkaller1: tun_chr_ioctl cmd 2147767521
[   84.969704][ T6251] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   85.030344][ T6251] blkio.reset_stats is deprecated
[   85.927301][ T6277] raw_sendmsg: syz.0.161 forgot to set AF_INET. Fix it!
[   86.227524][ T6301] netlink: 'syz.0.172': attribute type 10 has an invalid length.
[   86.236168][   T54] Bluetooth: hci2: ISO packet for unknown connection handle 0
[   86.236944][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.245976][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.253417][ T6301] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   86.274677][ T6303] Driver unsupported XDP return value 0 on prog  (id 62) dev N/A, expect packet loss!
[   86.451768][   T54] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[   86.593518][   T49] cfg80211: failed to load regulatory.db
[   87.237839][ T6318] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.179'.
[   87.287210][ T6320] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.206556][ T6336] netlink: 'syz.0.187': attribute type 10 has an invalid length.
[   88.258504][ T6339] netlink: 'syz.0.187': attribute type 11 has an invalid length.
[   88.261236][ T6336] team0: Port device wlan1 added
[   88.261454][ T6339] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.187'.
[   88.283874][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.318054][ T6336] syz.0.187 (6336) used greatest stack depth: 19792 bytes left
[   88.516564][ T6356] netlink: 10 bytes leftover after parsing attributes in process `syz.0.196'.
[   88.680002][ T6361] netlink: 'syz.1.198': attribute type 2 has an invalid length.
[   89.165866][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'.
[   89.239247][ T6389] netlink: 'syz.1.211': attribute type 4 has an invalid length.
[   89.243031][ T6389] netlink: 152 bytes leftover after parsing attributes in process `syz.1.211'.
[   89.404615][ T6389] .`: renamed from bond0 (while UP)
[   89.466097][ T6395] netlink: 'syz.2.213': attribute type 10 has an invalid length.
[   89.469670][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'.
[   90.205544][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'.
[   90.612653][ T6419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.615356][ T6419] IPv6: NLM_F_CREATE should be set when creating new route
[   90.617766][ T6419] IPv6: NLM_F_CREATE should be set when creating new route
[   92.495160][ T6464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.404311][ T6483] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   93.407612][ T6483] netlink: 'syz.2.250': attribute type 4 has an invalid length.
[   93.412531][ T6483] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.250'.
[   96.289902][ T6660] netlink: 2 bytes leftover after parsing attributes in process `syz.1.282'.
[   96.452580][ T6673] netlink: 'syz.1.288': attribute type 10 has an invalid length.
[   96.483683][ T6673] wlan1: mtu less than device minimum
[   96.485332][ T6673] .`: (slave wlan1): Error -22 calling dev_set_mtu
[   96.534603][ T6677] delete_channel: no stack
[   96.536241][ T6677] delete_channel: no stack
[   96.703485][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   96.980926][ T6699] netlink: 596 bytes leftover after parsing attributes in process `syz.1.301'.
[   97.573382][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'.
[   97.595780][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'.
[   97.924229][ T6737] netlink: 'syz.1.318': attribute type 21 has an invalid length.
[   98.817421][ T6754] netlink: 'syz.0.325': attribute type 29 has an invalid length.
[  100.202193][ T6794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.344'.
[  100.205639][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'.
[  100.214533][ T6794] netlink: 43 bytes leftover after parsing attributes in process `syz.2.344'.
[  100.218438][ T6794] netlink: 43 bytes leftover after parsing attributes in process `syz.2.344'.
[  100.800083][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'.
[  101.506484][ T6827] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.683821][ T6839] netlink: 'syz.0.365': attribute type 2 has an invalid length.
[  101.980770][ T6851] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.370'.
[  102.536608][ T6868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.378'.
[  102.989618][ T6882] netlink: del zone limit has 4 unknown bytes
[  103.107646][ T6874] netlink: zone id is out of range
[  103.387683][ T6874] netlink: zone id is out of range
[  103.390899][ T6874] netlink: zone id is out of range
[  103.637331][ T6874] netlink: set zone limit has 4 unknown bytes
[  104.065102][ T6898] =======================================================
[  104.065102][ T6898] WARNING: The mand mount option has been deprecated and
[  104.065102][ T6898]          and is ignored by this kernel. Remove the mand
[  104.065102][ T6898]          option from the mount to silence this warning.
[  104.065102][ T6898] =======================================================
[  105.134169][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'.
[  109.028768][ T6974] netlink: 'syz.1.423': attribute type 10 has an invalid length.
[  109.031965][ T6974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.423'.
