last executing test programs:

4m57.892896302s ago: executing program 2 (id=247):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

4m57.892743777s ago: executing program 2 (id=248):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1db8511", 0x0, 0x2040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50)

4m57.189118831s ago: executing program 2 (id=250):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@union={0x6, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x0, 0x3, 0x3}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x7fffffff}, 0x28)

4m57.188931821s ago: executing program 2 (id=252):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0000000000007910a8000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

4m57.102003212s ago: executing program 2 (id=253):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

4m57.101811572s ago: executing program 2 (id=254):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)

4m42.050914137s ago: executing program 32 (id=254):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)

2m56.296537125s ago: executing program 1 (id=1948):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r3, 0xff01, 0x0)

2m55.733098626s ago: executing program 1 (id=1951):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffffff530000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x48050)

2m55.683562857s ago: executing program 1 (id=1952):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xb00)

2m55.68292164s ago: executing program 1 (id=1954):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a80648c2594f90600fc60", 0x14}], 0x1}, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m55.593305662s ago: executing program 1 (id=1955):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e0000006a0081040000000000005ef40502e0dfffff0e000a000e0000000224ec4dc2cc0114664568a71802cd0b", 0x2e}], 0x1}, 0x0)

2m55.533047172s ago: executing program 1 (id=1957):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000250001002abd7000ffdbdb250200000008000100090000006affc22a4249de"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

2m40.508345861s ago: executing program 33 (id=1957):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000250001002abd7000ffdbdb250200000008000100090000006affc22a4249de"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000)

2m36.551800885s ago: executing program 4 (id=2257):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd)

2m36.331835403s ago: executing program 4 (id=2261):
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b5d3d88, 0x0, @perf_bp={0x0, 0x2}, 0x12280}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)

2m35.861387389s ago: executing program 4 (id=2266):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe800000"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

2m35.638491459s ago: executing program 4 (id=2269):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="23040000000a0000000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x67}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r1, 0xa)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000000000105000000080000000000"], 0x0, 0x5a}, 0x28)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac14"], 0xfdef)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000308000140000000000900010073797a30000000000900020073797a320000000020000000080a01010000000000000000020000030900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)="39000000140081ae0000dc676f97daf01effffff0521018701546fabca1b4e8a06a6580e88370200c5090000009c40ebb3734b49bbc51245e7", 0x39}], 0x1}, 0x0)
recvmsg$kcm(r7, 0x0, 0x40010220)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000009c0)=""/141, 0x0, 0x8d, 0x1, 0x5, 0x10000, @value=r0}, 0x28)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000000a80)="d631cead2b437d8580120ac1960fb46151503dec1be25b92b6d83aefa62f0377b69f2ecc5e5fa208b9da9c1726e47d236df769ed7f0fa2d62a87ccf15b37d243b9aaf649188f88d57e175a46e0b4f209f43c2a094625036583147cca23e7dda2261a756637b07c375b675e433c13e966b54665d13907a6d15a25117c4befe9c1ceed29756763ec49723b49a8c03b6a9c5e384d76", 0x94}], 0x2, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xea, [@dev={0xac, 0x14, 0x14, 0x1c}]}, @generic={0x94, 0x6, "9cc9b329"}, @generic={0x86, 0x11, "fe538c29a02f47e20ab2da00374680"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5c}}], 0x78}, 0x40810)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80)

2m34.90073858s ago: executing program 4 (id=2271):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a800586350e010000003cac7ecd040037"], 0x34}], 0x1}, 0x0)

2m34.900317669s ago: executing program 4 (id=2272):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x565000, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)

2m19.637634797s ago: executing program 34 (id=2272):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x565000, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)

1m44.685469215s ago: executing program 3 (id=2887):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newae={0x64, 0x1e, 0x503, 0x70bd29, 0x25dfdbff, {{@in=@broadcast, 0x4d4, 0x2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x3506}, [@lifetime_val={0x24, 0x9, {0x5, 0x13e7, 0xee01, 0x8000000000000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x90)

1m44.586989619s ago: executing program 3 (id=2889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0xe43, r0}, 0x38)

1m44.586776795s ago: executing program 3 (id=2890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1m43.979286783s ago: executing program 3 (id=2892):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

1m43.976122189s ago: executing program 3 (id=2895):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m43.816876692s ago: executing program 0 (id=2896):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xffffffff, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000000100)='./file0\x00', 0x3d)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0)

1m43.617885867s ago: executing program 0 (id=2899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000001f00000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1m43.399354722s ago: executing program 0 (id=2905):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

1m43.328208655s ago: executing program 0 (id=2906):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x57}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94)

1m43.327946672s ago: executing program 0 (id=2907):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0)

1m43.241401384s ago: executing program 0 (id=2908):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000201030000000000000000000200000608001a4000000009ab8317f05a39a7e95862a14bc48c4dfee8dd76ec6c851c94138aa5ddd6afa92c7ea04a6c8e4af311828ee8f082eed8a07d113c6b103dc3624d07eaed1c29419163c5edc8610d73bd6032044bc1b02b8f1877f59c7aea2010d853d0fb32c3768f99efd48a37fb6fcc87dfe25c66ba3d9cd0184eabc45b87f4435f8f3076578d4f91938c77650ac3b8139946a2f0d365"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

1m43.062284357s ago: executing program 5 (id=2912):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa10000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_config_ext={0x5, 0x3}, 0x2204, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xdffffffe, 0x9, 0x9, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
close(r9)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d1847fd52a60864160af36504001a0038001d00", 0x28}, {&(0x7f00000005c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d55030000000000000016a0d3819a85", 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x8000)

1m42.97659372s ago: executing program 5 (id=2913):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))

1m42.767554394s ago: executing program 5 (id=2914):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m42.637314696s ago: executing program 5 (id=2915):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1m42.464000423s ago: executing program 5 (id=2916):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000d, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xb, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071104f000000000095000000001e0000af4fb8331220767ae2c45d36d35917cf1edafd3b0ff9bb4c7d77efcaca200afb7cc6edd4a37c27d7181c173e3c2e65070000000000000022ba8682e12314f1527751169abe7b1c4601d05ebe71bce08c9057667c9417f518377862243c2612fd344888487cf1ef2e55627b72d1a65c081d68fa3e0fc605f7c6a55cab97028ea18b70b700f5c0d9aa7561bf128c71"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000700000002"], 0x87)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x200}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)

1m42.353325568s ago: executing program 3 (id=2917):
bpf$OBJ_GET_MAP(0x7, 0xfffffffffffffffe, 0x99)

1m41.377975101s ago: executing program 5 (id=2918):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x20}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000680)=""/130, 0x82}, {0x0}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f00000008c0)=""/215, 0xd7}], 0x8}, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)

1m28.217164668s ago: executing program 35 (id=2908):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000201030000000000000000000200000608001a4000000009ab8317f05a39a7e95862a14bc48c4dfee8dd76ec6c851c94138aa5ddd6afa92c7ea04a6c8e4af311828ee8f082eed8a07d113c6b103dc3624d07eaed1c29419163c5edc8610d73bd6032044bc1b02b8f1877f59c7aea2010d853d0fb32c3768f99efd48a37fb6fcc87dfe25c66ba3d9cd0184eabc45b87f4435f8f3076578d4f91938c77650ac3b8139946a2f0d365"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)

1m27.207343303s ago: executing program 36 (id=2917):
bpf$OBJ_GET_MAP(0x7, 0xfffffffffffffffe, 0x99)

1m26.189086908s ago: executing program 37 (id=2918):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x20}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000680)=""/130, 0x82}, {0x0}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f00000008c0)=""/215, 0xd7}], 0x8}, 0x2)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x300, 0x31}, 0x80, 0x0}, 0x0)

8.867064931s ago: executing program 6 (id=3843):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0)

8.777832881s ago: executing program 6 (id=3846):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xe, 0x9}, 0x890f, 0x4, 0x0, 0x1, 0x0, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x4)

8.600822005s ago: executing program 6 (id=3849):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x22, 0x0, &(0x7f0000000580)="3d25ab324119c4c3d0017085080092624cf49be9fbbd5374e2fa661b06c17e47c2d1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.533842885s ago: executing program 6 (id=3851):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)

8.373876126s ago: executing program 6 (id=3853):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x15, 0x5, 0x0)
close(r2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8800)

8.182151999s ago: executing program 6 (id=3854):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffeff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)

3.775774429s ago: executing program 8 (id=3898):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da201adfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d"], 0xe0}], 0x1, 0x0, 0x0, 0x804}, 0x0)

3.570393554s ago: executing program 8 (id=3902):
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff0300600d698cff9e14f008004de7f9c7643600000001001d1932d5a3ed7f31c4", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.479612884s ago: executing program 8 (id=3905):
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10801, 0x800, 0x0, 0x5, 0x0, 0x0, 0x48a, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100af6906360000000000000000000000ea048500000050"], &(0x7f0000000100)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8], 0x9a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@tcp6, 0x2}, 0x20)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000200)="03274f4cf00f2721014f096b1b79b0edb03f37e43757e78da4ae93831e068b2acedc856de3574adcee4ae2998573e86fff1828be109964a65978cc6477e07d73f087f79cb3e64f5e5bf13f2c940b488b1c1f369f6c280c7fdea890b8eb05cf88a458e0afc10603f56cf1b910b6f40311ede03bb131c9d05b237178313d51994b9d7b9cf73c12adc4e4798abbcc557b90bb2f19", 0x93}, {&(0x7f0000001040)}], 0x2, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x4}, 0x4000000)
fstat(0xffffffffffffffff, &(0x7f00000007c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$kcm(0x15, 0x5, 0x0)
recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6c7654c172732ad3)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)

1.378723593s ago: executing program 7 (id=3923):
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x64)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

554.471781ms ago: executing program 8 (id=3924):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f00fe805e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800370000000000020000fbffffff0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8941, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r3}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r6}, 0x18)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.dequeue\x00', 0x0, 0x0)

427.971486ms ago: executing program 7 (id=3925):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0)

330.594777ms ago: executing program 7 (id=3926):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000780)="d2205d96c717ab96f0ded75d88a8079188a8", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

241.767301ms ago: executing program 8 (id=3927):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1}, 0x0)
sendmsg$tipc(r1, 0x0, 0x0)
close(r2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x16b, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, 0x0}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0xff00)
socket$kcm(0xa, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x8, 0x4000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r5, 0x0, 0x0)

178.065621ms ago: executing program 7 (id=3928):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125dea9d1b1", 0x0, 0xfff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

89.463555ms ago: executing program 7 (id=3929):
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
r4 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
close(r5)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

344.543µs ago: executing program 7 (id=3930):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x140d, 0x7977ae5950a6c6bb, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)

0s ago: executing program 8 (id=3931):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100000000002c0002800c000280050001"], 0xb8}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

kernel console output (not intermixed with test programs):

