last executing test programs:

1m27.463008905s ago: executing program 1 (id=158):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x37, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="785b254001"]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m27.299223031s ago: executing program 1 (id=161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0xb8, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x3b, 0x1a, 'syz1\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x10}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x206c9c88}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '\'\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0x0, 0x18, 0x1, 0x0, 0xc472}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="cc8d02364500"}}]}]}, 0xb8}}, 0x20088890)

1m27.298717055s ago: executing program 1 (id=162):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x815)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @remote})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f000000fe80)={0x0, 0x0, &(0x7f000000fe40)={&(0x7f0000000540)=ANY=[@ANYBLOB="ac0000002100090027bd7000fbdbdf25200100000000000000000000000000017f0000010000000000000000000000004e2200014e2200060000a080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b16b6e00000000000a0010008000001d240000a0500011"], 0xac}, 0x1, 0x0, 0x0, 0x882}, 0x4000000)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, 0x0, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x11589, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x4, 0xd4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r4, 0x84, 0x19, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000840)=""/194, 0x0, 0xc2, 0x1, 0x6, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x17, 0x1, 0x2, 0xffffffff, 0x8014, 0x1, 0x8, '\x00', 0x0, r1, 0x3, 0x2, 0x2, 0x0, @value=r5}, 0x50)

1m26.157035858s ago: executing program 1 (id=166):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007fd0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m25.633611308s ago: executing program 1 (id=173):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

1m25.247258449s ago: executing program 1 (id=181):
r0 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f", 0xe}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @u32=0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1m24.925276669s ago: executing program 0 (id=187):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1m24.924809901s ago: executing program 0 (id=188):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x60}}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080))

1m24.718311677s ago: executing program 0 (id=190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0xf, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m24.644963041s ago: executing program 0 (id=192):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'})
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, 0x0, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1m23.658150808s ago: executing program 0 (id=199):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000073114300000000008510000002000000850000000500000095000000000000009500a50500000000895081f5fc6b18e7039df59015bcca7ee51d96a0629d9809e520d765fe9e8f92763f546634e5ef1e7f24e9c967b2b0ce886afefc340b1e7fa72328fec781bb3cbedc875dab26df6ae374bd9bc42d81eda235050b083de8f58633a5609fbda636a5440e5eef30be89bda70c556b229c29a301e233ab470be3b8742a19799e14bb656725e9a72d3fdaf7e3017088"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

1m23.256144472s ago: executing program 0 (id=202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x27, 0x22, 0x0, &(0x7f0000000300)="f8c348cc02cb29dcc8007f5b08009ccaa57b5c03a7e72f1945abd10fdfa59a9eb269", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m22.880534203s ago: executing program 32 (id=202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x27, 0x22, 0x0, &(0x7f0000000300)="f8c348cc02cb29dcc8007f5b08009ccaa57b5c03a7e72f1945abd10fdfa59a9eb269", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m10.017398097s ago: executing program 33 (id=181):
r0 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f", 0xe}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @u32=0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.050359778s ago: executing program 2 (id=1141):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