[  109.035985][ T6974] ipvlan1: entered promiscuous mode
[  109.042303][ T6974] ipvlan1: entered allmulticast mode
[  109.044461][ T6974] veth0_vlan: entered allmulticast mode
[  109.049670][ T6974] bridge0: port 3(ipvlan1) entered blocking state
[  109.052539][ T6974] bridge0: port 3(ipvlan1) entered disabled state
[  109.058193][ T6974] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  109.505845][ T6992] sctp: [Deprecated]: syz.1.431 (pid 6992) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.505845][ T6992] Use struct sctp_sack_info instead
[  110.733450][ T7009] netlink: 'syz.1.440': attribute type 10 has an invalid length.
[  110.819804][ T7011] netlink: 'syz.0.441': attribute type 2 has an invalid length.
[  110.824726][ T7011] netlink: 'syz.0.441': attribute type 1 has an invalid length.
[  110.907245][ T7011] netlink: 228 bytes leftover after parsing attributes in process `syz.0.441'.
[  112.491814][ T7042] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[  112.496800][ T7042] netlink: 'syz.0.455': attribute type 2 has an invalid length.
[  112.505984][ T7042] netlink: 'syz.0.455': attribute type 7 has an invalid length.
[  112.511053][ T7042] netlink: 37 bytes leftover after parsing attributes in process `syz.0.455'.
[  112.514673][ T7042] netlink: 'syz.0.455': attribute type 1 has an invalid length.
[  112.517693][ T7042] netlink: 'syz.0.455': attribute type 2 has an invalid length.
[  112.522410][ T7042] netlink: 130076 bytes leftover after parsing attributes in process `syz.0.455'.
[  112.701708][ T7050] netlink: 'syz.0.458': attribute type 33 has an invalid length.
[  112.704640][ T7050] netlink: 152 bytes leftover after parsing attributes in process `syz.0.458'.
[  113.026115][ T7059] netlink: 156 bytes leftover after parsing attributes in process `syz.0.462'.
[  113.035437][ T7059] IPv6: NLM_F_CREATE should be specified when creating new route
[  113.038597][ T7059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.041150][ T7059] IPv6: NLM_F_CREATE should be set when creating new route
[  113.043377][ T7059] IPv6: NLM_F_CREATE should be set when creating new route
[  113.045633][ T7059] IPv6: NLM_F_CREATE should be set when creating new route
[  113.214485][ T7069] netlink: 144 bytes leftover after parsing attributes in process `syz.0.467'.
[  113.612737][ T7091] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.477'.
[  113.940406][ T7099] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  114.082923][ T7106] validate_nla: 3 callbacks suppressed
[  114.082956][ T7106] netlink: 'syz.0.484': attribute type 33 has an invalid length.
[  114.088858][ T7106] netlink: 152 bytes leftover after parsing attributes in process `syz.0.484'.
[  114.326383][ T7115] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.488'.
[  114.372906][ T7119] netlink: 'syz.0.490': attribute type 4 has an invalid length.
[  114.660881][ T7132] sit0: entered allmulticast mode
[  114.671287][ T7132] sit0: entered promiscuous mode
[  115.082294][ T7138] netlink: 'syz.0.499': attribute type 11 has an invalid length.
[  115.086279][ T7138] netlink: 168 bytes leftover after parsing attributes in process `syz.0.499'.
[  115.195574][ T7138] mac80211_hwsim hwsim3 .3c: renamed from wlan1 (while UP)
[  115.853596][ T7153] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[  116.149045][ T7163] netlink: del zone limit has 4 unknown bytes
[  116.794133][ T7203] netlink: 'syz.1.530': attribute type 21 has an invalid length.
[  116.796799][ T7203] netlink: 'syz.1.530': attribute type 20 has an invalid length.
[  117.160342][ T7211] netlink: 168 bytes leftover after parsing attributes in process `syz.1.533'.
[  117.512340][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'.
[  117.786358][ T7226] syzkaller0: entered promiscuous mode
[  117.789581][ T7226] syzkaller0: entered allmulticast mode
[  119.373742][ T7271] tmpfs: Bad value for 'mode'
[  119.462413][ T7277] netlink: 830 bytes leftover after parsing attributes in process `syz.0.561'.
[  119.587616][ T7283] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  119.590455][ T7283] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  119.631271][ T7287] netlink: 'syz.0.566': attribute type 4 has an invalid length.
[  119.682094][ T7285] netlink: 'syz.1.565': attribute type 3 has an invalid length.
[  119.684729][ T7285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.565'.
[  119.859982][ T7294] netlink: 'syz.1.569': attribute type 5 has an invalid length.