dv_slave_0
[  107.329302][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.337875][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.348526][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.358329][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.363589][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.409538][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.456789][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.459590][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.490960][ T6851] veth0_vlan: entered promiscuous mode
[  107.502689][ T4645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.507178][ T4645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.510133][ T6851] veth1_vlan: entered promiscuous mode
[  107.511960][   T55] Bluetooth: hci3: command tx timeout
[  107.547376][ T6851] veth0_macvtap: entered promiscuous mode
[  107.562149][ T6851] veth1_macvtap: entered promiscuous mode
[  107.572785][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.581161][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.599741][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.609614][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.622519][ T5883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.627942][ T6969] netlink: 232 bytes leftover after parsing attributes in process `syz.0.422'.
[  107.632892][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.694969][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.697374][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.730044][ T4645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.734397][ T4645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.965527][ T6985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.427'.
[  108.523999][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.443'.
[  108.526775][ T7025] netlink: 'syz.3.443': attribute type 1 has an invalid length.
[  108.586048][ T7029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.444'.
[  109.056006][ T7054] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.451'.
[  109.270372][ T7066] netlink: 'syz.1.456': attribute type 21 has an invalid length.
[  109.276918][ T7068] netlink: 'syz.0.457': attribute type 3 has an invalid length.
[  109.279161][ T7066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.456'.
[  109.279996][ T7068] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.457'.
[  109.332540][ T7070] netlink: 'syz.0.458': attribute type 3 has an invalid length.
[  109.406988][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'.
[  109.591602][   T55] Bluetooth: hci3: command tx timeout
[  109.688871][ T7095] netlink: 180 bytes leftover after parsing attributes in process `syz.3.470'.
[  109.703854][ T7095] netlink: 'syz.3.470': attribute type 2 has an invalid length.
[  109.706420][ T7095] netlink: 164 bytes leftover after parsing attributes in process `syz.3.470'.
[  109.719733][ T7095] netlink: 'syz.3.470': attribute type 2 has an invalid length.
[  109.863158][ T7113] netlink: 'syz.3.476': attribute type 3 has an invalid length.
[  111.388773][ T7184] syzkaller0: entered promiscuous mode
[  111.392221][ T7184] syzkaller0: entered allmulticast mode
[  111.674573][   T55] Bluetooth: hci3: command tx timeout
[  112.893971][ T7223] validate_nla: 2 callbacks suppressed
[  112.893994][ T7223] netlink: 'syz.3.523': attribute type 160 has an invalid length.
[  113.073591][ T7239] __nla_validate_parse: 4 callbacks suppressed
[  113.073603][ T7239] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.528'.
[  113.229878][ T7254] netlink: 'syz.3.533': attribute type 1 has an invalid length.
[  113.387367][ T7261] netlink: 64 bytes leftover after parsing attributes in process `syz.0.536'.
[  113.502803][ T7272] lo speed is unknown, defaulting to 1000
[  113.517295][ T7272] lo speed is unknown, defaulting to 1000
[  113.540294][ T7272] lo speed is unknown, defaulting to 1000
[  114.084845][ T7291] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  114.288596][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.448495][ T7272] infiniband syz2: set active
[  114.451120][ T5918] lo speed is unknown, defaulting to 1000
[  114.454178][ T7272] infiniband syz2: added lo
[  114.459083][ T7272] syz2: rxe_create_cq: returned err = -12
[  114.464934][ T7272] infiniband syz2: Couldn't create ib_mad CQ
[  114.467058][ T7272] infiniband syz2: Couldn't open port 1
[  114.489530][ T7272] RDS/IB: syz2: added
[  114.491477][ T7272] smc: adding ib device syz2 with port count 1
[  114.493502][ T7272] smc:    ib device syz2 port 1 has pnetid 
[  114.502356][   T24] lo speed is unknown, defaulting to 1000
[  114.506364][ T7272] lo speed is unknown, defaulting to 1000
[  114.609495][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.729223][ T7272] lo speed is unknown, defaulting to 1000
[  114.903591][ T7272] lo speed is unknown, defaulting to 1000
[  115.187198][ T7352] netlink: 124 bytes leftover after parsing attributes in process `syz.1.576'.
[  115.190001][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'.
[  115.401636][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'.
[  115.407924][ T7367] netlink: 'syz.3.584': attribute type 40 has an invalid length.
[  115.458984][ T7367] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  115.551811][ T7367] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  116.028372][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.602'.
[  116.356933][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'.
[  116.447326][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  117.048595][ T7441] netlink: 'syz.1.617': attribute type 58 has an invalid length.
[  117.052542][ T7441] netlink: 144 bytes leftover after parsing attributes in process `syz.1.617'.
[  117.929220][   T55] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  118.310836][ T7490] netlink: 'syz.1.635': attribute type 10 has an invalid length.
[  118.319152][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.635'.
[  118.322903][ T7490] ipvlan1: entered promiscuous mode
[  118.325655][ T7490] ipvlan1: entered allmulticast mode
[  118.327518][ T7490] veth0_vlan: entered allmulticast mode
[  118.331184][ T7490] bridge0: port 3(ipvlan1) entered blocking state
[  118.335822][ T7490] bridge0: port 3(ipvlan1) entered disabled state
[  118.339776][ T7490] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  118.719026][ T7516] netlink: 'syz.1.643': attribute type 3 has an invalid length.
[  118.729851][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'.
[  118.742187][ T7518] netlink: 731 bytes leftover after parsing attributes in process `syz.0.648'.
[  118.748262][ T7516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.643'.
[  119.286750][   T55] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  119.293923][ T7525] netlink: 'syz.0.651': attribute type 3 has an invalid length.
[  119.299200][ T7525] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  119.308174][ T7525] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.651'.
[  119.568315][ T7554] netlink: 208192 bytes leftover after parsing attributes in process `syz.3.662'.
[  119.571870][ T7554] netlink: 'syz.3.662': attribute type 1 has an invalid length.
[  119.865114][ T7569] netlink: 'syz.0.667': attribute type 2 has an invalid length.
[  119.867583][ T7569] netlink: 'syz.0.667': attribute type 5 has an invalid length.
[  119.870089][ T7569] netlink: 'syz.0.667': attribute type 6 has an invalid length.
[  119.877469][ T7569] netlink: 'syz.0.667': attribute type 7 has an invalid length.
[  119.881068][ T7569] netlink: 9 bytes leftover after parsing attributes in process `syz.0.667'.
[  119.895778][ T7569] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.667'.
[  119.901520][ T7569] netlink: 'syz.0.667': attribute type 2 has an invalid length.
[  119.904098][ T7569] netlink: 9 bytes leftover after parsing attributes in process `syz.0.667'.
[  121.027499][ T7613] netlink: 132 bytes leftover after parsing attributes in process `syz.0.683'.
[  122.956163][   T55] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  123.355269][ T7684] __nla_validate_parse: 6 callbacks suppressed
[  123.355280][ T7684] netlink: 56 bytes leftover after parsing attributes in process `syz.0.711'.
[  123.404049][ T7689] validate_nla: 7 callbacks suppressed
[  123.404060][ T7689] netlink: 'syz.3.714': attribute type 6 has an invalid length.
[  123.460942][   T33] audit: type=1107 audit(1758558658.333:2): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  123.509068][ T7702] netlink: 'syz.0.720': attribute type 2 has an invalid length.
[  123.511699][ T7702] netlink: 'syz.0.720': attribute type 1 has an invalid length.
[  123.514451][ T7702] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.720'.
[  123.518220][ T7702] block nbd5: not configured, cannot reconfigure
[  123.548801][ T7705] netlink: 'syz.1.722': attribute type 2 has an invalid length.
[  124.001745][ T7727] netlink: 'syz.1.730': attribute type 39 has an invalid length.
[  124.217737][ T7737] netlink: 'syz.0.734': attribute type 10 has an invalid length.
[  124.220769][ T7737] netlink: 2 bytes leftover after parsing attributes in process `syz.0.734'.
[  124.231639][ T7737] team0: entered promiscuous mode
[  124.237629][ T7737] team_slave_0: entered promiscuous mode
[  124.240200][ T7737] team_slave_1: entered promiscuous mode
[  124.252106][ T7737] bridge0: port 3(team0) entered blocking state
[  124.254899][ T7737] bridge0: port 3(team0) entered disabled state
[  124.257623][ T7737] team0: entered allmulticast mode
[  124.259660][ T7737] team_slave_0: entered allmulticast mode
[  124.267942][ T7737] team_slave_1: entered allmulticast mode
[  124.278901][ T7737] bridge0: port 3(team0) entered blocking state
[  124.281718][ T7737] bridge0: port 3(team0) entered forwarding state
[  125.165055][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'.
[  125.556373][ T7791] bridge0: port 3(ip6gretap0) entered blocking state
[  125.559586][ T7791] bridge0: port 3(ip6gretap0) entered disabled state
[  125.564419][ T7791] ip6gretap0: entered allmulticast mode
[  125.567379][ T7791] ip6gretap0: entered promiscuous mode
[  125.569995][ T7791] bridge0: port 3(ip6gretap0) entered blocking state
[  125.572874][ T7791] bridge0: port 3(ip6gretap0) entered forwarding state
[  126.156736][ T7817] option changes via remount are deprecated (pid=7816 comm=syz.1.773)
[  126.179413][ T7822] netlink: 'syz.0.775': attribute type 2 has an invalid length.
[  126.191308][ T7822] netlink: 'syz.0.775': attribute type 8 has an invalid length.
[  126.193647][ T7822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.775'.
[  127.384803][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'.
[  127.440367][ T7876] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.798'.
[  128.008819][ T7911] netlink: 'syz.3.815': attribute type 9 has an invalid length.
[  128.012423][ T7911] netlink: 'syz.3.815': attribute type 8 has an invalid length.
[  128.015305][ T7911] netlink: 143452 bytes leftover after parsing attributes in process `syz.3.815'.
[  128.227002][ T7919] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.819'.
[  128.234645][ T7919] openvswitch: netlink: Message has 6 unknown bytes.
[  128.325595][ T7923] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.329190][ T7923] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.365302][ T7922] geneve0: entered promiscuous mode
[  128.378526][ T7922] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  128.575549][   T55] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6
[  129.302617][ T7957] validate_nla: 1 callbacks suppressed
[  129.302631][ T7957] netlink: 'syz.0.834': attribute type 1 has an invalid length.
[  129.307155][ T7957] netlink: 'syz.0.834': attribute type 4 has an invalid length.
[  129.311799][ T7957] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.834'.
[  129.317941][ T7957] netlink: 'syz.0.834': attribute type 1 has an invalid length.
[  129.320621][ T7957] netlink: 'syz.0.834': attribute type 4 has an invalid length.
[  129.325478][ T7957] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.834'.
[  129.358271][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'.
[  129.365418][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.837'.
[  129.596794][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.1.847'.
[  129.725751][ T7995] netlink: 'syz.1.852': attribute type 16 has an invalid length.
[  129.730598][ T7995] netlink: 156 bytes leftover after parsing attributes in process `syz.1.852'.
[  130.095835][ T8016] netlink: 'syz.3.863': attribute type 3 has an invalid length.
[  130.193945][ T8016] netlink: 'syz.3.863': attribute type 1 has an invalid length.
[  130.197782][ T8016] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.863'.
[  130.770246][ T8051] netlink: 'syz.0.877': attribute type 6 has an invalid length.
[  130.773964][ T8051] netlink: 164 bytes leftover after parsing attributes in process `syz.0.877'.
[  131.317635][ T8066] bridge0: port 3(team0) entered disabled state
[  131.320377][ T8066] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.325221][ T8066] bridge0: entered allmulticast mode
[  131.476513][ T8069] netlink: 10 bytes leftover after parsing attributes in process `syz.0.884'.
[  132.097809][ T8099] netlink: 'syz.1.897': attribute type 27 has an invalid length.
[  132.100854][ T8099] netlink: 164 bytes leftover after parsing attributes in process `syz.1.897'.
[  132.732352][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.734503][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.774580][ T8120] blkio.reset_stats is deprecated
[  134.943412][ T8195] __nla_validate_parse: 1 callbacks suppressed
[  134.943454][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.938'.
[  137.588266][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  138.794392][ T8242] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.958'.
[  139.629044][ T8249] netlink: 'syz.0.960': attribute type 10 has an invalid length.
[  139.632395][ T8249] netlink: 2 bytes leftover after parsing attributes in process `syz.0.960'.
[  139.855223][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'.
[  139.890019][ T8270] Unknown options in mask b7f2
[  140.738367][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'.
[  140.797047][ T8317] netlink: 'syz.0.986': attribute type 1 has an invalid length.
[  141.637221][ T8334] netlink: 'syz.3.993': attribute type 21 has an invalid length.
[  141.677478][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  141.680546][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  141.744402][ T8340] netlink: 830 bytes leftover after parsing attributes in process `syz.0.996'.
[  142.877598][ T8411] netlink: 'syz.1.1027': attribute type 21 has an invalid length.
[  143.013324][ T8419] openvswitch: netlink: Flow actions attr not present in new flow.
[  145.129010][ T8477] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  145.186772][ T8483] netlink: 'syz.0.1060': attribute type 5 has an invalid length.
[  145.189988][ T8483] netlink: 713 bytes leftover after parsing attributes in process `syz.0.1060'.
[  145.197025][ T8483] netlink: 130080 bytes leftover after parsing attributes in process `syz.0.1060'.
[  145.200363][ T8483] netlink: 'syz.0.1060': attribute type 5 has an invalid length.
[  145.203615][ T8483] netlink: 713 bytes leftover after parsing attributes in process `syz.0.1060'.
[  145.356556][ T8498] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1066'.
[  145.965307][ T8529] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.1080'.
[  146.675649][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'.
[  146.681601][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'.
[  146.686018][ T8543] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1087'.
[  146.688012][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'.
[  147.396793][ T8571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1097'.
[  147.959344][ T8588] veth1_macvtap: left promiscuous mode
[  149.091700][ T8615] IPv6: Can't replace route, no match found
[  149.546238][ T8652] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[  149.634671][ T8659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1137'.
[  149.754787][ T8663] netlink: 'syz.3.1141': attribute type 1 has an invalid length.
[  150.247551][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'.
[  151.091948][ T8704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1158'.
[  151.794200][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'.
[  152.551129][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'.
[  154.089839][ T8811] sit0: entered allmulticast mode
[  154.543756][ T8833] netlink: ct family unspecified
[  154.545563][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.704015][ T8843] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  155.157595][ T8860] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1217'.
[  155.418174][ T8866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1220'.
[  155.997276][ T8905] netlink: 'syz.1.1239': attribute type 29 has an invalid length.
[  156.012606][ T8905] netlink: 'syz.1.1239': attribute type 10 has an invalid length.
[  156.054734][ T8905] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.068158][ T8905] team0: Port device bond0 added
[  157.544741][ T8961] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1263'.
[  158.087019][ T8971] bridge0: port 4(ip6gretap0) entered blocking state
[  158.089321][ T8971] bridge0: port 4(ip6gretap0) entered disabled state
[  158.091981][ T8971] ip6gretap0: entered allmulticast mode
[  158.096078][ T8971] ip6gretap0: entered promiscuous mode
[  158.352969][ T8979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  158.552424][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'.
[  159.149350][ T9003] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1283'.
[  159.459391][ T9015] netlink: 'syz.3.1288': attribute type 29 has an invalid length.
[  159.969966][ T9032] netlink: 'syz.3.1294': attribute type 1 has an invalid length.
[  159.974293][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'.
[  160.436749][ T9045] netlink: 'syz.1.1300': attribute type 29 has an invalid length.
[  163.709845][ T9061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1308'.
[  163.774165][ T9061] unsupported nlmsg_type 40