3.047292941s ago: executing program 2 (id=1143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000040), 0x2)
sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/176, 0xb0}], 0x1}, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200000003}, {0x1, 0x4, 0x0, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4d58545efa78c3d9fba6c0cbb378f35eece03a1d421abb05f9e90753ae3d006495d2cea542c0628f074a01c22", 0x2d}], 0x1}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x33}, @in=@multicast1, {}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x13c}}, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000f0601010000000001000700000006000b0000a0000000"], 0x24}}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.153825218s ago: executing program 2 (id=1160):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))
r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000940)=[{0xd8, 0x84, 0xff, "74857486f5221d503de050eefec8cb327b9ee4cc2b73965b84cbd5c324948ffa09a677cab86a753281508c36c23746b2da525bedf3e954c99f70119b22bb87f19cdb78208d907498774de8e4ee5462fd94b65edd1294dd446604e79ea5f94d638d2029e290dd03042da85b3a6bacabdf4f8010ae68bace5e0bebea24bd94839c485bed273463e773d5d0b30d908609e4cfeb474f75f799011880fbb691a55f87f27790909298658845780948cdfa7897de7cb3a210468d2490a82b3174b5171d03bec451af8c6e"}, {0xc8, 0x111, 0x7, "c3bbdfacd332cba0e0c0230db769d3b3cbd242c48f45a062b5cbcdd267c5dfef8a0853b2629da3261d70027579415049adada6e58bc1d5fb93d624bb0b90680fe66a402dab6839438b20c0ed8c348164290b032d8612208fba73f9546e3a5c204302897c0c5b0217551ad099f53b2b291b00831d39487b196165b7c73f69e0d7811403a5cea7fd092843e27d97c03e2d302ba23114bd669fda31879e15f75ca2f3a981e571e6265125de4e02675b48569cb9"}, {0xb8, 0x0, 0x7, "c9b5fa8a364fbc7acb23c7f87920c8204dbf98e477898fccd35bc59f1905ed772164c0a162cf529c4c99eace082d9d82d63eb517bc43931871461643a996f420df4b325f96dfe45eeaf77512c95273dc0537312b37f1f72e968c15ba60a3e8bfbf806fde1b985333983334e907929bbda8e7edda841da9b991678e2cc5f02848b694913e1300f02286cf8ebdd84c634eb2e12b1d45edf220c8cda2bffc07fe80c470"}], 0x258}, 0xc054)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x18)
perf_event_open(&(0x7f0000000c40)={0x4, 0x80, 0x6, 0x0, 0x9, 0x0, 0x0, 0x2, 0xa0110, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000c00), 0x8}, 0x488a, 0x100000001, 0xc, 0x1, 0x9f4, 0x0, 0x2ed9, 0x0, 0x0, 0x0, 0xac6b}, 0x0, 0xb, r3, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})

1.069795552s ago: executing program 2 (id=1172):
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000200)=r1, 0x21)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/14, 0xe}, 0x2)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)

642.159012ms ago: executing program 3 (id=1188):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94)

556.405248ms ago: executing program 3 (id=1191):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001401200001708000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

552.634221ms ago: executing program 3 (id=1193):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1b0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

469.046185ms ago: executing program 3 (id=1195):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10000, 0x0, 0x0, 0x0, 0x3fe, 0x7fffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94)

380.575069ms ago: executing program 4 (id=1197):
socket$netlink(0x10, 0x3, 0x7)

380.114361ms ago: executing program 4 (id=1198):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10)

303.183955ms ago: executing program 4 (id=1199):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="06ff03076844babeb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

302.740691ms ago: executing program 3 (id=1200):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}, 0x10102)

129.798894ms ago: executing program 4 (id=1201):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x86, 0x0, 0x0)

129.451511ms ago: executing program 2 (id=1202):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040)

129.24753ms ago: executing program 4 (id=1203):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e0007"], 0xfe33)

128.77838ms ago: executing program 2 (id=1204):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x3, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x60)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)}, 0x1c1)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x305, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000810)

62.125501ms ago: executing program 4 (id=1205):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESDEC=r3], 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r5}, 0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020100030a00000000000000fcdbdf25030006000010000002004e23640101000000000000000000030005003200000002004e23ac1414aa000000000000000002001300030020002abd700007350000"], 0x50}}, 0x0)