[  119.874684][ T7294] netlink: 'syz.1.569': attribute type 5 has an invalid length.
[  119.894717][ T7298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.072282][ T7305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.573'.
[  120.078407][ T7302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.573'.
[  120.090514][ T7302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.573'.
[  120.561353][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.565308][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.589226][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.593676][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.597015][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.852839][ T7315] chnl_net:caif_netlink_parms(): no params data found
[  121.438556][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.441836][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.444386][ T7315] bridge_slave_0: entered allmulticast mode
[  121.459078][ T7315] bridge_slave_0: entered promiscuous mode
[  121.462484][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.464770][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.467777][ T7315] bridge_slave_1: entered allmulticast mode
[  121.476196][ T7315] bridge_slave_1: entered promiscuous mode
[  121.513440][ T7315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.519525][ T7315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.576283][ T7315] team0: Port device team_slave_0 added
[  121.621658][ T5920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.627570][ T7336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.585'.
[  121.672375][ T7315] team0: Port device team_slave_1 added
[  121.692509][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.694688][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.702536][ T7315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.707843][ T7315] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.712532][ T7315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.724269][ T7315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.751524][ T5920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.816411][ T5920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.816432][ T7346] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[  121.827006][ T7315] hsr_slave_0: entered promiscuous mode
[  121.829766][ T7315] hsr_slave_1: entered promiscuous mode
[  121.831999][ T7315] debugfs: 'hsr0' already exists in 'hsr'
[  121.833736][ T7315] Cannot create hsr debugfs directory
[  121.836901][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.840798][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.854485][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.857492][ T7346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.861426][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.864412][ T7346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.872260][ T7346] team0: Port device bridge0 added
[  121.890361][ T7344] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  121.904415][ T7347] bridge_slave_1: left allmulticast mode
[  121.906594][ T7347] bridge_slave_1: left promiscuous mode
[  121.909042][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.913273][ T7347] bridge_slave_0: left allmulticast mode
[  121.915029][ T7347] bridge_slave_0: left promiscuous mode
[  121.916843][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.936893][ T7347] team0: Port device bridge0 removed
[  121.983048][ T5920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.071590][ T7346] syz.0.590 (7346) used greatest stack depth: 19448 bytes left
[  122.350704][ T5920] bridge_slave_1: left allmulticast mode
[  122.353358][ T5920] bridge_slave_1: left promiscuous mode
[  122.357038][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.374762][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.450892][ T7364] netlink: 'syz.1.597': attribute type 20 has an invalid length.
[  122.454231][ T7364] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.461492][ T7364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.464464][ T7364] IPv6: NLM_F_CREATE should be set when creating new route
[  122.527135][ T7367] xt_socket: unknown flags 0x20
[  122.658653][ T5236] Bluetooth: hci3: command tx timeout
[  122.770858][ T5920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.781082][ T5920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.786512][ T5920] bond0 (unregistering): Released all slaves
[  122.804740][ T7362] lo speed is unknown, defaulting to 1000
[  122.822602][ T7315] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.835986][ T7362] lo speed is unknown, defaulting to 1000
[  122.844532][ T7315] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.872633][ T7362] lo speed is unknown, defaulting to 1000
[  122.882716][ T7315] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.909723][ T7315] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  123.137030][ T7362] infiniband syz2: set active
[  123.143886][ T7362] infiniband syz2: added lo
[  123.175347][ T7362] RDS/IB: syz2: added
[  123.176939][ T7362] smc: adding ib device syz2 with port count 1
[  123.180574][ T7362] smc:    ib device syz2 port 1 has pnetid 
[  123.340913][ T5927] lo speed is unknown, defaulting to 1000
[  123.351996][ T5940] lo speed is unknown, defaulting to 1000
[  123.355255][ T7362] lo speed is unknown, defaulting to 1000
[  123.512449][ T7397] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.604'.