[  163.960726][ T9068] netlink: zone id is out of range
[  163.970265][ T9068] netlink: zone id is out of range
[  163.998253][ T9068] netlink: set zone limit has 4 unknown bytes
[  164.007771][ T9068] netlink: del zone limit has 4 unknown bytes
[  164.015600][ T9068] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1311'.
[  164.169685][ T9086] netlink: 'syz.1.1318': attribute type 28 has an invalid length.
[  164.174643][ T9086] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1318'.
[  164.528270][ T9111] netlink: 'syz.0.1328': attribute type 32 has an invalid length.
[  164.663681][ T9123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1332'.
[  164.667242][ T9123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1332'.
[  164.855707][ T9141] netlink: 'syz.0.1339': attribute type 2 has an invalid length.
[  165.179544][ T9162] syzkaller0: entered promiscuous mode
[  165.181699][ T9162] syzkaller0: entered allmulticast mode
[  166.432669][ T9168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1352'.
[  166.694799][ T9183] netlink: 'syz.3.1360': attribute type 3 has an invalid length.
[  166.939255][ T9207] netlink: 'syz.3.1369': attribute type 21 has an invalid length.
[  166.943356][ T9207] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1369'.
[  167.098182][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  167.165671][ T9226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1377'.
[  167.879769][ T9227] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  167.981410][ T9234] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1380'.
[  168.644172][ T9267] netlink: 'syz.1.1395': attribute type 6 has an invalid length.
[  169.139860][ T9281] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1402'.
[  170.498363][ T9305] rdma_rxe: rxe_newlink: failed to add erspan0
[  170.855481][ T9314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1417'.
[  171.229718][ T9324] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1421'.
[  171.238372][ T9324] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1421'.
[  171.241361][ T9324] netlink: 'syz.1.1421': attribute type 5 has an invalid length.
[  171.243962][ T9324] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1421'.
[  171.463961][ T9351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.225378][ T9376] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1444'.
[  172.267358][ T9380] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1446'.
[  172.943362][ T9418] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1464'.
[  172.964666][ T9416] netlink: 'syz.0.1463': attribute type 10 has an invalid length.
[  172.967827][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1463'.
[  173.819121][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'.
[  173.822868][ T9442] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  173.825940][ T9442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.556387][ T9478] netlink: 'syz.0.1492': attribute type 13 has an invalid length.
[  174.559626][ T9478] netlink: 'syz.0.1492': attribute type 17 has an invalid length.
[  174.638925][ T9478] bridge0: port 4(ip6gretap0) entered blocking state
[  174.642531][ T9478] bridge0: port 4(ip6gretap0) entered forwarding state
[  174.645989][ T9478] bridge0: port 3(team0) entered blocking state
[  174.648555][ T9478] bridge0: port 3(team0) entered forwarding state
[  174.651395][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.654241][ T9478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.671061][ T9478] bridge0: left allmulticast mode
[  174.676843][ T9485] netlink: 'syz.1.1496': attribute type 2 has an invalid length.
[  174.681353][ T9485] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1496'.
[  174.688245][ T9478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.895264][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'.
[  174.898651][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'.
[  175.275700][ T9509] netlink: 'syz.3.1507': attribute type 23 has an invalid length.
[  176.173744][ T9558] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1526'.
[  176.876135][ T9598] netlink: 'syz.1.1545': attribute type 4 has an invalid length.
[  176.878569][ T9598] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1545'.
[  176.919219][ T9601] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1546'.
[  177.982448][ T9622] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1554'.
[  177.986023][ T9622] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1554'.
[  178.343999][ T9636] netlink: 'syz.1.1558': attribute type 1 has an invalid length.
[  178.346836][ T9636] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1558'.
[  178.939113][ T9654] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1566'.
[  179.892169][ T9688] openvswitch: netlink: VXLAN extension message has 10 unknown bytes.
[  180.329089][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'.
[  180.333380][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'.
[  180.336898][ T9695] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1584'.
[  180.424789][ T9698] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  181.259404][ T9730] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1596'.
[  181.745421][ T9747] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1601'.
[  182.234565][ T9754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1602'.
[  182.618104][ T9759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.634147][ T9759] netlink: 'syz.0.1604': attribute type 11 has an invalid length.
[  182.635616][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'.
[  182.638114][ T9759] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1604'.
[  182.690678][ T9762] netlink: 'syz.0.1605': attribute type 2 has an invalid length.
[  182.693572][ T9762] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1605'.
[  183.503706][ T9808] syz.3.1626 (9808) used obsolete PPPIOCDETACH ioctl
[  183.658840][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'.
[  183.757588][ T9822] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.001083][   T55] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  184.519521][ T9847] netlink: 'syz.0.1644': attribute type 10 has an invalid length.
[  184.534607][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.537739][ T9847] bond0: entered promiscuous mode
[  184.539531][ T9847] bond_slave_0: entered promiscuous mode
[  184.547338][ T9847] bond_slave_1: entered promiscuous mode
[  184.552871][ T9847] bond0: entered allmulticast mode
[  184.556844][ T9847] bond_slave_0: entered allmulticast mode
[  184.570349][ T9847] bond_slave_1: entered allmulticast mode
[  184.578975][ T9847] team0: Port device bond0 added
[  185.549897][ T9903] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  185.557599][ T9903] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  185.572979][ T9898] __nla_validate_parse: 4 callbacks suppressed
[  185.573074][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'.
[  185.700078][ T9906] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1669'.
[  185.814037][ T9914] netlink: 'syz.0.1674': attribute type 2 has an invalid length.
[  185.817196][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1674'.
[  185.917314][ T9922] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1677'.
[  185.923634][ T9918] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  185.926022][ T9918] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  187.079314][ T9968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1697'.
[  187.083144][ T9968] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1697'.
[  187.312007][ T9963] : entered promiscuous mode
[  187.699841][ T9997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.704025][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.708846][ T9997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.721643][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.899096][T10001] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  187.902086][T10001] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  188.036714][T10004] xt_time: unknown flags 0xf4
[  188.075227][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  188.078301][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  188.081130][   T55] Bluetooth: hci2: hardware error 0x00
[  189.602894][T10040] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  189.605604][T10040] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1724'.
[  189.640565][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'.
[  189.951410][T10056] netlink: 'syz.3.1731': attribute type 10 has an invalid length.
[  189.954906][T10056] vlan0: entered allmulticast mode
[  189.957178][T10056] veth0_vlan: entered allmulticast mode
[  189.971064][T10056] team0: Port device vlan0 added
[  190.427921][T10058] netlink: 'syz.0.1732': attribute type 13 has an invalid length.
[  190.431100][T10058] netlink: 'syz.0.1732': attribute type 17 has an invalid length.
[  190.444588][T10058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.641298][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  190.793443][T10070] openvswitch: netlink: IP tunnel dst address not specified
[  190.873016][T10076] ksmbd: Unknown IPC event: 1, ignore.
[  190.902897][T10083] netlink: 'syz.1.1743': attribute type 21 has an invalid length.
[  191.117220][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  191.469756][T10090] lo speed is unknown, defaulting to 1000
[  192.760761][T10118] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1757'.
[  192.848034][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1757'.
[  192.962957][T10124] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1759'.
[  193.097877][T10135] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1765'.
[  193.880802][T10165] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1779'.
[  194.173438][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.176221][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.351565][T10192] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  194.354699][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.437735][T10199] netlink: 'syz.1.1793': attribute type 13 has an invalid length.
[  194.802335][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1803'.
[  194.972426][T10230] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1808'.
[  195.116489][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'.
[  195.354448][T10247] netlink: 'syz.3.1815': attribute type 3 has an invalid length.
[  195.356751][T10247] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  195.359680][T10247] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1815'.
[  195.983169][T10264] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1821'.
[  196.947028][T10296] netlink: 'syz.1.1836': attribute type 10 has an invalid length.
[  196.992202][T10296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.035474][T10296] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  197.178395][T10302] : entered promiscuous mode
[  197.180636][T10302] : entered allmulticast mode
[  197.526503][ T5883] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.918147][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'.
[  197.985658][T10340] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  198.327026][T10347] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  198.377385][T10353] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1861'.
[  198.683952][T10379] netlink: 'syz.0.1873': attribute type 11 has an invalid length.
[  198.687368][T10379] netlink: 'syz.0.1873': attribute type 11 has an invalid length.
[  199.018189][T10402] openvswitch: netlink: IP tunnel dst address not specified
[  199.069311][T10403] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  199.072456][T10403] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  199.118146][T10409] netlink: 'syz.1.1889': attribute type 46 has an invalid length.
[  199.122581][T10409] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1889'.
[  199.269968][T10419] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1891'.
[  199.278528][T10419] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1891'.
[  199.282920][T10419] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1891'.
[  200.415415][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'.
[  201.787141][T10440] : entered promiscuous mode
[  201.905063][T10449] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  201.907976][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.0.1902 Not tainted syzkaller #0 PREEMPT(full) 
[  201.907991][T10449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.908000][T10449] Call Trace:
[  201.908009][T10449]  <TASK>
[  201.908023][T10449]  dump_stack_lvl+0x189/0x250
[  201.908060][T10449]  ? kernfs_path_from_node+0x2f/0x290
[  201.908085][T10449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.908107][T10449]  ? __pfx__printk+0x10/0x10
[  201.908149][T10449]  ? kernfs_path_from_node+0x2f/0x290
[  201.908167][T10449]  ? kernfs_path_from_node+0x250/0x290
[  201.908182][T10449]  ? kernfs_path_from_node+0x2f/0x290
[  201.908216][T10449]  sysfs_warn_dup+0x8e/0xa0
[  201.908239][T10449]  sysfs_do_create_link_sd+0xc0/0x110
[  201.908267][T10449]  device_add_class_symlinks+0x1cf/0x240
[  201.908301][T10449]  device_add+0x475/0xb50
[  201.908341][T10449]  wiphy_register+0x1ba6/0x28d0
[  201.908419][T10449]  ? __pfx_wiphy_register+0x10/0x10
[  201.908438][T10449]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  201.908491][T10449]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  201.908530][T10449]  ieee80211_register_hw+0x3484/0x4100
[  201.908628][T10449]  ? ieee80211_register_hw+0x14d1/0x4100
[  201.908687][T10449]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.908724][T10449]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.908769][T10449]  ? __hrtimer_setup+0x187/0x210
[  201.908783][T10449]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  201.908812][T10449]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  201.908951][T10449]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.908974][T10449]  ? trace_kmalloc+0x1f/0xd0
[  201.908991][T10449]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  201.909013][T10449]  ? kstrndup+0xbf/0x160
[  201.909072][T10449]  hwsim_new_radio_nl+0xea4/0x1b10
[  201.909102][T10449]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.909170][T10449]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.909233][T10449]  ? __nla_parse+0x40/0x60
[  201.909267][T10449]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  201.909317][T10449]  genl_family_rcv_msg_doit+0x215/0x300
[  201.909363][T10449]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.909429][T10449]  ? bpf_lsm_capable+0x9/0x20
[  201.909439][T10449]  ? security_capable+0x7e/0x2e0
[  201.909481][T10449]  genl_rcv_msg+0x60e/0x790
[  201.909528][T10449]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.909549][T10449]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.909577][T10449]  ? perf_trace_run_bpf_submit+0x100/0x170
[  201.909654][T10449]  netlink_rcv_skb+0x208/0x470
[  201.909671][T10449]  ? __lock_acquire+0xab9/0xd20
[  201.909697][T10449]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.909728][T10449]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.909815][T10449]  ? down_read+0x1ad/0x2e0
[  201.909847][T10449]  genl_rcv+0x28/0x40
[  201.909868][T10449]  netlink_unicast+0x82f/0x9e0
[  201.909919][T10449]  ? __pfx_netlink_unicast+0x10/0x10
[  201.909947][T10449]  ? netlink_sendmsg+0x642/0xb30
[  201.909960][T10449]  ? skb_put+0x11b/0x210
[  201.909996][T10449]  netlink_sendmsg+0x805/0xb30
[  201.910053][T10449]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.910081][T10449]  ? perf_trace_run_bpf_submit+0x100/0x170
[  201.910097][T10449]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.910124][T10449]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.910141][T10449]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.910167][T10449]  __sock_sendmsg+0x21c/0x270
[  201.910200][T10449]  ____sys_sendmsg+0x505/0x830
[  201.910244][T10449]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.910299][T10449]  ? import_iovec+0x74/0xa0
[  201.910337][T10449]  ___sys_sendmsg+0x21f/0x2a0
[  201.910370][T10449]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.910467][T10449]  ? __fget_files+0x2a/0x420
[  201.910527][T10449]  ? __fget_files+0x2a/0x420
[  201.910541][T10449]  ? __fget_files+0x3a0/0x420
[  201.910622][T10449]  __x64_sys_sendmsg+0x19b/0x260
[  201.910658][T10449]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.910746][T10449]  ? do_syscall_64+0xbe/0x3b0
[  201.910781][T10449]  do_syscall_64+0xfa/0x3b0
[  201.910796][T10449]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.910814][T10449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.910829][T10449]  ? exc_page_fault+0x9f/0xf0
[  201.910857][T10449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.910870][T10449] RIP: 0033:0x7ff5ea78ec29
[  201.910887][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.910898][T10449] RSP: 002b:00007ff5eb60c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.910912][T10449] RAX: ffffffffffffffda RBX: 00007ff5ea9d5fa0 RCX: 00007ff5ea78ec29
[  201.910921][T10449] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007
[  201.910930][T10449] RBP: 00007ff5ea811e41 R08: 0000000000000000 R09: 0000000000000000
[  201.910937][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.910945][T10449] R13: 00007ff5ea9d6038 R14: 00007ff5ea9d5fa0 R15: 00007fffeb292558
[  201.911011][T10449]  </TASK>
[  202.524376][T10471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1910'.
[  204.765582][T10536] netlink: 'syz.0.1937': attribute type 1 has an invalid length.
[  204.770923][T10536] netlink: 'syz.0.1937': attribute type 2 has an invalid length.
[  207.644196][T10571] sctp: [Deprecated]: syz.0.1950 (pid 10571) Use of int in max_burst socket option deprecated.
[  207.644196][T10571] Use struct sctp_assoc_value instead
[  207.947692][T10583] netlink: 'syz.1.1955': attribute type 14 has an invalid length.
[  208.956221][T10616] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1969'.
[  208.960155][T10616] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  208.964722][T10616] openvswitch: netlink: Key 0 has unexpected len 3 expected 0