0s ago: executing program 3 (id=1206):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x5, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000001c0), 0x12)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4941' (ED25519) to the list of known hosts.
syzkaller login: [   56.064340][ T5806] cgroup: Unknown subsys name 'net'
[   56.166636][ T5806] cgroup: Unknown subsys name 'cpuset'
[   56.170643][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.973746][ T5806] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.427479][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.711801][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.715271][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.717849][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.722551][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.726011][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.771521][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   69.982984][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.985846][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.988132][ T5860] bridge_slave_0: entered allmulticast mode
[   69.990942][ T5860] bridge_slave_0: entered promiscuous mode
[   69.995461][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.997723][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.000125][ T5860] bridge_slave_1: entered allmulticast mode
[   70.002758][ T5860] bridge_slave_1: entered promiscuous mode
[   70.024765][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.030196][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.050415][ T5860] team0: Port device team_slave_0 added
[   70.054765][ T5860] team0: Port device team_slave_1 added
[   70.073121][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.075442][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.084033][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.088859][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.091032][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.099633][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.128826][ T5860] hsr_slave_0: entered promiscuous mode
[   70.131178][ T5860] hsr_slave_1: entered promiscuous mode
[   70.231188][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.236963][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.242095][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.246966][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.268329][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.270730][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.273490][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.275793][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.310853][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.320728][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.325549][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.334472][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   70.341540][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.344053][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.349810][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.352057][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.455888][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.481603][ T5860] veth0_vlan: entered promiscuous mode
[   70.489183][ T5860] veth1_vlan: entered promiscuous mode
[   70.506996][ T5860] veth0_macvtap: entered promiscuous mode
[   70.511910][ T5860] veth1_macvtap: entered promiscuous mode
[   70.522100][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.530153][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.537999][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.541757][ T5680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.545317][ T5680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.548155][ T5680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.961038][ T5879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.084783][ T5879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.222782][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.227404][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.232442][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.246747][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.250989][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.255926][ T5879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.280499][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.285921][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.289092][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.290488][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.292696][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.294626][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.299170][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.360006][ T5879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.445192][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.449186][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.452625][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.456710][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.460384][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.696426][ T5907] chnl_net:caif_netlink_parms(): no params data found
[   71.848306][ T5905] chnl_net:caif_netlink_parms(): no params data found
[   71.878085][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.880963][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.884150][ T5907] bridge_slave_0: entered allmulticast mode
[   71.887886][ T5907] bridge_slave_0: entered promiscuous mode
[   71.898074][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.900575][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.903953][ T5907] bridge_slave_1: entered allmulticast mode
[   71.907191][ T5907] bridge_slave_1: entered promiscuous mode
[   71.930178][ T5910] chnl_net:caif_netlink_parms(): no params data found
[   71.969302][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.011200][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.094788][ T5907] team0: Port device team_slave_0 added
[   72.097806][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.100857][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.103917][ T5905] bridge_slave_0: entered allmulticast mode
[   72.107540][ T5905] bridge_slave_0: entered promiscuous mode
[   72.112026][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.115642][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.118323][ T5905] bridge_slave_1: entered allmulticast mode
[   72.120994][ T5905] bridge_slave_1: entered promiscuous mode
[   72.146193][ T5907] team0: Port device team_slave_1 added
[   72.171792][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.174941][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.177206][ T5910] bridge_slave_0: entered allmulticast mode
[   72.180012][ T5910] bridge_slave_0: entered promiscuous mode
[   72.199196][ T5905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.204661][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.207223][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.209879][ T5910] bridge_slave_1: entered allmulticast mode
[   72.214366][ T5910] bridge_slave_1: entered promiscuous mode
[   72.232350][ T5905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.264742][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.267554][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.277195][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.282394][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.284833][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.294612][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.311215][ T5905] team0: Port device team_slave_0 added