[  123.587100][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.626799][ T7315] 8021q: adding VLAN 0 to HW filter on device team0
[  123.699693][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.701901][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.730162][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.733478][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.821365][ T7362] lo speed is unknown, defaulting to 1000
[  124.080046][ T7315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.171264][ T7315] veth0_vlan: entered promiscuous mode
[  124.196906][ T7315] veth1_vlan: entered promiscuous mode
[  124.269765][ T7315] veth0_macvtap: entered promiscuous mode
[  124.282624][ T7315] veth1_macvtap: entered promiscuous mode
[  124.293617][ T7362] lo speed is unknown, defaulting to 1000
[  124.317486][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.348885][ T7315] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.371994][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.396739][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.404146][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.407749][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.520820][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.523788][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.560528][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.562975][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.670746][ T7362] lo speed is unknown, defaulting to 1000
[  124.739531][ T5236] Bluetooth: hci3: command tx timeout
[  124.971690][ T7450] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[  124.975284][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[  125.055470][ T5920] hsr_slave_0: left promiscuous mode
[  125.066010][ T5920] hsr_slave_1: left promiscuous mode
[  125.069045][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.071489][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.077262][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.081452][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.103851][ T5920] veth1_macvtap: left promiscuous mode
[  125.106647][ T5920] veth0_macvtap: left promiscuous mode
[  125.111149][ T5920] veth1_vlan: left promiscuous mode
[  125.113530][ T5920] veth0_vlan: left promiscuous mode
[  125.139699][ T7465] netlink: 'syz.1.622': attribute type 13 has an invalid length.
[  125.142175][ T7465] netlink: 'syz.1.622': attribute type 17 has an invalid length.
[  125.517395][ T5920] team0 (unregistering): Port device team_slave_1 removed
[  125.550646][ T5920] team0 (unregistering): Port device team_slave_0 removed
[  125.937849][ T7465] 8021q: adding VLAN 0 to HW filter on device .`
[  125.952036][ T7465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.962026][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'.
[  125.969754][ T7467] netlink: 35 bytes leftover after parsing attributes in process `syz.0.623'.
[  125.972597][ T7467] netlink: 35 bytes leftover after parsing attributes in process `syz.0.623'.
[  126.189474][ T7479] netlink: 'syz.0.629': attribute type 11 has an invalid length.
[  126.432163][ T7495] netlink: 124 bytes leftover after parsing attributes in process `syz.3.635'.
[  126.547267][ T7502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.638'.
[  126.829648][ T5236] Bluetooth: hci3: command tx timeout
[  126.890490][ T7523] netlink: 'syz.3.648': attribute type 7 has an invalid length.
[  126.893651][ T7523] netlink: 'syz.3.648': attribute type 8 has an invalid length.
[  127.203658][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.656'.
[  127.329717][ T7552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.660'.
[  127.527481][ T7575] syz.1.673 uses obsolete (PF_INET,SOCK_PACKET)
[  127.722160][ T7582] netlink: 188 bytes leftover after parsing attributes in process `syz.0.675'.
[  127.827372][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.679'.
[  128.543300][ T7638] netlink: 'syz.0.702': attribute type 5 has an invalid length.
[  128.591809][ T7638] : entered promiscuous mode
[  128.898133][ T5236] Bluetooth: hci3: command tx timeout
[  129.210364][ T7672] netlink: 'syz.1.718': attribute type 29 has an invalid length.
[  129.215531][ T7672] netlink: 'syz.1.718': attribute type 29 has an invalid length.
[  129.530669][ T7648] delete_channel: no stack
[  129.852839][ T7689] netlink: 'syz.3.724': attribute type 1 has an invalid length.
[  129.990842][ T5236] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12
[  130.073763][ T5236] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  130.175866][ T7708] __nla_validate_parse: 5 callbacks suppressed
[  130.175877][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.731'.
[  130.478641][ T7726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.738'.
[  130.901279][ T7739] netlink: 277 bytes leftover after parsing attributes in process `syz.0.744'.
[  131.922833][   T33] audit: type=1107 audit(1758557565.412:2): pid=7777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  132.029055][   T54] Bluetooth: hci1: command tx timeout
[  132.143463][ T7789] netlink: 'syz.1.763': attribute type 2 has an invalid length.
[  132.145954][ T7789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.763'.
[  132.526577][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'.
[  132.587105][ T7808] netlink: 144 bytes leftover after parsing attributes in process `syz.0.774'.
[  132.729248][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.731840][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.754028][ T7815] netlink: 'syz.3.777': attribute type 39 has an invalid length.
[  132.830231][ T7815] hsr_slave_0 (unregistering): left promiscuous mode
[  133.465972][ T7832] netlink: 92 bytes leftover after parsing attributes in process `syz.0.786'.
[  133.577191][ T7836] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.788'.
[  134.120208][ T7858] netlink: 348 bytes leftover after parsing attributes in process `syz.0.798'.
[  134.572025][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'.
[  135.507356][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'.
[  135.956207][ T7953] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  135.976199][ T7953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.165183][ T7962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'.