[  209.061021][T10622] hsr0: entered promiscuous mode
[  209.584615][T10645] netlink: 'syz.3.1982': attribute type 1 has an invalid length.
[  210.662582][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  210.776977][T10700] netlink: 'syz.0.2007': attribute type 10 has an invalid length.
[  210.804208][T10700] bridge0: port 3(team0) entered disabled state
[  210.809115][T10700] team0: left allmulticast mode
[  210.813909][T10700] team_slave_0: left allmulticast mode
[  210.816231][T10700] team_slave_1: left allmulticast mode
[  210.819062][T10700] bond0: left allmulticast mode
[  210.822126][T10700] bond_slave_0: left allmulticast mode
[  210.824425][T10700] bond_slave_1: left allmulticast mode
[  210.826694][T10700] team0: left promiscuous mode
[  210.829226][T10700] team_slave_0: left promiscuous mode
[  210.835425][T10700] team_slave_1: left promiscuous mode
[  210.838002][T10700] bond0: left promiscuous mode
[  210.840463][T10700] bond_slave_0: left promiscuous mode
[  210.844758][T10700] bond_slave_1: left promiscuous mode
[  210.851099][T10700] bridge0: port 3(team0) entered disabled state
[  210.870706][T10700] 8021q: adding VLAN 0 to HW filter on device team0
[  211.013397][T10700] can: request_module (can-proto-0) failed.
[  211.198947][T10715] xt_HMARK: proto mask must be zero with L3 mode
[  211.222093][T10715] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2012'.
[  211.225001][T10715] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  211.228263][T10715] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  211.458522][T10726] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2017'.
[  211.463050][T10725] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2017'.
[  211.467142][T10726] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2017'.
[  211.733236][T10739] netlink: 'syz.0.2023': attribute type 2 has an invalid length.
[  211.736289][T10739] netlink: 'syz.0.2023': attribute type 8 has an invalid length.
[  211.739374][T10739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'.
[  212.517038][T10768] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  212.520323][T10768] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.2037'.
[  214.020664][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'.
[  214.026575][T10810] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2055'.
[  215.049269][T10831] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2064'.
[  215.204965][T10833] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2065'.
[  216.893596][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'.
[  216.896671][T10869] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  216.899947][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.398218][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'.
[  217.433261][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'.
[  217.487824][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'.
[  217.780952][T10898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2089'.
[  218.122041][T10917] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2100'.
[  219.622487][T10964] netlink: 'syz.3.2120': attribute type 6 has an invalid length.
[  219.625601][T10964] __nla_validate_parse: 2 callbacks suppressed
[  219.625616][T10964] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2120'.
[  221.370268][T11001] sctp: [Deprecated]: syz.3.2137 (pid 11001) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.370268][T11001] Use struct sctp_sack_info instead
[  221.400274][T11003] netlink: 'syz.3.2138': attribute type 2 has an invalid length.
[  221.478821][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'.
[  221.642727][T11019] netlink: 'syz.3.2146': attribute type 21 has an invalid length.
[  222.249986][T11043] C: renamed from team_slave_0 (while UP)
[  222.425039][T11043] netlink: 'syz.3.2157': attribute type 3 has an invalid length.
[  222.427743][T11043] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2157'.
[  222.435250][T11043] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  223.078494][T11075] netlink: 'syz.3.2172': attribute type 1 has an invalid length.
[  223.106556][T11077] mac80211_hwsim hwsim10 .3c: renamed from wlan1 (while UP)
[  223.230494][T11085] netlink: 'syz.0.2177': attribute type 3 has an invalid length.
[  223.238653][T11085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2177'.
[  223.570099][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  223.575424][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  223.579951][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  223.585166][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  223.589468][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  223.698397][T11091] lo speed is unknown, defaulting to 1000
[  223.856400][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2180'.
[  223.914280][T11091] chnl_net:caif_netlink_parms(): no params data found
[  223.990632][T11091] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.996817][T11091] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.999253][T11091] bridge_slave_0: entered allmulticast mode
[  224.002370][T11091] bridge_slave_0: entered promiscuous mode
[  224.006136][T11091] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.008969][T11091] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.011872][T11091] bridge_slave_1: entered allmulticast mode
[  224.014752][T11091] bridge_slave_1: entered promiscuous mode
[  224.038673][T11091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.045385][T11091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.073904][T11091] team0: Port device team_slave_0 added
[  224.078285][T11091] team0: Port device team_slave_1 added
[  224.111099][T11091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.114001][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.125111][T11091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.129997][T11091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.132800][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.143910][T11091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.195480][T11091] hsr_slave_0: entered promiscuous mode
[  224.197987][T11091] hsr_slave_1: entered promiscuous mode
[  224.203079][T11091] debugfs: 'hsr0' already exists in 'hsr'
[  224.204959][T11091] Cannot create hsr debugfs directory
[  224.230272][T11121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2190'.
[  224.246617][T11121] openvswitch: netlink: Message has 4 unknown bytes.
[  224.434953][T11091] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  224.440801][T11091] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  224.453759][T11091] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  224.465328][T11091] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  224.499262][T11091] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.501644][T11091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.503924][T11091] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.506062][T11091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.555230][T11091] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.575517][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.578885][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.604514][T11091] 8021q: adding VLAN 0 to HW filter on device team0
[  224.618938][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.621879][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.637325][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.640145][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.807943][T11091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.988111][T11172] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2206'.
[  225.285460][T11091] veth0_vlan: entered promiscuous mode
[  225.290563][T11091] veth1_vlan: entered promiscuous mode
[  225.322550][T11091] veth0_macvtap: entered promiscuous mode
[  225.330169][T11091] veth1_macvtap: entered promiscuous mode
[  225.343100][T11091] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.353306][T11091] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.363635][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.367039][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.373507][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.384384][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.432588][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.435487][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.475218][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.477979][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.501186][T11193] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2216'.
[  225.598175][T11203] netlink: 'syz.0.2219': attribute type 10 has an invalid length.
[  225.601158][T11203] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2219'.
[  225.671635][   T55] Bluetooth: hci1: command tx timeout
[  225.852771][T11220] netlink: 'syz.3.2225': attribute type 2 has an invalid length.
[  225.949984][T11226] netlink: 'syz.0.2230': attribute type 2 has an invalid length.
[  226.338035][T11248] delete_channel: no stack
[  226.634038][T11260] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2246'.
[  226.855528][T11275] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2254'.
[  226.868800][   T55] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  226.951390][ T5859] Bluetooth: hci3: command tx timeout
[  227.288150][T11299] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.2263'.
[  227.299770][T11299] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2263'.
[  227.675656][T11306] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  227.751730][ T5859] Bluetooth: hci1: command tx timeout
[  227.945279][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'.
[  227.948860][T11317] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2270'.
[  228.853894][T11333] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  228.855997][T11333] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  228.902925][T11341] delete_channel: no stack
[  228.904434][T11341] delete_channel: no stack
[  228.944001][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'.
[  229.338525][T11362] netlink: 'syz.3.2290': attribute type 39 has an invalid length.
[  229.404255][T11362] veth0_macvtap: left promiscuous mode
[  229.831729][ T5859] Bluetooth: hci1: command tx timeout
[  230.570181][T11378] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2297'.
[  230.895948][T11389] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2301'.
[  231.188444][T11390] syzkaller0: entered promiscuous mode
[  231.190699][T11390] syzkaller0: entered allmulticast mode
[  231.260459][T11396] netlink: 'syz.3.2302': attribute type 10 has an invalid length.
[  231.913145][ T5859] Bluetooth: hci1: command tx timeout
[  232.364200][T11396] bridge0: port 3(ip6gretap0) entered disabled state
[  232.366625][T11396] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.369144][T11396] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.377136][T11396] bridge0: port 3(ip6gretap0) entered blocking state
[  232.379278][T11396] bridge0: port 3(ip6gretap0) entered listening state
[  232.381618][T11396] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.383828][T11396] bridge0: port 2(bridge_slave_1) entered listening state
[  232.386159][T11396] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.388578][T11396] bridge0: port 1(bridge_slave_0) entered listening state
[  232.395851][T11396] team0: Port device bridge0 added
[  232.427015][T11401] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2303'.
[  233.045677][ T5859] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[  233.236845][T11446] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2325'.
[  235.534254][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2370'.
[  235.538969][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2370'.
[  235.547038][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2370'.
[  236.465331][T11577] delete_channel: no stack
[  236.707739][T11588] netlink: 'syz.3.2389': attribute type 3 has an invalid length.
[  236.710790][T11588] netlink: 'syz.3.2389': attribute type 1 has an invalid length.
[  236.716164][T11588] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2389'.
[  238.233181][T11615] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2401'.
[  238.268835][T11619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2403'.
[  238.374731][T11621] lo speed is unknown, defaulting to 1000
[  240.586935][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'.
[  241.221017][T11718] delete_channel: no stack
[  241.428006][T11723] netlink: 'syz.3.2449': attribute type 13 has an invalid length.
[  241.430671][T11723] netlink: 'syz.3.2449': attribute type 17 has an invalid length.
[  241.480084][T11723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.488227][ T5905] lo speed is unknown, defaulting to 1000
[  241.574709][T11731] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf
[  242.038718][T11747] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2459'.
[  242.245081][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2460'.
[  242.418326][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2463'.
[  242.500833][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2464'.
[  242.635628][T11765] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2467'.
[  242.832867][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'.
[  242.859173][T11775] netlink: 'syz.3.2472': attribute type 5 has an invalid length.
[  242.864026][T11775] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2472'.
[  243.099041][T11791] netlink: 'syz.0.2480': attribute type 5 has an invalid length.
[  244.140964][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.145875][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.150831][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.157777][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.170287][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.215739][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'.
[  244.236547][T11811] lo speed is unknown, defaulting to 1000
[  244.315868][T11823] netlink: 'syz.3.2493': attribute type 2 has an invalid length.
[  244.318333][T11823] netlink: 'syz.3.2493': attribute type 1 has an invalid length.
[  244.331967][T11823] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2493'.
[  244.334957][T11823] nbd: couldn't find a device at index 16
[  244.458639][T11825] netlink: 'syz.3.2494': attribute type 29 has an invalid length.
[  244.483598][T11825] netlink: 'syz.3.2494': attribute type 29 has an invalid length.
[  244.506200][T11825] netlink: 'syz.3.2494': attribute type 29 has an invalid length.
[  244.540490][T11825] netlink: 'syz.3.2494': attribute type 29 has an invalid length.
[  244.670486][T11811] chnl_net:caif_netlink_parms(): no params data found
[  244.767723][T11811] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.770285][T11811] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.773533][T11811] bridge_slave_0: entered allmulticast mode
[  244.777929][T11811] bridge_slave_0: entered promiscuous mode
[  244.788725][T11811] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.790983][T11811] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.794148][T11811] bridge_slave_1: entered allmulticast mode
[  244.798980][T11811] bridge_slave_1: entered promiscuous mode
[  244.850874][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.860276][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.924751][T11811] team0: Port device team_slave_0 added
[  244.929583][T11811] team0: Port device team_slave_1 added
[  244.984130][T11860] netlink: 'syz.0.2507': attribute type 29 has an invalid length.
[  244.988159][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.991015][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.006462][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.022661][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.025312][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.041329][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.084814][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2510'.
[  245.129061][T11811] hsr_slave_0: entered promiscuous mode
[  245.132124][T11811] hsr_slave_1: entered promiscuous mode
[  245.134928][T11811] debugfs: 'hsr0' already exists in 'hsr'
[  245.137286][T11811] Cannot create hsr debugfs directory
[  245.390189][T11811] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  245.400739][T11811] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  245.412147][T11811] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  245.417743][T11811] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  245.463896][T11811] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.466754][T11811] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.469823][T11811] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.472842][T11811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.540470][T11811] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.558533][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.564082][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.602662][T11811] 8021q: adding VLAN 0 to HW filter on device team0
[  245.614028][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.616846][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.638362][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.641500][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.846833][T11811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.074461][T11811] veth0_vlan: entered promiscuous mode
[  246.088164][T11811] veth1_vlan: entered promiscuous mode
[  246.116077][T11926] netlink: 'syz.3.2531': attribute type 21 has an invalid length.
[  246.123747][T11811] veth0_macvtap: entered promiscuous mode
[  246.128430][T11811] veth1_macvtap: entered promiscuous mode
[  246.147978][T11811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.164467][T11811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.173976][ T5903] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.176739][ T5903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.179997][ T5903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.193781][ T5903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.232407][   T55] Bluetooth: hci4: command tx timeout