[   72.335337][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.339984][ T5905] team0: Port device team_slave_1 added
[   72.346017][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.412866][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.415147][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.424673][ T5905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.430681][ T5910] team0: Port device team_slave_0 added
[   72.433990][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.436245][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.445172][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.471129][ T5907] hsr_slave_0: entered promiscuous mode
[   72.473954][ T5907] hsr_slave_1: entered promiscuous mode
[   72.476027][ T5907] debugfs: 'hsr0' already exists in 'hsr'
[   72.477874][ T5907] Cannot create hsr debugfs directory
[   72.484562][ T5910] team0: Port device team_slave_1 added
[   72.541803][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.545757][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.555887][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.572360][ T5905] hsr_slave_0: entered promiscuous mode
[   72.576324][ T5905] hsr_slave_1: entered promiscuous mode
[   72.579029][ T5905] debugfs: 'hsr0' already exists in 'hsr'
[   72.580984][ T5905] Cannot create hsr debugfs directory
[   72.583486][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.586294][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.594258][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.679373][ T5910] hsr_slave_0: entered promiscuous mode
[   72.681748][ T5910] hsr_slave_1: entered promiscuous mode
[   72.684781][ T5910] debugfs: 'hsr0' already exists in 'hsr'
[   72.686934][ T5910] Cannot create hsr debugfs directory
[   73.256757][ T5879] bridge_slave_1: left allmulticast mode
[   73.259104][ T5879] bridge_slave_1: left promiscuous mode
[   73.262021][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.271688][ T5879] bridge_slave_0: left allmulticast mode
[   73.275067][ T5879] bridge_slave_0: left promiscuous mode
[   73.277550][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.284767][ T5239] Bluetooth: hci0: command tx timeout
[   73.363524][ T5239] Bluetooth: hci1: command tx timeout
[   73.523865][ T5239] Bluetooth: hci2: command tx timeout
[   73.597881][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.604729][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.610020][ T5879] bond0 (unregistering): Released all slaves
[   73.719086][ T5879] hsr_slave_0: left promiscuous mode
[   73.722375][ T5879] hsr_slave_1: left promiscuous mode
[   73.726541][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.729412][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.733420][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.739090][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.753914][ T5879] veth1_macvtap: left promiscuous mode
[   73.756326][ T5879] veth0_macvtap: left promiscuous mode
[   73.758568][ T5879] veth1_vlan: left promiscuous mode
[   73.760717][ T5879] veth0_vlan: left promiscuous mode
[   74.120886][ T5879] team0 (unregistering): Port device team_slave_1 removed
[   74.151456][ T5879] team0 (unregistering): Port device team_slave_0 removed
[   74.822362][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.855028][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.873532][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.891585][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.992337][ T5905] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.008740][ T5905] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.107360][ T5905] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.114735][ T5905] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.226924][ T5910] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.235615][ T5910] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.247433][ T5910] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.255366][ T5910] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.315441][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.358154][ T5907] 8021q: adding VLAN 0 to HW filter on device team0
[   75.363946][ T5239] Bluetooth: hci0: command tx timeout
[   75.385930][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.388705][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.405622][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.408404][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.443341][ T5239] Bluetooth: hci1: command tx timeout
[   75.471336][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.479868][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.502671][ T5905] 8021q: adding VLAN 0 to HW filter on device team0
[   75.517547][ T5910] 8021q: adding VLAN 0 to HW filter on device team0
[   75.521531][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.524078][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.539131][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.541828][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.562637][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.565489][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.604115][ T5239] Bluetooth: hci2: command tx timeout
[   75.614663][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.617443][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.797720][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.848281][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.887049][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.900366][ T5907] veth0_vlan: entered promiscuous mode
[   75.922660][ T5907] veth1_vlan: entered promiscuous mode
[   75.947367][ T5910] veth0_vlan: entered promiscuous mode
[   75.962344][ T5910] veth1_vlan: entered promiscuous mode
[   76.002899][ T5907] veth0_macvtap: entered promiscuous mode
[   76.015022][ T5905] veth0_vlan: entered promiscuous mode
[   76.021175][ T5907] veth1_macvtap: entered promiscuous mode
[   76.029600][ T5905] veth1_vlan: entered promiscuous mode
[   76.064175][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.069479][ T5910] veth0_macvtap: entered promiscuous mode
[   76.084454][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.089444][ T5910] veth1_macvtap: entered promiscuous mode
[   76.107631][ T5680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.112279][ T5905] veth0_macvtap: entered promiscuous mode
[   76.121004][ T5680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.124575][ T5680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.128107][ T5680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.131906][ T5905] veth1_macvtap: entered promiscuous mode
[   76.154318][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.159637][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.179239][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.186940][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.206685][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.210787][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.234846][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.258101][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.260722][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.265191][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.279917][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.284366][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.326367][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.338325][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.391247][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.398145][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.437552][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.440670][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.479513][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.487431][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.503675][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.526382][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.605208][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.608023][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.710644][ T5990] netlink: 'syz.1.9': attribute type 13 has an invalid length.