[  136.495085][ T7983] ==================================================================
[  136.497479][ T7983] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  136.499674][ T7983] Read of size 4 at addr ffff88803abc5bc4 by task syz.1.840/7983
[  136.503186][ T7983] 
[  136.504067][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.1.840 Not tainted syzkaller #0 PREEMPT(full) 
[  136.504085][ T7983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.504095][ T7983] Call Trace:
[  136.504102][ T7983]  <TASK>
[  136.504109][ T7983]  dump_stack_lvl+0x189/0x250
[  136.504138][ T7983]  ? __kasan_check_byte+0x12/0x40
[  136.504157][ T7983]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.504174][ T7983]  ? lock_release+0x4b/0x3e0
[  136.504196][ T7983]  ? __virt_addr_valid+0x4a5/0x5c0
[  136.504214][ T7983]  print_report+0xca/0x240
[  136.504225][ T7983]  ? xfrm_alloc_spi+0x570/0xf30
[  136.504238][ T7983]  kasan_report+0x118/0x150
[  136.504250][ T7983]  ? xfrm_alloc_spi+0x570/0xf30
[  136.504272][ T7983]  xfrm_alloc_spi+0x570/0xf30
[  136.504292][ T7983]  ? xfrm_alloc_spi+0x2a0/0xf30
[  136.504314][ T7983]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  136.504327][ T7983]  ? xfrm_find_acq+0x87/0xa0
[  136.504348][ T7983]  xfrm_alloc_userspi+0x70b/0xc90
[  136.504393][ T7983]  ? apparmor_capable+0x137/0x1b0
[  136.504413][ T7983]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  136.504428][ T7983]  ? __nla_parse+0x40/0x60
[  136.504445][ T7983]  xfrm_user_rcv_msg+0x7a3/0xab0
[  136.504465][ T7983]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  136.504498][ T7983]  ? __pfx___mutex_trylock_common+0x10/0x10
[  136.504514][ T7983]  ? rcu_is_watching+0x15/0xb0
[  136.504526][ T7983]  ? trace_contention_end+0x39/0x120
[  136.504540][ T7983]  ? __mutex_lock+0x335/0x1350
[  136.504560][ T7983]  netlink_rcv_skb+0x208/0x470
[  136.504577][ T7983]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  136.504598][ T7983]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  136.504619][ T7983]  ? netlink_deliver_tap+0x2e/0x1b0
[  136.504633][ T7983]  ? netlink_deliver_tap+0x2e/0x1b0
[  136.504646][ T7983]  xfrm_netlink_rcv+0x79/0x90
[  136.504664][ T7983]  netlink_unicast+0x82f/0x9e0
[  136.504680][ T7983]  ? __pfx_netlink_unicast+0x10/0x10
[  136.504692][ T7983]  ? __sanitizer_cov_trace_pc+0x55/0x70
[  136.504709][ T7983]  ? skb_put+0x11b/0x210
[  136.504726][ T7983]  netlink_sendmsg+0x805/0xb30
[  136.504744][ T7983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.504760][ T7983]  ? aa_sock_msg_perm+0xf1/0x1d0
[  136.504775][ T7983]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  136.504792][ T7983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.504808][ T7983]  __sock_sendmsg+0x21c/0x270
[  136.504830][ T7983]  ____sys_sendmsg+0x505/0x830
[  136.504851][ T7983]  ? __pfx_____sys_sendmsg+0x10/0x10
[  136.504870][ T7983]  ? import_iovec+0x74/0xa0
[  136.504890][ T7983]  ___sys_sendmsg+0x21f/0x2a0
[  136.504908][ T7983]  ? __pfx____sys_sendmsg+0x10/0x10
[  136.504935][ T7983]  ? __fget_files+0x2a/0x420
[  136.504949][ T7983]  ? __fget_files+0x3a0/0x420
[  136.504965][ T7983]  __x64_sys_sendmsg+0x19b/0x260
[  136.504984][ T7983]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  136.505003][ T7983]  do_syscall_64+0xfa/0x3b0
[  136.505019][ T7983]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.505034][ T7983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  136.505050][ T7983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.505063][ T7983] RIP: 0033:0x7fce8818ec29
[  136.505077][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.505089][ T7983] RSP: 002b:00007fce863f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.505104][ T7983] RAX: ffffffffffffffda RBX: 00007fce883d5fa0 RCX: 00007fce8818ec29
[  136.505115][ T7983] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000006
[  136.505122][ T7983] RBP: 00007fce88211e41 R08: 0000000000000000 R09: 0000000000000000