[  246.268553][ T4643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.280494][ T4643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.306486][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.309333][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.307553][T11966] __nla_validate_parse: 4 callbacks suppressed
[  247.307569][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'.
[  247.342334][T11968] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  247.535974][T11984] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2558'.
[  247.893382][T12005] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2560'.
[  247.923332][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  247.940597][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  247.956313][    C0] bridge0: port 3(ip6gretap0) entered learning state
[  248.135359][T12008] option changes via remount are deprecated (pid=12003 comm=syz.0.2568)
[  248.311655][   T55] Bluetooth: hci4: command tx timeout
[  248.843204][T12029] validate_nla: 3 callbacks suppressed
[  248.843216][T12029] netlink: 'syz.0.2579': attribute type 2 has an invalid length.
[  248.857360][T12029] : entered promiscuous mode
[  248.910602][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2582'.
[  248.918394][T12035] netlink: 'syz.5.2582': attribute type 1 has an invalid length.
[  249.703748][T12088] netlink: 'syz.0.2603': attribute type 3 has an invalid length.
[  249.706282][T12088] netlink: 'syz.0.2603': attribute type 1 has an invalid length.
[  249.708551][T12088] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2603'.
[  249.751379][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  250.391862][   T55] Bluetooth: hci4: command tx timeout
[  252.379111][T12174] netlink: 'syz.0.2644': attribute type 3 has an invalid length.
[  252.384586][T12174] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2644'.
[  252.471741][   T55] Bluetooth: hci4: command tx timeout
[  253.036246][T12192] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2652'.
[  253.305815][   T32] wlan1: Trigger new scan to find an IBSS to join
[  254.686753][ T4645] wlan1: Creating new IBSS network, BSSID 1a:ae:e0:4e:f2:56
[  255.595062][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.597633][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.143521][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1431950050 wd_nsec: 1431950253
[  261.540415][T12249] option changes via remount are deprecated (pid=12241 comm=syz.0.2673)
[  261.566362][T12255] delete_channel: no stack
[  261.570683][T12255] delete_channel: no stack
[  261.887713][T12277] netlink: 'syz.5.2690': attribute type 11 has an invalid length.
[  262.080883][   T55] Bluetooth: hci3: unexpected event 0x31 length: 82 > 6
[  263.271449][    C0] bridge0: port 3(ip6gretap0) entered forwarding state
[  263.276749][    C0] bridge0: topology change detected, propagating
[  263.279544][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.282489][    C0] bridge0: topology change detected, propagating
[  263.285129][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.287899][    C0] bridge0: topology change detected, propagating
[  263.608124][   T55] Bluetooth: hci4: unexpected event 0x3b length: 15 > 10
[  263.769759][T12317] netlink: 328 bytes leftover after parsing attributes in process `syz.0.2708'.
[  264.015496][T12325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.286254][T12341] netlink: 'syz.0.2719': attribute type 10 has an invalid length.
[  264.353251][T12341] bond0: (slave .3c): Enslaving as an active interface with an up link
[  264.572844][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'.
[  265.226963][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2733'.
[  265.279922][T12377] netlink: 'syz.0.2734': attribute type 10 has an invalid length.
[  265.567295][T12393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2741'.
[  265.570972][T12393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2741'.
[  266.700701][T12414] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2750'.
[  266.743038][T12414] netlink: 'syz.3.2750': attribute type 21 has an invalid length.
[  266.759634][T12414] netlink: 'syz.3.2750': attribute type 10 has an invalid length.
[  267.052497][T12423] sctp: [Deprecated]: syz.0.2754 (pid 12423) Use of int in maxseg socket option.
[  267.052497][T12423] Use struct sctp_assoc_value instead
[  267.076023][T12427] netlink: 'syz.3.2756': attribute type 29 has an invalid length.
[  267.079219][T12427] netlink: 'syz.3.2756': attribute type 29 has an invalid length.
[  267.089355][T12427] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2756'.
[  267.093270][T12427] unsupported nla_type 58
[  267.188246][T12433] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2760'.
[  267.285434][T12439] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2762'.
[  268.008012][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2771'.
[  268.201182][T12474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.285260][T12516] syz.0.2797: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  269.308621][T12516] CPU: 0 UID: 0 PID: 12516 Comm: syz.0.2797 Not tainted syzkaller #0 PREEMPT(full) 
[  269.308648][T12516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.308654][T12516] Call Trace:
[  269.308658][T12516]  <TASK>
[  269.308663][T12516]  dump_stack_lvl+0x189/0x250
[  269.308679][T12516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.308689][T12516]  ? __pfx__printk+0x10/0x10
[  269.308700][T12516]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  269.308711][T12516]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  269.308721][T12516]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  269.308731][T12516]  warn_alloc+0x214/0x310
[  269.308741][T12516]  ? stack_depot_save_flags+0x41b/0x860
[  269.308750][T12516]  ? __pfx_warn_alloc+0x10/0x10
[  269.308758][T12516]  ? kasan_save_track+0x4f/0x80
[  269.308770][T12516]  ? xskq_create+0x56/0x170
[  269.308778][T12516]  ? xsk_init_queue+0xb0/0x110
[  269.308785][T12516]  ? xsk_setsockopt+0x57b/0x8d0
[  269.308791][T12516]  ? do_sock_setsockopt+0x17c/0x1b0
[  269.308801][T12516]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  269.308810][T12516]  ? do_syscall_64+0xfa/0x3b0
[  269.308819][T12516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.308830][T12516]  __vmalloc_node_range_noprof+0x125/0x12f0
[  269.308851][T12516]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  269.308861][T12516]  ? __kasan_kmalloc+0x93/0xb0
[  269.308873][T12516]  vmalloc_user_noprof+0xad/0xf0
[  269.308880][T12516]  ? xskq_create+0xbf/0x170
[  269.308888][T12516]  xskq_create+0xbf/0x170
[  269.308898][T12516]  xsk_init_queue+0xb0/0x110
[  269.308907][T12516]  xsk_setsockopt+0x57b/0x8d0
[  269.308915][T12516]  ? __pfx_xsk_setsockopt+0x10/0x10
[  269.308923][T12516]  ? __pfx_aa_sk_perm+0x10/0x10
[  269.308932][T12516]  ? __fget_files+0x2a/0x420
[  269.308939][T12516]  ? aa_sock_opt_perm+0xff/0x1b0
[  269.308949][T12516]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  269.308958][T12516]  ? __pfx_xsk_setsockopt+0x10/0x10
[  269.308966][T12516]  do_sock_setsockopt+0x17c/0x1b0
[  269.308978][T12516]  __x64_sys_setsockopt+0x13f/0x1b0
[  269.308997][T12516]  do_syscall_64+0xfa/0x3b0
[  269.309006][T12516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.309014][T12516]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  269.309024][T12516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.309032][T12516] RIP: 0033:0x7ff5ea78ec29
[  269.309040][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.309047][T12516] RSP: 002b:00007ff5eb60c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  269.309056][T12516] RAX: ffffffffffffffda RBX: 00007ff5ea9d5fa0 RCX: 00007ff5ea78ec29
[  269.309061][T12516] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  269.309066][T12516] RBP: 00007ff5ea811e41 R08: 0000000000000004 R09: 0000000000000000
[  269.309070][T12516] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  269.309075][T12516] R13: 00007ff5ea9d6038 R14: 00007ff5ea9d5fa0 R15: 00007fffeb292558
[  269.309088][T12516]  </TASK>
[  269.309125][T12516] Mem-Info:
[  269.426316][T12516] active_anon:14352 inactive_anon:0 isolated_anon:0
[  269.426316][T12516]  active_file:14819 inactive_file:38327 isolated_file:0
[  269.426316][T12516]  unevictable:1768 dirty:35 writeback:0
[  269.426316][T12516]  slab_reclaimable:10576 slab_unreclaimable:89380
[  269.426316][T12516]  mapped:28364 shmem:2419 pagetables:1217
[  269.426316][T12516]  sec_pagetables:0 bounce:0
[  269.426316][T12516]  kernel_misc_reclaimable:0
[  269.426316][T12516]  free:211175 free_pcp:22255 free_cma:0
[  269.458649][T12516] Node 0 active_anon:44308kB inactive_anon:0kB active_file:13916kB inactive_file:12308kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61016kB dirty:56kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4740kB pagetables:2792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  269.472055][T12516] Node 1 active_anon:13100kB inactive_anon:0kB active_file:45360kB inactive_file:141000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52440kB dirty:84kB writeback:0kB shmem:4712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7748kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  269.483873][T12516] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  269.505188][T12516] lowmem_reserve[]: 0 811 811 811 811
[  269.507505][T12516] Node 0 DMA32 free:285204kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44308kB inactive_anon:0kB active_file:13916kB inactive_file:12308kB unevictable:3536kB writepending:56kB present:1556484kB managed:830860kB mlocked:0kB bounce:0kB free_pcp:55240kB local_pcp:36940kB free_cma:0kB
[  269.519032][T12516] lowmem_reserve[]: 0 0 0 0 0
[  269.521857][T12516] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  269.535284][T12516] lowmem_reserve[]: 0 0 854 854 854
[  269.537890][T12516] Node 1 Normal free:85644kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13168kB inactive_anon:0kB active_file:45360kB inactive_file:141000kB unevictable:3536kB writepending:84kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33912kB local_pcp:17540kB free_cma:0kB
[  269.549505][T12516] lowmem_reserve[]: 0 0 0 0 0
[  269.552768][T12516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  269.560296][T12516] Node 0 DMA32: 474*4kB (UM) 333*8kB (UME) 207*16kB (UM) 301*32kB (UME) 139*64kB (UME) 34*128kB (UME) 16*256kB (UME) 11*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 57*4096kB (UM) = 285216kB
[  269.574575][T12516] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  269.584822][T12516] Node 1 Normal: 1309*4kB (UME) 741*8kB (UME) 425*16kB (UME) 193*32kB (UM) 47*64kB (UME) 83*128kB (UM) 9*256kB (ME) 7*512kB (UM) 5*1024kB (UM) 2*2048kB (M) 8*4096kB (M) = 85644kB
[  269.598609][T12516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  269.603826][T12516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  269.607956][T12516] 55565 total pagecache pages
[  269.610126][T12516] 0 pages in swap cache
[  269.614649][T12516] Free swap  = 124996kB
[  269.616586][T12516] Total swap = 124996kB
[  269.618771][T12516] 786301 pages RAM
[  269.620452][T12516] 0 pages HighMem/MovableOnly
[  269.623992][T12516] 241354 pages reserved
[  269.626011][T12516] 0 pages cma reserved
[  272.264101][T12534] __nla_validate_parse: 1 callbacks suppressed
[  272.264146][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2804'.
[  272.270113][T12534] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2804'.
[  272.536106][T12547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.689281][T12555] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2814'.
[  272.888549][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2819'.
[  275.228448][T12664] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2863'.
[  276.096906][T12705] syzkaller0: entered promiscuous mode
[  276.105188][T12705] syzkaller0: entered allmulticast mode
[  276.108646][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  278.847700][T12716] netlink: 'syz.3.2886': attribute type 41 has an invalid length.
[  279.957688][T12745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2899'.
[  280.234630][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2907'.
[  280.238173][T12762] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2907'.
[  280.486682][T12772] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2912'.
[  281.153401][T12782] netlink: 146936 bytes leftover after parsing attributes in process `syz.5.2916'.
[  281.156573][T12782] openvswitch: netlink: Message has 6 unknown bytes.
[  281.192585][T12782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  281.196048][T12782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  281.229284][T12784] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2916'.
[  282.268040][T12789] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  282.270151][T12789] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  284.752787][ T4643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  295.598340][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  295.602711][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  295.606407][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  295.611080][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  295.615278][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  295.650838][T12792] lo speed is unknown, defaulting to 1000
[  295.911165][T12792] chnl_net:caif_netlink_parms(): no params data found
[  295.979449][T12792] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.983087][T12792] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.985924][T12792] bridge_slave_0: entered allmulticast mode
[  295.989329][T12792] bridge_slave_0: entered promiscuous mode
[  295.995120][T12792] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.997600][T12792] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.000187][T12792] bridge_slave_1: entered allmulticast mode
[  296.003497][T12792] bridge_slave_1: entered promiscuous mode
[  296.029608][T12792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.034900][T12792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.058942][T12792] team0: Port device team_slave_0 added
[  296.063188][T12792] team0: Port device team_slave_1 added
[  296.087745][T12792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.090053][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.102066][T12792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.107515][T12792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.109830][T12792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.120978][T12792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.152279][T12792] hsr_slave_0: entered promiscuous mode
[  296.154738][T12792] hsr_slave_1: entered promiscuous mode
[  296.157058][T12792] debugfs: 'hsr0' already exists in 'hsr'
[  296.158939][T12792] Cannot create hsr debugfs directory
[  296.284496][T12792] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.294413][T12792] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.299123][T12792] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.304669][T12792] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  296.331012][T12792] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.334102][T12792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.336940][T12792] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.339654][T12792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.423118][T12792] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.452004][  T724] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.457360][  T724] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.476099][T12792] 8021q: adding VLAN 0 to HW filter on device team0
[  296.498917][  T724] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.501436][  T724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.512978][  T724] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.515694][  T724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.680447][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  296.686747][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  296.690076][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  296.697258][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  296.700568][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  296.718576][T12792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.746487][T12812] lo speed is unknown, defaulting to 1000
[  296.893466][T12792] veth0_vlan: entered promiscuous mode
[  296.900755][T12792] veth1_vlan: entered promiscuous mode
[  296.934466][T12792] veth0_macvtap: entered promiscuous mode
[  296.943213][T12792] veth1_macvtap: entered promiscuous mode
[  296.962710][T12792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.980124][T12792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.009779][ T5883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.019634][ T5883] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.044360][ T5883] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.047945][ T5883] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.211527][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.214239][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.214623][T12812] chnl_net:caif_netlink_parms(): no params data found
[  297.267117][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.271191][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.319636][T12812] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.322944][T12812] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.325855][T12812] bridge_slave_0: entered allmulticast mode
[  297.329737][T12812] bridge_slave_0: entered promiscuous mode
[  297.335419][T12812] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.340274][T12812] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.354656][T12812] bridge_slave_1: entered allmulticast mode
[  297.393253][T12812] bridge_slave_1: entered promiscuous mode
[  297.486409][T12833] netlink: 'syz.6.2923': attribute type 2 has an invalid length.
[  297.502792][T12812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.523366][T12812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.615259][T12812] team0: Port device team_slave_0 added