[  136.505129][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.505138][ T7983] R13: 00007fce883d6038 R14: 00007fce883d5fa0 R15: 00007ffcdfb54c88
[  136.505152][ T7983]  </TASK>
[  136.505157][ T7983] 
[  136.631060][ T7983] Allocated by task 6699:
[  136.632675][ T7983]  kasan_save_track+0x3e/0x80
[  136.634476][ T7983]  __kasan_slab_alloc+0x6c/0x80
[  136.636378][ T7983]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  136.638452][ T7983]  xfrm_state_alloc+0x24/0x2f0
[  136.640251][ T7983]  __find_acq_core+0x8a7/0x1c00
[  136.642110][ T7983]  xfrm_find_acq+0x78/0xa0
[  136.643788][ T7983]  xfrm_alloc_userspi+0x6b3/0xc90
[  136.645705][ T7983]  xfrm_user_rcv_msg+0x7a3/0xab0
[  136.647620][ T7983]  netlink_rcv_skb+0x208/0x470
[  136.649423][ T7983]  xfrm_netlink_rcv+0x79/0x90
[  136.651191][ T7983]  netlink_unicast+0x82f/0x9e0
[  136.653039][ T7983]  netlink_sendmsg+0x805/0xb30
[  136.654856][ T7983]  __sock_sendmsg+0x21c/0x270
[  136.656601][ T7983]  ____sys_sendmsg+0x505/0x830
[  136.658431][ T7983]  ___sys_sendmsg+0x21f/0x2a0
[  136.660215][ T7983]  __x64_sys_sendmsg+0x19b/0x260
[  136.662080][ T7983]  do_syscall_64+0xfa/0x3b0
[  136.663790][ T7983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.666011][ T7983] 
[  136.666928][ T7983] Freed by task 974:
[  136.668387][ T7983]  kasan_save_track+0x3e/0x80
[  136.670179][ T7983]  kasan_save_free_info+0x46/0x50
[  136.672109][ T7983]  __kasan_slab_free+0x5b/0x80
[  136.673942][ T7983]  kmem_cache_free+0x18f/0x400
[  136.675739][ T7983]  xfrm_state_gc_task+0x52d/0x6b0
[  136.677717][ T7983]  process_scheduled_works+0xae1/0x17b0
[  136.679902][ T7983]  worker_thread+0x8a0/0xda0
[  136.681739][ T7983]  kthread+0x711/0x8a0
[  136.683296][ T7983]  ret_from_fork+0x439/0x7d0
[  136.685096][ T7983]  ret_from_fork_asm+0x1a/0x30
[  136.686909][ T7983] 
[  136.687933][ T7983] The buggy address belongs to the object at ffff88803abc5b00
[  136.687933][ T7983]  which belongs to the cache xfrm_state of size 928
[  136.693253][ T7983] The buggy address is located 196 bytes inside of
[  136.693253][ T7983]  freed 928-byte region [ffff88803abc5b00, ffff88803abc5ea0)
[  136.698531][ T7983] 
[  136.699505][ T7983] The buggy address belongs to the physical page:
[  136.701962][ T7983] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803abc6d00 pfn:0x3abc4
[  136.705650][ T7983] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  136.708764][ T7983] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  136.711688][ T7983] page_type: f5(slab)
[  136.713247][ T7983] raw: 00fff00000000040 ffff88801cb93b40 dead000000000122 0000000000000000
[  136.716561][ T7983] raw: ffff88803abc6d00 00000000800e0008 00000000f5000000 0000000000000000
[  136.719815][ T7983] head: 00fff00000000040 ffff88801cb93b40 dead000000000122 0000000000000000
[  136.723053][ T7983] head: ffff88803abc6d00 00000000800e0008 00000000f5000000 0000000000000000
[  136.726289][ T7983] head: 00fff00000000002 ffffea0000eaf101 00000000ffffffff 00000000ffffffff
[  136.729558][ T7983] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  136.732755][ T7983] page dumped because: kasan: bad access detected
[  136.735076][ T7983] page_owner tracks the page as allocated
[  136.737194][ T7983] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6032, tgid 6031 (syz.2.57), ts 77987446558, free_ts 77929586654
[  136.744108][ T7983]  post_alloc_hook+0x240/0x2a0
[  136.746020][ T7983]  get_page_from_freelist+0x21e4/0x22c0
[  136.748215][ T7983]  __alloc_frozen_pages_noprof+0x181/0x370
[  136.750486][ T7983]  alloc_pages_mpol+0x232/0x4a0
[  136.752321][ T7983]  allocate_slab+0x8a/0x370
[  136.754039][ T7983]  ___slab_alloc+0xbeb/0x1420
[  136.755838][ T7983]  kmem_cache_alloc_noprof+0x283/0x3c0
[  136.757875][ T7983]  xfrm_state_alloc+0x24/0x2f0
[  136.759673][ T7983]  xfrm_add_sa+0x17d1/0x4070
[  136.761419][ T7983]  xfrm_user_rcv_msg+0x7a3/0xab0