[  297.620022][T12812] team0: Port device team_slave_1 added
[  297.671615][   T55] Bluetooth: hci5: command tx timeout
[  297.702233][T12812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.704900][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.731817][T12812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.747172][T12812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.749815][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.781291][T12812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.875665][T12812] hsr_slave_0: entered promiscuous mode
[  297.884969][T12812] hsr_slave_1: entered promiscuous mode
[  297.893305][T12812] debugfs: 'hsr0' already exists in 'hsr'
[  297.897963][T12812] Cannot create hsr debugfs directory
[  297.941633][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  297.946974][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  297.952589][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  297.959324][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  297.968383][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.139522][T12835] lo speed is unknown, defaulting to 1000
[  298.410433][T12812] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  298.496686][T12812] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  298.559804][T12812] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  298.589079][T12812] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  298.712211][   T55] Bluetooth: hci3: command tx timeout
[  298.809325][T12812] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.838052][T12812] 8021q: adding VLAN 0 to HW filter on device team0
[  298.867619][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.870172][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.878614][T12835] chnl_net:caif_netlink_parms(): no params data found
[  298.927684][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.930464][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.977955][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2929'.
[  299.084690][T12835] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.090162][T12835] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.103302][T12835] bridge_slave_0: entered allmulticast mode
[  299.108888][T12835] bridge_slave_0: entered promiscuous mode
[  299.121835][T12835] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.131040][T12835] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.137586][T12835] bridge_slave_1: entered allmulticast mode
[  299.141990][T12835] bridge_slave_1: entered promiscuous mode
[  299.193716][T12835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.200137][T12835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.305610][T12812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.326045][T12835] team0: Port device team_slave_0 added
[  299.347464][T12835] team0: Port device team_slave_1 added
[  299.457809][T12835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.460254][T12835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.471920][T12835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.483078][T12835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.485665][T12835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.515484][T12835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.590114][T12835] hsr_slave_0: entered promiscuous mode
[  299.597592][T12835] hsr_slave_1: entered promiscuous mode
[  299.602546][T12835] debugfs: 'hsr0' already exists in 'hsr'
[  299.604864][T12835] Cannot create hsr debugfs directory
[  299.694990][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.755767][   T55] Bluetooth: hci5: command tx timeout
[  299.976580][T12835] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  299.988994][T12835] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  299.992742][   T55] Bluetooth: hci6: command tx timeout
[  300.010745][T12835] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  300.019423][T12835] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  300.139676][T12812] veth0_vlan: entered promiscuous mode
[  300.150434][T12812] veth1_vlan: entered promiscuous mode
[  300.196510][T12835] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.218386][T12812] veth0_macvtap: entered promiscuous mode
[  300.242861][T12812] veth1_macvtap: entered promiscuous mode
[  300.265316][T12835] 8021q: adding VLAN 0 to HW filter on device team0
[  300.286282][  T724] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.289009][  T724] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.305010][T12812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.312719][  T724] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.315367][  T724] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.334835][T12812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.360444][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.366038][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.374691][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.378269][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.561126][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.566681][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.628084][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.630752][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.682633][T12835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.801867][   T55] Bluetooth: hci3: command tx timeout
[  300.945733][T12835] veth0_vlan: entered promiscuous mode
[  300.974593][T12835] veth1_vlan: entered promiscuous mode
[  300.997800][T12835] veth0_macvtap: entered promiscuous mode
[  301.003248][T12835] veth1_macvtap: entered promiscuous mode
[  301.023147][T12835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.030027][T12835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.093229][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.121065][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.130395][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.138561][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.244644][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.254197][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.287030][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.295062][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.361657][T12946] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2921'.
[  301.618354][T12956] tap0: tun_chr_ioctl cmd 1074812118
[  301.833711][   T55] Bluetooth: hci5: command tx timeout
[  301.902617][T12967] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2964'.
[  302.072701][   T55] Bluetooth: hci6: command tx timeout
[  302.881412][   T55] Bluetooth: hci3: command tx timeout
[  303.507114][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2984'.
[  303.531330][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2984'.
[  303.917558][   T55] Bluetooth: hci5: command tx timeout
[  304.152022][   T55] Bluetooth: hci6: command tx timeout
[  305.284957][   T55] Bluetooth: hci3: command tx timeout
[  306.237412][   T55] Bluetooth: hci6: command tx timeout
[  306.497753][T13083] IPv6: Can't replace route, no match found
[  308.107830][T13129] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3033'.
[  308.127867][T13129] netlink: zone id is out of range
[  308.130097][T13129] netlink: zone id is out of range
[  308.138460][T13129] netlink: get zone limit has 8 unknown bytes
[  308.206635][T13135] veth0_vlan: entered allmulticast mode
[  308.299701][T13139] veth0_vlan: left promiscuous mode
[  308.306156][T13139] veth0_vlan: entered promiscuous mode
[  309.237558][T13176] netlink: 'syz.8.3053': attribute type 2 has an invalid length.
[  309.240138][T13176] netlink: 130532 bytes leftover after parsing attributes in process `syz.8.3053'.
[  309.269384][T13180] netlink: 64691 bytes leftover after parsing attributes in process `syz.8.3055'.
[  309.899061][T13186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  309.902092][T13186] IPv6: NLM_F_CREATE should be set when creating new route
[  309.905087][T13186] IPv6: NLM_F_CREATE should be set when creating new route
[  309.908043][T13186] IPv6: NLM_F_CREATE should be set when creating new route
[  310.019448][T13194] netlink: 'syz.6.3062': attribute type 32 has an invalid length.
[  310.605750][T13229] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3077'.
[  311.637046][T13261] netlink: 'syz.8.3089': attribute type 10 has an invalid length.
[  311.651074][T13261] bond0: (slave bond_slave_0): Releasing backup interface
[  312.116577][T13277] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3098'.
[  312.141850][T13279] netlink: 'syz.7.3099': attribute type 21 has an invalid length.
[  312.145202][T13279] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3099'.
[  312.191772][T13281] netlink: 'syz.6.3100': attribute type 10 has an invalid length.
[  312.194900][T13281] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3100'.
[  312.200034][T13281] team0: entered promiscuous mode
[  312.205153][T13281] team_slave_0: entered promiscuous mode
[  312.207652][T13281] team_slave_1: entered promiscuous mode
[  312.210774][T13281] bridge0: port 3(team0) entered blocking state
[  312.215530][T13281] bridge0: port 3(team0) entered disabled state
[  312.218259][T13281] team0: entered allmulticast mode
[  312.220457][T13281] team_slave_0: entered allmulticast mode
[  312.223749][T13281] team_slave_1: entered allmulticast mode
[  312.230956][T13281] bridge0: port 3(team0) entered blocking state
[  312.233721][T13281] bridge0: port 3(team0) entered forwarding state
[  312.390180][T13293] Unknown options in mask b7f2
[  313.735584][T13335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.007710][T13346] netlink: 17023 bytes leftover after parsing attributes in process `syz.7.3128'.
[  314.026294][T13345] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3130'.
[  314.769834][T13376] netlink: 'syz.8.3142': attribute type 21 has an invalid length.
[  314.773901][T13376] netlink: 'syz.8.3142': attribute type 15 has an invalid length.
[  314.777223][T13376] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3142'.
[  314.784423][T13376] IPv6: NLM_F_CREATE should be specified when creating new route
[  314.796671][T13376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.800068][T13376] IPv6: NLM_F_CREATE should be set when creating new route
[  314.804123][T13376] IPv6: NLM_F_CREATE should be set when creating new route
[  314.807618][T13376] IPv6: NLM_F_CREATE should be set when creating new route
[  314.978784][T13385] openvswitch: netlink: Flow actions attr not present in new flow.
[  315.127815][T13397] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  315.151834][T13398] raw_sendmsg: syz.7.3150 forgot to set AF_INET. Fix it!
[  315.324210][T13402] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3150'.
[  315.409071][T13404] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3154'.
[  315.413895][T13404] netlink: 46 bytes leftover after parsing attributes in process `syz.6.3154'.
[  315.417674][T13404] netlink: 46 bytes leftover after parsing attributes in process `syz.6.3154'.
[  315.572339][T13409] netlink: 209588 bytes leftover after parsing attributes in process `syz.8.3156'.
[  315.678732][   T53] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  316.066699][T13421] netlink: 'syz.6.3160': attribute type 10 has an invalid length.
[  316.070173][T13421] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3160'.
[  316.125503][T13426] delete_channel: no stack
[  316.153919][T13427] netlink: 'syz.8.3163': attribute type 4 has an invalid length.
[  316.156871][T13427] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3163'.
[  316.539065][   T55] Bluetooth: hci6: unexpected event 0x04 length: 15 > 10
[  316.539330][   T55] Bluetooth: hci6: connection err: -111
[  316.678502][T13435] netlink: 'syz.8.3167': attribute type 10 has an invalid length.
[  316.853437][T13435] bridge0: port 3(netdevsim0) entered blocking state
[  316.856419][T13435] bridge0: port 3(netdevsim0) entered disabled state
[  316.859283][T13435] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  316.887832][T13435] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  317.034520][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  317.036846][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  318.324590][T13495] netlink: 'syz.6.3191': attribute type 6 has an invalid length.
[  318.964667][T13510] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode
[  318.968264][T13510] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  319.845323][T13566] __nla_validate_parse: 2 callbacks suppressed
[  319.845333][T13566] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3221'.
[  319.936547][T13573] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3225'.
[  319.959443][T13575] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3227'.
[  320.054450][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3229'.
[  320.802580][   T55] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  321.061023][ T5299] udevd[5299]: worker [13031] terminated by signal 33 (Unknown signal 33)
[  321.091478][ T5299] udevd[5299]: worker [13031] failed while handling '/devices/virtual/block/loop8'
[  322.175534][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3276'.
[  323.561461][T13755] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3303'.
[  323.765528][T13763] netlink: 'syz.8.3307': attribute type 4 has an invalid length.
[  323.923927][T13772] netlink: 'syz.8.3311': attribute type 39 has an invalid length.
[  325.450917][T13806] netlink: 'syz.6.3325': attribute type 1 has an invalid length.
[  325.455951][T13806] netlink: 'syz.6.3325': attribute type 3 has an invalid length.
[  325.459090][T13806] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3325'.
[  325.737837][T13822] netlink: 'syz.6.3333': attribute type 3 has an invalid length.
[  325.740738][T13822] netlink: 199752 bytes leftover after parsing attributes in process `syz.6.3333'.
[  326.166919][T13846] netlink: 'syz.7.3345': attribute type 21 has an invalid length.
[  326.207076][   T33] audit: type=1107 audit(1758558861.083:3): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  326.275984][T13852] netlink: 'syz.7.3348': attribute type 21 has an invalid length.
[  327.019400][T13885] netlink: 'syz.7.3362': attribute type 21 has an invalid length.
[  327.023966][T13885] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3362'.
[  327.830124][T13890] veth1_macvtap: left promiscuous mode
[  328.247187][T13897] netlink: 'syz.7.3367': attribute type 2 has an invalid length.
[  328.249525][T13897] netlink: 16098 bytes leftover after parsing attributes in process `syz.7.3367'.
[  328.459466][T13909] netlink: 1057 bytes leftover after parsing attributes in process `syz.8.3373'.
[  328.523551][T13914] netlink: 'syz.7.3372': attribute type 29 has an invalid length.
[  332.888618][T13959] validate_nla: 1 callbacks suppressed
[  332.888630][T13959] netlink: 'syz.7.3394': attribute type 10 has an invalid length.
[  332.898419][T13959] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  332.902787][T13959] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  332.907150][T13959] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  332.938975][T13960] netlink: 'syz.6.3393': attribute type 28 has an invalid length.
[  332.958169][T13960] netlink: 'syz.6.3393': attribute type 29 has an invalid length.
[  332.960744][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3393'.
[  333.077557][T13970] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  333.974886][T14000] netlink: 'syz.8.3413': attribute type 1 has an invalid length.
[  333.977816][T14000] netlink: 'syz.8.3413': attribute type 2 has an invalid length.
[  334.105419][T14000] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.3413'.
[  334.473105][T14016] netlink: 'syz.8.3420': attribute type 3 has an invalid length.
[  335.452733][T14060] netlink: zone id is out of range
[  335.472717][T14060] netlink: zone id is out of range
[  335.490241][T14060] netlink: zone id is out of range
[  335.496832][T14060] netlink: zone id is out of range
[  335.520371][T14060] netlink: zone id is out of range
[  335.543273][T14060] netlink: zone id is out of range
[  335.545570][T14060] netlink: zone id is out of range
[  335.547674][T14060] netlink: zone id is out of range
[  335.636851][T14060] netlink: set zone limit has 4 unknown bytes
[  336.025610][T14073] netlink: 'syz.6.3443': attribute type 10 has an invalid length.
[  336.028051][T14073] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.3443'.
[  336.704987][T14112] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3461'.
[  336.733866][T14117] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3462'.
[  336.737437][T14117] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3462'.
[  337.047549][T14125] netlink: 'syz.6.3466': attribute type 10 has an invalid length.
[  337.050818][T14125] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3466'.
[  337.194437][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3468'.
[  337.298632][T14130] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  339.207195][T14195] netlink: 'syz.7.3497': attribute type 5 has an invalid length.
[  339.296495][T14199] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.3499'.
[  339.358527][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3500'.
[  339.709681][T14216] delete_channel: no stack
[  339.792328][T14218] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3508'.
[  340.408559][T14236] netlink: 'syz.6.3517': attribute type 2 has an invalid length.
[  340.417166][T14236] netlink: 51 bytes leftover after parsing attributes in process `syz.6.3517'.
[  343.968882][T14249] warn_alloc: 1 callbacks suppressed
[  343.968898][T14249] syz.8.3522: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  343.987304][T14249] CPU: 1 UID: 0 PID: 14249 Comm: syz.8.3522 Not tainted syzkaller #0 PREEMPT(full) 
[  343.987325][T14249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.987334][T14249] Call Trace:
[  343.987341][T14249]  <TASK>
[  343.987348][T14249]  dump_stack_lvl+0x189/0x250
[  343.987380][T14249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.987415][T14249]  ? __pfx__printk+0x10/0x10