[  136.763290][ T7983]  netlink_rcv_skb+0x208/0x470
[  136.765189][ T7983]  xfrm_netlink_rcv+0x79/0x90
[  136.767006][ T7983]  netlink_unicast+0x82f/0x9e0
[  136.768871][ T7983]  netlink_sendmsg+0x805/0xb30
[  136.770765][ T7983]  __sock_sendmsg+0x21c/0x270
[  136.772610][ T7983]  ____sys_sendmsg+0x505/0x830
[  136.774478][ T7983] page last free pid 5886 tgid 5886 stack trace:
[  136.776929][ T7983]  __free_frozen_pages+0xbc4/0xd30
[  136.778942][ T7983]  __put_partials+0x156/0x1a0
[  136.780812][ T7983]  put_cpu_partial+0x17c/0x250
[  136.782743][ T7983]  __slab_free+0x2d5/0x3c0
[  136.784549][ T7983]  qlist_free_all+0x97/0x140
[  136.786397][ T7983]  kasan_quarantine_reduce+0x148/0x160
[  136.788540][ T7983]  __kasan_slab_alloc+0x22/0x80
[  136.790500][ T7983]  __kmalloc_noprof+0x224/0x4f0
[  136.792392][ T7983]  tomoyo_realpath_from_path+0xe3/0x5d0
[  136.794566][ T7983]  tomoyo_path_number_perm+0x1e8/0x5a0
[  136.796657][ T7983]  security_file_ioctl+0xcb/0x2d0
[  136.798569][ T7983]  __se_sys_ioctl+0x47/0x170
[  136.800421][ T7983]  do_syscall_64+0xfa/0x3b0
[  136.802229][ T7983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.804567][ T7983] 
[  136.805513][ T7983] Memory state around the buggy address:
[  136.807712][ T7983]  ffff88803abc5a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  136.810815][ T7983]  ffff88803abc5b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  136.813946][ T7983] >ffff88803abc5b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  136.817136][ T7983]                                            ^
[  136.819594][ T7983]  ffff88803abc5c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  136.822715][ T7983]  ffff88803abc5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  136.825902][ T7983] ==================================================================
[  136.829591][ T7983] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  136.832463][ T7983] CPU: 1 UID: 0 PID: 7983 Comm: syz.1.840 Not tainted syzkaller #0 PREEMPT(full) 
[  136.836084][ T7983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.839969][ T7983] Call Trace:
[  136.841369][ T7983]  <TASK>
[  136.842594][ T7983]  dump_stack_lvl+0x99/0x250
[  136.844486][ T7983]  ? __asan_memcpy+0x40/0x70
[  136.846214][ T7983]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.848301][ T7983]  ? __pfx__printk+0x10/0x10
[  136.850231][ T7983]  vpanic+0x281/0x750
[  136.851860][ T7983]  ? __pfx_vpanic+0x10/0x10
[  136.853742][ T7983]  ? irqentry_exit+0x74/0x90
[  136.855584][ T7983]  panic+0xb9/0xc0
[  136.857104][ T7983]  ? __pfx_panic+0x10/0x10
[  136.858926][ T7983]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  136.861186][ T7983]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  136.863522][ T7983]  ? xfrm_alloc_spi+0x570/0xf30
[  136.865495][ T7983]  check_panic_on_warn+0x89/0xb0
[  136.867484][ T7983]  ? xfrm_alloc_spi+0x570/0xf30
[  136.869467][ T7983]  end_report+0x78/0x160
[  136.871199][ T7983]  kasan_report+0x129/0x150
[  136.873042][ T7983]  ? xfrm_alloc_spi+0x570/0xf30
[  136.875041][ T7983]  xfrm_alloc_spi+0x570/0xf30
[  136.876985][ T7983]  ? xfrm_alloc_spi+0x2a0/0xf30
[  136.878925][ T7983]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  136.881042][ T7983]  ? xfrm_find_acq+0x87/0xa0
[  136.882958][ T7983]  xfrm_alloc_userspi+0x70b/0xc90
[  136.884980][ T7983]  ? apparmor_capable+0x137/0x1b0
[  136.887048][ T7983]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  136.889218][ T7983]  ? __nla_parse+0x40/0x60
[  136.891004][ T7983]  xfrm_user_rcv_msg+0x7a3/0xab0
[  136.892986][ T7983]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  136.895200][ T7983]  ? __pfx___mutex_trylock_common+0x10/0x10
[  136.897511][ T7983]  ? rcu_is_watching+0x15/0xb0
[  136.899413][ T7983]  ? trace_contention_end+0x39/0x120
[  136.901553][ T7983]  ? __mutex_lock+0x335/0x1350
[  136.903493][ T7983]  netlink_rcv_skb+0x208/0x470
[  136.905432][ T7983]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  136.907645][ T7983]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  136.909787][ T7983]  ? netlink_deliver_tap+0x2e/0x1b0
[  136.911876][ T7983]  ? netlink_deliver_tap+0x2e/0x1b0
[  136.913993][ T7983]  xfrm_netlink_rcv+0x79/0x90
[  136.915899][ T7983]  netlink_unicast+0x82f/0x9e0
[  136.917769][ T7983]  ? __pfx_netlink_unicast+0x10/0x10
[  136.919804][ T7983]  ? __sanitizer_cov_trace_pc+0x55/0x70
[  136.922024][ T7983]  ? skb_put+0x11b/0x210
[  136.923720][ T7983]  netlink_sendmsg+0x805/0xb30
[  136.925635][ T7983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.927651][ T7983]  ? aa_sock_msg_perm+0xf1/0x1d0
[  136.929623][ T7983]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  136.931711][ T7983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  136.933904][ T7983]  __sock_sendmsg+0x21c/0x270
[  136.935800][ T7983]  ____sys_sendmsg+0x505/0x830
[  136.937724][ T7983]  ? __pfx_____sys_sendmsg+0x10/0x10
[  136.939869][ T7983]  ? import_iovec+0x74/0xa0
[  136.941666][ T7983]  ___sys_sendmsg+0x21f/0x2a0
[  136.943578][ T7983]  ? __pfx____sys_sendmsg+0x10/0x10
[  136.945606][ T7983]  ? __fget_files+0x2a/0x420
[  136.947452][ T7983]  ? __fget_files+0x3a0/0x420
[  136.949269][ T7983]  __x64_sys_sendmsg+0x19b/0x260
[  136.951247][ T7983]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  136.953436][ T7983]  do_syscall_64+0xfa/0x3b0
[  136.955263][ T7983]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.957757][ T7983]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  136.960212][ T7983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.962486][ T7983] RIP: 0033:0x7fce8818ec29
[  136.964241][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.971661][ T7983] RSP: 002b:00007fce863f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  136.974867][ T7983] RAX: ffffffffffffffda RBX: 00007fce883d5fa0 RCX: 00007fce8818ec29
[  136.977934][ T7983] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000006
[  136.980968][ T7983] RBP: 00007fce88211e41 R08: 0000000000000000 R09: 0000000000000000
[  136.984133][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.987304][ T7983] R13: 00007fce883d6038 R14: 00007fce883d5fa0 R15: 00007ffcdfb54c88
[  136.990417][ T7983]  </TASK>
[  136.992366][ T7983] Kernel Offset: disabled
[  136.994057][ T7983] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:12:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000003 RBX=0000000000000007 RCX=0000000000000007 RDX=0000000000000008
RSI=ffff888021674588 RDI=ffff888021673980 RBP=0000000000000000 RSP=ffffc9000336f210
R8 =0000000000000000 R9 =ffffffff822eec0d R10=dffffc0000000000 R11=fffff940001055b9
R12=0000000000000003 R13=0000000000000001 R14=ffff888021674588 R15=ffff8880216745a8
RIP=ffffffff819d9f60 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555570161500 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000014800 CR3=0000000020fe6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fce88212e7b
XMM06=0000000000000000 00007fce88212e75 XMM07=0000000000000000 00007fce88212e89
XMM08=0000000000000000 00007fce88212f0f XMM09=0000000000000000 00007fce88212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000000159a RDI=000000000000159b RBP=ffffffff99df86b0 RSP=ffffc90003fde990
R8 =ffff888020468237 R9 =1ffff1100408d046 R10=dffffc0000000000 R11=ffffffff85501330
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff855013a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fce863f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000100000000 CR3=0000000023fc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fce883a7498 00007fce883a7470 XMM03=00007fce883a74a8 00007fce883a74a0
XMM04=00007fce88f0d100 00007fce883a7460 XMM05=00007fce883a7478 00007fce883a74c0
XMM06=00007fce883a74b8 00007fce883a74b0 XMM07=00007fce883a74a8 00007fce883a74a0
XMM08=0000000000000000 00007fce88212f0f XMM09=0000000000000000 00007fce88212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