[  343.987435][T14249]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  343.987452][T14249]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  343.987470][T14249]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  343.987488][T14249]  warn_alloc+0x214/0x310
[  343.987507][T14249]  ? __pfx_warn_alloc+0x10/0x10
[  343.987528][T14249]  ? __get_vm_area_node+0x28f/0x300
[  343.987550][T14249]  ? hash_netport4_resize+0x235/0x1b60
[  343.987573][T14249]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  343.987610][T14249]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  343.987629][T14249]  ? rcu_is_watching+0x15/0xb0
[  343.987644][T14249]  ? hash_netport4_resize+0x235/0x1b60
[  343.987662][T14249]  ? hash_netport4_resize+0x235/0x1b60
[  343.987677][T14249]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  343.987699][T14249]  ? hash_netport4_resize+0x235/0x1b60
[  343.987724][T14249]  hash_netport4_resize+0x235/0x1b60
[  343.987742][T14249]  ? hash_netport4_uadt+0xc97/0xf30
[  343.987761][T14249]  ? __pfx_hash_netport4_add+0x10/0x10
[  343.987779][T14249]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  343.987804][T14249]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  343.987827][T14249]  call_ad+0x44e/0xb00
[  343.987850][T14249]  ? __pfx_call_ad+0x10/0x10
[  343.987874][T14249]  ? __nla_parse+0x40/0x60
[  343.987893][T14249]  ip_set_ad+0x791/0x930
[  343.987914][T14249]  ? __pfx_ip_set_ad+0x10/0x10
[  343.987926][T14249]  ? perf_trace_lock+0xec/0x3b0
[  343.987998][T14249]  nfnetlink_rcv_msg+0xb4d/0x1130
[  343.988016][T14249]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  343.988044][T14249]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  343.988057][T14249]  ? kasan_save_free_info+0x46/0x50
[  343.988092][T14249]  ? perf_trace_preemptirq_template+0xa3/0x340
[  343.988111][T14249]  ? kasan_quarantine_put+0x3d/0x220
[  343.988143][T14249]  netlink_rcv_skb+0x208/0x470
[  343.988161][T14249]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  343.988176][T14249]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  343.988200][T14249]  ? bpf_lsm_capable+0x9/0x20
[  343.988212][T14249]  ? security_capable+0x7e/0x2e0
[  343.988232][T14249]  nfnetlink_rcv+0x26a/0x2520
[  343.988249][T14249]  ? __dev_queue_xmit+0x1d79/0x3b50
[  343.988278][T14249]  ? __dev_queue_xmit+0x27b/0x3b50
[  343.988308][T14249]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  343.988322][T14249]  ? __pfx___dev_queue_xmit+0x10/0x10
[  343.988353][T14249]  ? ref_tracker_free+0x63a/0x7d0
[  343.988375][T14249]  ? __asan_memcpy+0x40/0x70
[  343.988392][T14249]  ? __pfx_ref_tracker_free+0x10/0x10
[  343.988405][T14249]  ? __skb_clone+0x63/0x7a0
[  343.988427][T14249]  ? perf_trace_lock+0xec/0x3b0
[  343.988439][T14249]  ? __skb_clone+0x483/0x7a0
[  343.988460][T14249]  ? __pfx_perf_trace_lock+0x10/0x10
[  343.988472][T14249]  ? skb_clone+0x246/0x3a0
[  343.988493][T14249]  ? __netlink_deliver_tap+0x807/0x850
[  343.988509][T14249]  ? netlink_deliver_tap+0x2e/0x1b0
[  343.988531][T14249]  ? netlink_deliver_tap+0x2e/0x1b0
[  343.988552][T14249]  netlink_unicast+0x82f/0x9e0
[  343.988573][T14249]  ? __pfx_netlink_unicast+0x10/0x10
[  343.988590][T14249]  ? netlink_sendmsg+0x642/0xb30
[  343.988605][T14249]  ? skb_put+0x11b/0x210
[  343.988624][T14249]  netlink_sendmsg+0x805/0xb30
[  343.988649][T14249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  343.988669][T14249]  ? aa_sock_msg_perm+0xf1/0x1d0
[  343.988687][T14249]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  343.988703][T14249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  343.988720][T14249]  __sock_sendmsg+0x21c/0x270
[  343.988738][T14249]  ____sys_sendmsg+0x505/0x830
[  343.988761][T14249]  ? __pfx_____sys_sendmsg+0x10/0x10
[  343.988787][T14249]  ? import_iovec+0x74/0xa0
[  343.988810][T14249]  ___sys_sendmsg+0x21f/0x2a0
[  343.988831][T14249]  ? __pfx____sys_sendmsg+0x10/0x10
[  343.988867][T14249]  ? __fget_files+0x2a/0x420
[  343.988891][T14249]  ? __fget_files+0x2a/0x420
[  343.988903][T14249]  ? __fget_files+0x3a0/0x420
[  343.988925][T14249]  __x64_sys_sendmsg+0x19b/0x260
[  343.988944][T14249]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  343.989001][T14249]  ? rcu_is_watching+0x15/0xb0
[  343.989021][T14249]  ? do_syscall_64+0xbe/0x3b0
[  343.989042][T14249]  do_syscall_64+0xfa/0x3b0
[  343.989057][T14249]  ? lockdep_hardirqs_on+0x9c/0x150
[  343.989072][T14249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.989085][T14249]  ? exc_page_fault+0x9f/0xf0
[  343.989101][T14249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.989114][T14249] RIP: 0033:0x7f41f2d8ec29
[  343.989128][T14249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.989140][T14249] RSP: 002b:00007f41f3c8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.989156][T14249] RAX: ffffffffffffffda RBX: 00007f41f2fd5fa0 RCX: 00007f41f2d8ec29
[  343.989166][T14249] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[  343.989174][T14249] RBP: 00007f41f2e11e41 R08: 0000000000000000 R09: 0000000000000000
[  343.989182][T14249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.989190][T14249] R13: 00007f41f2fd6038 R14: 00007f41f2fd5fa0 R15: 00007ffc9635aa88
[  343.989212][T14249]  </TASK>
[  344.183696][T14249] Mem-Info:
[  344.184990][T14249] active_anon:14989 inactive_anon:0 isolated_anon:0
[  344.184990][T14249]  active_file:14852 inactive_file:38359 isolated_file:0
[  344.184990][T14249]  unevictable:1768 dirty:46 writeback:0
[  344.184990][T14249]  slab_reclaimable:6473 slab_unreclaimable:97513
[  344.184990][T14249]  mapped:38620 shmem:2432 pagetables:1277
[  344.184990][T14249]  sec_pagetables:0 bounce:0
[  344.184990][T14249]  kernel_misc_reclaimable:0
[  344.184990][T14249]  free:174765 free_pcp:26524 free_cma:0
[  344.201712][T14249] Node 0 active_anon:44400kB inactive_anon:0kB active_file:13920kB inactive_file:12372kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61784kB dirty:36kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5296kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.213346][T14249] Node 1 active_anon:15556kB inactive_anon:0kB active_file:45488kB inactive_file:141064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92696kB dirty:148kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8104kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.225155][T14249] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  344.236416][T14249] lowmem_reserve[]: 0 811 811 811 811
[  344.239471][T14249] Node 0 DMA32 free:287312kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44400kB inactive_anon:0kB active_file:13920kB inactive_file:12372kB unevictable:3536kB writepending:36kB present:1556484kB managed:830860kB mlocked:0kB bounce:0kB free_pcp:41192kB local_pcp:20256kB free_cma:0kB
[  344.252242][T14249] lowmem_reserve[]: 0 0 0 0 0
[  344.254258][T14249] Node 1 DMA32 free:344016kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:260kB inactive_anon:0kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:30632kB local_pcp:22128kB free_cma:0kB
[  344.265811][T14249] lowmem_reserve[]: 0 0 854 854 854
[  344.267911][T14249] Node 1 Normal free:52372kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15464kB inactive_anon:0kB active_file:45488kB inactive_file:141032kB unevictable:3536kB writepending:148kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34256kB local_pcp:14220kB free_cma:0kB
[  344.281372][T14249] lowmem_reserve[]: 0 0 0 0 0
[  344.283282][T14249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  344.288050][T14249] Node 0 DMA32: 717*4kB (UM) 165*8kB (UME) 181*16kB (UME) 643*32kB (UME) 222*64kB (UME) 62*128kB (UME) 42*256kB (UME) 13*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 52*4096kB (UM) = 287372kB
[  344.296324][T14249] Node 1 DMA32: 152*4kB (UME) 102*8kB (UM) 42*16kB (UME) 76*32kB (UME) 29*64kB (UME) 8*128kB (UME) 21*256kB (UM) 17*512kB (M) 3*1024kB (ME) 6*2048kB (UME) 75*4096kB (M) = 344048kB
[  344.303300][T14249] Node 1 Normal: 1*4kB (E) 37*8kB (E) 329*16kB (ME) 297*32kB (UME) 94*64kB (UME) 126*128kB (UME) 17*256kB (UME) 11*512kB (ME) 5*1024kB (ME) 0*2048kB 0*4096kB = 52316kB
[  344.309848][T14249] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  344.313762][T14249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  344.317418][T14249] 55643 total pagecache pages
[  344.319284][T14249] 0 pages in swap cache
[  344.320880][T14249] Free swap  = 124996kB
[  344.322579][T14249] Total swap = 124996kB
[  344.324191][T14249] 786301 pages RAM
[  344.325641][T14249] 0 pages HighMem/MovableOnly
[  344.327454][T14249] 241354 pages reserved
[  344.329059][T14249] 0 pages cma reserved
[  344.636229][T14286] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3540'.
[  344.824462][T14298] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  344.858275][T14302] netlink: 'syz.8.3548': attribute type 1 has an invalid length.
[  344.867228][T14302] netlink: 'syz.8.3548': attribute type 4 has an invalid length.
[  344.910389][T14307] netlink: 'syz.6.3550': attribute type 21 has an invalid length.
[  344.918000][T14307] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3550'.
[  344.925217][T14307] netlink: 'syz.6.3550': attribute type 5 has an invalid length.
[  344.928641][T14307] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3550'.
[  345.086143][T14318] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.3555'.
[  345.448330][T14330] netlink: 'syz.8.3560': attribute type 13 has an invalid length.
[  345.457494][T14330] netlink: 'syz.8.3560': attribute type 17 has an invalid length.
[  345.797296][T14330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  346.026339][T14347] : renamed from vlan0 (while UP)
[  346.310946][T14368] netlink: 763 bytes leftover after parsing attributes in process `syz.7.3577'.
[  346.449399][T14374] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3579'.
[  346.704882][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  346.718333][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3587'.
[  347.610817][T14420] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3601'.
[  347.613677][T14420] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3601'.
[  347.847288][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3611'.
[  348.135151][ T5859] Bluetooth: hci5: unexpected event 0x0f length: 15 > 4
[  348.567174][T14462] netlink: 'syz.7.3621': attribute type 21 has an invalid length.
[  349.174066][T14498] netlink: 'syz.6.3636': attribute type 6 has an invalid length.
[  349.346659][T14504] netlink: 'syz.7.3638': attribute type 8 has an invalid length.
[  349.504678][T14508] netlink: 'syz.7.3639': attribute type 1 has an invalid length.
[  349.831463][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  349.994180][T14517] __nla_validate_parse: 5 callbacks suppressed
[  349.994196][T14517] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3643'.
[  350.255085][T14532] validate_nla: 1 callbacks suppressed
[  350.255103][T14532] netlink: 'syz.8.3649': attribute type 9 has an invalid length.
[  351.310763][T14556] : entered promiscuous mode
[  351.617742][T14574] netlink: 'syz.7.3670': attribute type 39 has an invalid length.
[  351.912973][T14581] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3673'.
[  352.389683][   T55] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  352.394216][   T55] Bluetooth: hci5: Injecting HCI hardware error event
[  352.398581][   T55] Bluetooth: hci5: hardware error 0x00
[  353.125772][T14610] netlink: 'syz.7.3684': attribute type 3 has an invalid length.
[  353.128410][T14610] netlink: 'syz.7.3684': attribute type 4 has an invalid length.
[  353.130948][T14610] netlink: 9067 bytes leftover after parsing attributes in process `syz.7.3684'.
[  353.223603][T14619] netlink: 'syz.8.3688': attribute type 13 has an invalid length.
[  353.226347][T14619] netlink: 'syz.8.3688': attribute type 17 has an invalid length.
[  353.272506][T14619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  354.791636][   T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  362.565200][T14637] netlink: 'syz.8.3693': attribute type 32 has an invalid length.
[  362.600817][T14642] netlink: 'syz.7.3695': attribute type 21 has an invalid length.
[  362.603491][T14642] netlink: 'syz.7.3695': attribute type 6 has an invalid length.
[  362.605931][T14642] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3695'.
[  362.951745][T14662] netlink: 'syz.6.3703': attribute type 2 has an invalid length.
[  362.954933][T14662] netlink: 'syz.6.3703': attribute type 1 has an invalid length.
[  362.958332][T14662] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.3703'.
[  362.968187][T14662] nbd: couldn't find device at index 16
[  363.011645][T14664] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3704'.
[  363.058355][T14658] : entered promiscuous mode
[  363.060579][T14658] : entered allmulticast mode
[  363.238876][T14674] netlink: 'syz.8.3709': attribute type 9 has an invalid length.
[  363.405966][   T33] audit: type=1107 audit(1758558898.283:4): pid=14684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  363.717730][T14699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  365.454382][T14725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.608863][T14739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.668531][T14747] netlink: 'syz.6.3741': attribute type 1 has an invalid length.
[  365.694618][T14747] netlink: 'syz.6.3741': attribute type 2 has an invalid length.
[  366.569162][T14757] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3744'.
[  366.623811][T14763] netlink: 'syz.7.3747': attribute type 1 has an invalid length.
[  366.926113][T14783] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3751'.
[  367.126171][T14788] netlink: 'syz.6.3752': attribute type 23 has an invalid length.
[  367.719263][T14838] validate_nla: 1 callbacks suppressed
[  367.719274][T14838] netlink: 'syz.7.3761': attribute type 1 has an invalid length.
[  367.727826][T14838] netlink: 'syz.7.3761': attribute type 3 has an invalid length.
[  367.730335][T14838] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3761'.
[  367.914928][T14843] vcan0 speed is unknown, defaulting to 1000
[  367.936078][T14843] vcan0 speed is unknown, defaulting to 1000
[  368.012774][T14843] vcan0 speed is unknown, defaulting to 1000
[  368.187676][T14851] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3766'.
[  368.538319][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.648549][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3772'.
[  368.690584][T14859] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3771'.
[  368.716746][T14861] : entered promiscuous mode
[  368.785559][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.901789][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.919275][T14865] netlink: 'syz.6.3774': attribute type 4 has an invalid length.
[  368.962479][T14843] infiniband syz1: set active
[  368.966517][T14843] infiniband syz1: added vcan0
[  368.969518][T14871] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3777'.
[  368.982142][T14843] syz1: rxe_create_cq: returned err = -12
[  368.984465][T14843] infiniband syz1: Couldn't create ib_mad CQ
[  368.997682][T14843] infiniband syz1: Couldn't open port 1
[  369.017444][T14843] RDS/IB: syz1: added
[  369.023700][T14843] smc: adding ib device syz1 with port count 1
[  369.025960][T14843] smc:    ib device syz1 port 1 has pnetid 
[  369.039843][    T9] vcan0 speed is unknown, defaulting to 1000
[  369.054496][ T5904] vcan0 speed is unknown, defaulting to 1000
[  369.057909][T14843] vcan0 speed is unknown, defaulting to 1000
[  369.082808][T14879] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.3779'.
[  369.234783][   T12] ip6gretap0: left allmulticast mode
[  369.240611][   T12] ip6gretap0: left promiscuous mode
[  369.256254][   T12] bridge0: port 3(ip6gretap0) entered disabled state
[  369.261772][   T12] bridge_slave_1: left allmulticast mode
[  369.263822][   T12] bridge_slave_1: left promiscuous mode
[  369.265671][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.271090][   T12] bridge_slave_0: left allmulticast mode
[  369.274905][   T12] bridge_slave_0: left promiscuous mode
[  369.276796][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.567737][   T12] team0: Port device bridge0 removed
[  369.830823][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.835819][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.840374][   T12] bond0 (unregistering): Released all slaves
[  369.854131][T14843] vcan0 speed is unknown, defaulting to 1000
[  369.857709][T14898] tap0: tun_chr_ioctl cmd 1074025675
[  369.859556][T14898] tap0: persist enabled
[  369.864247][T14899] tap0: tun_chr_ioctl cmd 1074025675
[  369.871424][T14899] tap0: persist enabled
[  369.996132][T14903] netlink: 'syz.8.3788': attribute type 11 has an invalid length.
[  369.999187][T14903] netlink: 'syz.8.3788': attribute type 15 has an invalid length.
[  370.012970][T14903] netlink: 'syz.8.3788': attribute type 16 has an invalid length.
[  370.016056][T14903] netlink: 'syz.8.3788': attribute type 21 has an invalid length.
[  370.019045][T14903] netlink: 'syz.8.3788': attribute type 25 has an invalid length.
[  370.031317][T14903] netlink: 'syz.8.3788': attribute type 27 has an invalid length.
[  370.034531][T14903] netlink: 'syz.8.3788': attribute type 28 has an invalid length.
[  370.199731][T14843] vcan0 speed is unknown, defaulting to 1000
[  370.313294][ T5859] Bluetooth: hci4: command 0x0406 tx timeout
[  370.478673][T14927] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3796'.
[  370.488322][T14843] vcan0 speed is unknown, defaulting to 1000
[  370.788572][T14843] vcan0 speed is unknown, defaulting to 1000
[  370.945061][T14961] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.947534][T14961] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.953526][T14961] bridge0: entered allmulticast mode
[  370.965032][T14843] vcan0 speed is unknown, defaulting to 1000
[  370.978479][T14961] netdevsim netdevsim8 netdevsim0: left allmulticast mode
[  370.984612][T14961] netdevsim netdevsim8 netdevsim0: left promiscuous mode
[  370.991771][T14961] bridge0: port 3(netdevsim0) entered disabled state
[  371.021517][T14961] bridge_slave_1: left allmulticast mode
[  371.023324][T14961] bridge_slave_1: left promiscuous mode
[  371.025189][T14961] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.042226][T14961] bridge_slave_0: left allmulticast mode
[  371.046305][T14961] bridge_slave_0: left promiscuous mode
[  371.049361][T14961] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.199609][T14843] vcan0 speed is unknown, defaulting to 1000
[  371.470933][T14843] vcan0 speed is unknown, defaulting to 1000
[  371.543477][T14979] lo speed is unknown, defaulting to 1000
[  371.553358][   T12] : left promiscuous mode
[  371.729747][T14843] vcan0 speed is unknown, defaulting to 1000
[  371.898180][T14985] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3813'.
[  372.815882][   T12] hsr_slave_0: left promiscuous mode
[  372.820605][   T12] hsr_slave_1: left promiscuous mode
[  372.837471][   T12] veth1_macvtap: left promiscuous mode
[  372.844425][   T12] veth1_vlan: left promiscuous mode
[  372.846164][   T12] veth0_vlan: left promiscuous mode
[  373.008097][   T12] team0 (unregistering): Port device vlan0 removed
[  373.181122][   T12] team0 (unregistering): Port device team_slave_1 removed
[  373.207190][   T12] team0 (unregistering): Port device C removed
[  373.491174][  T724] smc: removing ib device syz2
[  373.502105][ T5852] lo speed is unknown, defaulting to 1000
[  373.504198][ T5852] syz2: Port: 1 Link DOWN
[  373.903318][T15033] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3832'.
[  374.612051][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3841'.
[  375.048162][T15071] syzkaller0: entered promiscuous mode
[  375.049860][T15071] syzkaller0: entered allmulticast mode
[  375.060147][T15073] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.3851'.
[  376.932627][T15075] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3852'.
[  377.097542][T15088] validate_nla: 3 callbacks suppressed
[  377.097559][T15088] netlink: 'syz.8.3858': attribute type 1 has an invalid length.
[  377.425984][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.484459][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  378.486493][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  378.625468][T15146] netlink: 'syz.7.3881': attribute type 2 has an invalid length.
[  378.627890][T15146] netlink: 51 bytes leftover after parsing attributes in process `syz.7.3881'.
[  380.171572][T15200] smc: removing ib device syz1
[  381.789188][T15233] netlink: 'syz.7.3919': attribute type 4 has an invalid length.
[  381.794555][T15233] netlink: 'syz.7.3919': attribute type 16 has an invalid length.
[  381.802754][T15233] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3919'.
[  381.844239][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3920'.
[  382.017280][T15240] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3921'.
[  382.020804][T15240] netlink: 6 bytes leftover after parsing attributes in process `syz.7.3921'.
[  383.001928][T15255] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3924'.
[  383.134992][T15260] netlink: 'syz.7.3925': attribute type 21 has an invalid length.
[  383.152383][T15255] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3924'.
[  383.605202][   T34] INFO: task syz.4.2272:11328 blocked for more than 143 seconds.
[  383.609452][   T34]       Not tainted syzkaller #0
[  383.618540][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  383.622115][   T34] task:syz.4.2272      state:D stack:25296 pid:11328 tgid:11322 ppid:11091  task_flags:0x400140 flags:0x00004004
[  383.626345][   T34] Call Trace:
[  383.627401][   T34]  <TASK>
[  383.628278][   T34]  __schedule+0x1798/0x4cc0
[  383.629686][   T34]  ? __lock_acquire+0xab9/0xd20
[  383.635098][   T34]  ? __pfx___schedule+0x10/0x10
[  383.636759][   T34]  ? schedule+0x91/0x360
[  383.638023][   T34]  schedule+0x165/0x360
[  383.639392][   T34]  schedule_preempt_disabled+0x13/0x30
[  383.641471][   T34]  __mutex_lock+0x7e6/0x1350
[  383.643154][   T34]  ? __mutex_lock+0x5bb/0x1350
[  383.644789][   T34]  ? nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  383.646589][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  383.648160][   T34]  ? stack_trace_save+0x9c/0xe0
[  383.654655][   T34]  ? stack_depot_save_flags+0x40/0x860
[  383.656300][   T34]  nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  383.663877][   T34]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  383.666440][   T34]  ? kmalloc_reserve+0x136/0x290
[  383.668386][   T34]  ? __alloc_skb+0x142/0x2d0
[  383.690676][   T34]  ? netlink_dump+0x1b7/0xe90
[  383.692791][   T34]  ? __netlink_dump_start+0x5cb/0x7e0
[  383.694888][   T34]  ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  383.697227][   T34]  ? genl_rcv_msg+0x5da/0x790
[  383.699103][   T34]  ? netlink_rcv_skb+0x208/0x470
[  383.707466][   T34]  ? genl_rcv+0x28/0x40
[  383.709153][   T34]  ? netlink_unicast+0x82f/0x9e0
[  383.711659][   T34]  ? netlink_sendmsg+0x805/0xb30
[  383.713657][   T34]  ? __sock_sendmsg+0x21c/0x270
[  383.715597][   T34]  ? ____sys_sendmsg+0x505/0x830
[  383.717565][   T34]  ? ___sys_sendmsg+0x21f/0x2a0
[  383.719511][   T34]  ? __x64_sys_sendmsg+0x19b/0x260
[  383.727962][   T34]  ? do_syscall_64+0xfa/0x3b0
[  383.729864][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.732594][   T34]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  383.735204][   T34]  ? rcu_is_watching+0x15/0xb0
[  383.737098][   T34]  ? trace_kmalloc+0x1f/0xd0
[  383.738928][   T34]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  383.745877][   T34]  ? __build_skb_around+0x257/0x3e0
[  383.747922][   T34]  genl_dumpit+0x10b/0x1b0
[  383.749698][   T34]  netlink_dump+0x6e4/0xe90
[  383.751962][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  383.754102][   T34]  ? genl_start+0x499/0x6c0
[  383.755867][   T34]  __netlink_dump_start+0x5cb/0x7e0
[  383.758092][   T34]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  383.760339][   T34]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  383.765549][   T34]  ? genl_get_cmd+0x496/0x910
[  383.767050][   T34]  ? __pfx_genl_start+0x10/0x10
[  383.768481][   T34]  ? __pfx_genl_dumpit+0x10/0x10
[  383.769885][   T34]  ? __pfx_genl_done+0x10/0x10
[  383.771966][   T34]  genl_rcv_msg+0x5da/0x790
[  383.773789][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  383.775466][   T34]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  383.777435][   T34]  ? __asan_memcpy+0x40/0x70
[  383.778840][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  383.780504][   T34]  netlink_rcv_skb+0x208/0x470
[  383.784486][   T34]  ? __lock_acquire+0xab9/0xd20
[  383.786128][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  383.787660][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  383.789434][   T34]  ? down_read+0x1ad/0x2e0
[  383.791184][   T34]  genl_rcv+0x28/0x40
[  383.792894][   T34]  netlink_unicast+0x82f/0x9e0
[  383.794492][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  383.796766][   T34]  netlink_sendmsg+0x805/0xb30
[  383.798555][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  383.800437][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  383.804633][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  383.806504][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  383.808260][   T34]  __sock_sendmsg+0x21c/0x270
[  383.810121][   T34]  ____sys_sendmsg+0x505/0x830
[  383.812300][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  383.814247][   T34]  ? import_iovec+0x74/0xa0
[  383.815676][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  383.817135][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  383.818929][   T34]  ? __fget_files+0x2a/0x420
[  383.820652][   T34]  ? __fget_files+0x3a0/0x420
[  383.825040][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  383.826588][   T34]  ? perf_trace_run_bpf_submit+0x100/0x170
[  383.828386][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  383.830183][   T34]  ? do_syscall_64+0xbe/0x3b0
[  383.833358][   T34]  do_syscall_64+0xfa/0x3b0
[  383.834970][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.837410][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  383.839541][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.843965][   T34] RIP: 0033:0x7fc1aa78ec29
[  383.845371][   T34] RSP: 002b:00007fc1ab624038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  383.847832][   T34] RAX: ffffffffffffffda RBX: 00007fc1aa9d6090 RCX: 00007fc1aa78ec29
[  383.850707][   T34] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  383.853709][   T34] RBP: 00007fc1aa811e41 R08: 0000000000000000 R09: 0000000000000000
[  383.856109][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.858658][   T34] R13: 00007fc1aa9d6128 R14: 00007fc1aa9d6090 R15: 00007fffbec1e828
[  383.864034][   T34]  </TASK>
[  383.865375][   T34] 
[  383.865375][   T34] Showing all locks held in the system:
[  383.867938][   T34] 1 lock held by rcu_tasks_trace/31:
[  383.869582][   T34]  #0: ffffffff8e13ae50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  383.874902][   T34] 1 lock held by khungtaskd/34:
[  383.877053][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  383.880674][   T34] 2 locks held by getty/5677:
[  383.887040][   T34]  #0: ffff8881099ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  383.890198][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  383.893640][   T34] 2 locks held by syz.1.1957/10589:
[  383.895381][   T34]  #0: ffffffff8f5a0270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  383.897911][   T34]  #1: ffffffff8e419548 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960
[  383.901048][   T34] 3 locks held by syz.4.2272/11328:
[  383.905337][   T34]  #0: ffffffff8f5a0270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  383.907992][   T34]  #1: ffff88803417c6d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  383.913153][   T34]  #2: ffffffff8e419548 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  383.916401][   T34] 3 locks held by syz.0.2908/12764:
[  383.918017][   T34]  #0: ffffffff8f5a0270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  383.920596][   T34]  #1: ffff88811cdc96d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  383.926146][   T34]  #2: ffffffff8e419548 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  383.930282][   T34] 3 locks held by syz.5.2918/12788:
[  383.932576][   T34]  #0: ffffffff8f5a0270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  383.935374][   T34]  #1: ffff8881312a86d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  383.938573][   T34]  #2: ffffffff8e419548 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  383.946830][   T34] 2 locks held by syz-executor/12792:
[  383.948546][   T34] 2 locks held by syz.7.3930/15278:
[  383.950143][   T34]  #0: ffffffff8e19d6c8 (event_mutex){+.+.}-{4:4}, at: perf_trace_destroy+0x2e/0x150
[  383.953607][   T34]  #1: ffffffff8e13fbb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  383.957087][   T34] 
[  383.963545][   T34] =============================================
[  383.963545][   T34] 
[  383.966390][   T34] NMI backtrace for cpu 1
[  383.966399][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  383.966408][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.966413][   T34] Call Trace:
[  383.966418][   T34]  <TASK>
[  383.966422][   T34]  dump_stack_lvl+0x189/0x250
[  383.966436][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.966449][   T34]  ? __pfx__printk+0x10/0x10
[  383.966465][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  383.966479][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  383.966491][   T34]  ? __pfx__printk+0x10/0x10
[  383.966503][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  383.966512][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  383.966525][   T34]  watchdog+0xf93/0xfe0
[  383.966538][   T34]  ? watchdog+0x1de/0xfe0
[  383.966551][   T34]  kthread+0x711/0x8a0
[  383.966562][   T34]  ? __pfx_watchdog+0x10/0x10
[  383.966572][   T34]  ? __pfx_kthread+0x10/0x10
[  383.966582][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  383.966591][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.966598][   T34]  ? __pfx_kthread+0x10/0x10
[  383.966608][   T34]  ret_from_fork+0x439/0x7d0
[  383.966617][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  383.966627][   T34]  ? __switch_to_asm+0x39/0x70
[  383.966636][   T34]  ? __switch_to_asm+0x33/0x70
[  383.966645][   T34]  ? __pfx_kthread+0x10/0x10
[  383.966654][   T34]  ret_from_fork_asm+0x1a/0x30
[  383.966670][   T34]  </TASK>
[  383.966673][   T34] Sending NMI from CPU 1 to CPUs 0:
[  384.023487][    C0] NMI backtrace for cpu 0
[  384.023503][    C0] CPU: 0 UID: 0 PID: 5903 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  384.023519][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.023527][    C0] Workqueue: bat_events batadv_nc_worker
[  384.023547][    C0] RIP: 0010:check_preemption_disabled+0x5c/0x120
[  384.023567][    C0] Code: fe 25 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 81 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 <f7> 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 e0 a0 92 41 f6 47 2f
[  384.023578][    C0] RSP: 0018:ffffc90003e1f980 EFLAGS: 00000046
[  384.023588][    C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000000
[  384.023596][    C0] RDX: 0000000000000002 RSI: ffffffff8dbaa0c3 RDI: ffffffff8be34280
[  384.023604][    C0] RBP: ffff888021de6180 R08: 0000000000000000 R09: ffffffff8b4856a2
[  384.023612][    C0] R10: dffffc0000000000 R11: ffffffff8b4855d0 R12: 0000000000000002
[  384.023620][    C0] R13: 0000000000000002 R14: ffffffff8e13a120 R15: ffff888021de5640
[  384.023629][    C0] FS:  0000000000000000(0000) GS:ffff8880b8612000(0000) knlGS:0000000000000000
[  384.023638][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.023646][    C0] CR2: 00007f1a0a7a8558 CR3: 000000012388c000 CR4: 00000000000006f0
[  384.023678][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  384.023688][    C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  384.023695][    C0] Call Trace:
[  384.023700][    C0]  <TASK>
[  384.023707][    C0]  lock_release+0x27a/0x3e0
[  384.023727][    C0]  ? batadv_nc_worker+0xd2/0x610
[  384.023739][    C0]  ? batadv_nc_worker+0xd2/0x610
[  384.023751][    C0]  batadv_nc_worker+0x28c/0x610
[  384.023763][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  384.023776][    C0]  process_scheduled_works+0xae1/0x17b0
[  384.023796][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  384.023814][    C0]  worker_thread+0x8a0/0xda0
[  384.023827][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.023844][    C0]  ? __kthread_parkme+0x7b/0x200
[  384.023859][    C0]  kthread+0x711/0x8a0
[  384.023876][    C0]  ? __pfx_worker_thread+0x10/0x10
[  384.023886][    C0]  ? __pfx_kthread+0x10/0x10
[  384.023901][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  384.023913][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.023925][    C0]  ? __pfx_kthread+0x10/0x10
[  384.023939][    C0]  ret_from_fork+0x439/0x7d0
[  384.023952][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  384.024001][    C0]  ? __switch_to_asm+0x39/0x70
[  384.024017][    C0]  ? __switch_to_asm+0x33/0x70
[  384.024031][    C0]  ? __pfx_kthread+0x10/0x10
[  384.024046][    C0]  ret_from_fork_asm+0x1a/0x30
[  384.024064][    C0]  </TASK>
[  384.024488][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  384.121306][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  384.124218][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.127899][   T34] Call Trace:
[  384.128952][   T34]  <TASK>
[  384.129899][   T34]  dump_stack_lvl+0x99/0x250
[  384.131345][   T34]  ? __asan_memcpy+0x40/0x70
[  384.132789][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.134432][   T34]  ? __pfx__printk+0x10/0x10
[  384.135884][   T34]  vpanic+0x281/0x750
[  384.137197][   T34]  ? __pfx_vpanic+0x10/0x10
[  384.138897][   T34]  ? preempt_schedule+0xae/0xc0
[  384.140446][   T34]  ? preempt_schedule_common+0x83/0xd0
[  384.142155][   T34]  panic+0xb9/0xc0
[  384.143582][   T34]  ? __pfx_panic+0x10/0x10
[  384.145024][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  384.146838][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  384.148720][   T34]  watchdog+0xfd2/0xfe0
[  384.150038][   T34]  ? watchdog+0x1de/0xfe0
[  384.151364][   T34]  kthread+0x711/0x8a0
[  384.152609][   T34]  ? __pfx_watchdog+0x10/0x10
[  384.154090][   T34]  ? __pfx_kthread+0x10/0x10
[  384.155541][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  384.157330][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.159242][   T34]  ? __pfx_kthread+0x10/0x10
[  384.160634][   T34]  ret_from_fork+0x439/0x7d0
[  384.161933][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  384.163489][   T34]  ? __switch_to_asm+0x39/0x70
[  384.164849][   T34]  ? __switch_to_asm+0x33/0x70
[  384.166642][   T34]  ? __pfx_kthread+0x10/0x10
[  384.168279][   T34]  ret_from_fork_asm+0x1a/0x30
[  384.169928][   T34]  </TASK>
[  384.171743][   T34] Kernel Offset: disabled
[  384.173221][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:35:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000004 RCX=d7f18e7f8bc83700 RDX=0000000000000000
RSI=ffff8880219861d0 RDI=ffff888021985640 RBP=0000000000000000 RSP=ffffc90007037308
R8 =0000000000000000 R9 =ffffffff8172d195 R10=ffffc90007037558 R11=ffffffff81ac4d00
R12=00000000bc89ca39 R13=ffff888021986130 R14=ffff8880219861d0 R15=7b99aad7088d8ff4
RIP=ffffffff819d7de9 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f41f3b056c0 CR3=00000000605ee000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=ffffffffffff0422 80032a0800061000
XMM02=21800321800422a0 030008002290030f XMM03=2190030900100000 00e00e0800030004
XMM04=ffff0422c0030210 0022b00303c01000 XMM05=0120818010002280 0401000000080606
XMM06=0168d600080022e0 0300100022d0030f XMM07=ffffffffffff0422 c00302100022b003
XMM08=03c0100021900309 0010000000e00e08 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=0000000000000002 RCX=dffffc0000000001 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900025ff3a0 RBP=ffff888031002440 RSP=ffffc900025ff4b8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520004bfe74
R12=ffff8881226932b8 R13=ffff888112c70000 R14=1ffff1102496f91f R15=ffff888124b7c8f8
RIP=ffffffff84d13195 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1ed4041380 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc630010e8 CR3=0000000028a42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