[   76.920956][    C0] hrtimer: interrupt took 148713 ns
[   77.453473][ T5239] Bluetooth: hci0: command tx timeout
[   77.523719][ T5239] Bluetooth: hci1: command tx timeout
[   77.655829][ T6024] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.684285][ T5239] Bluetooth: hci2: command tx timeout
[   77.919062][ T6034] netlink: 'syz.1.32': attribute type 64 has an invalid length.
[   78.045892][ T6042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.081584][ T6040] netlink: 'syz.2.35': attribute type 7 has an invalid length.
[   78.104686][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.256448][ T6050] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.39'.
[   78.260030][ T6050] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   78.277727][ T6050] openvswitch: netlink: Message has 2 unknown bytes.
[   78.645332][ T6067] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.781398][ T6071] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.48'.
[   78.946184][ T6080] Zero length message leads to an empty skb
[   79.173075][ T6086] netlink: 948 bytes leftover after parsing attributes in process `syz.0.56'.
[   79.524790][ T5239] Bluetooth: hci0: command tx timeout
[   79.607810][ T5239] Bluetooth: hci1: command tx timeout
[   79.763428][ T5876] Bluetooth: hci2: command tx timeout
[   80.107309][ T6117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.212730][ T6125] netlink: 'syz.1.74': attribute type 21 has an invalid length.
[   80.433605][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   80.466237][ T6135] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   81.126982][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'.
[   81.131315][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.87'.
[   81.644479][ T6168] netlink: 'syz.0.94': attribute type 10 has an invalid length.
[   81.672303][ T6168] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.682399][ T6168] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   81.719033][ T6172] netlink: 'syz.2.95': attribute type 13 has an invalid length.
[   81.974596][ T6180] netlink: 'syz.0.99': attribute type 10 has an invalid length.
[   82.429710][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.433634][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.595503][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.606397][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.445191][ T6180] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   83.449552][ T6180] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   83.460057][ T6180] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   83.485571][ T5919] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.503327][ T5919] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.506961][ T5919] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.510613][ T5919] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.349766][ T6224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.120'.
[   84.548281][ T6234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'.
[   84.552520][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'.
[   84.559670][ T6234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.124'.
[   86.049683][ T6265] openvswitch: netlink: IPv4 tunnel dst address is zero
[   86.100803][ T6267] =======================================================
[   86.100803][ T6267] WARNING: The mand mount option has been deprecated and
[   86.100803][ T6267]          and is ignored by this kernel. Remove the mand
[   86.100803][ T6267]          option from the mount to silence this warning.
[   86.100803][ T6267] =======================================================
[   86.122136][ T6267] tmpfs: Unknown parameter '0xffffffffffffffff'
[   86.165139][ T6269] netlink: 'syz.1.140': attribute type 39 has an invalid length.
[   86.655136][   T24] cfg80211: failed to load regulatory.db
[   86.675131][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.147'.
[   86.718913][ T6289] netlink: 'syz.2.147': attribute type 10 has an invalid length.
[   87.035358][ T6295] netlink: 'syz.2.150': attribute type 12 has an invalid length.
[   87.038804][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.150'.
[   87.448205][ T6308] netlink: 124 bytes leftover after parsing attributes in process `syz.2.155'.
[   87.452010][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.155'.
[   87.681401][ T6318] netlink: 200 bytes leftover after parsing attributes in process `syz.0.160'.
[   87.697846][ T6320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.161'.
[   89.081517][ T6332] netlink: 'syz.2.165': attribute type 4 has an invalid length.
[   89.338097][ T6363] openvswitch: netlink: Missing key (keys=40, expected=100)
[   89.494729][ T6372] __nla_validate_parse: 4 callbacks suppressed
[   89.494740][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.175'.
[   89.500851][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.175'.
[   89.537408][ T6373] netlink: 48 bytes leftover after parsing attributes in process `syz.0.174'.
[   90.384697][ T6408] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   90.465341][ T6414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.194'.
[   90.510423][ T6417] openvswitch: netlink: VXLAN extension message has 10 unknown bytes.
[   92.489430][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.493347][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.496402][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.499564][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.501952][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.715053][ T6438] syz.2.204 uses obsolete (PF_INET,SOCK_PACKET)
[   92.732215][ T6435] chnl_net:caif_netlink_parms(): no params data found
[   92.884335][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.887489][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.890466][ T6435] bridge_slave_0: entered allmulticast mode
[   92.895149][ T6435] bridge_slave_0: entered promiscuous mode
[   92.900490][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.904340][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.907284][ T6435] bridge_slave_1: entered allmulticast mode
[   92.911253][ T6435] bridge_slave_1: entered promiscuous mode
[   92.951500][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.958854][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.982488][ T6435] team0: Port device team_slave_0 added
[   92.986562][ T6435] team0: Port device team_slave_1 added
[   93.024409][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.026957][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.049995][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.064333][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.067048][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.079595][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.175832][ T6435] hsr_slave_0: entered promiscuous mode
[   93.178135][ T6435] hsr_slave_1: entered promiscuous mode
[   93.429177][ T6435] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.438509][ T6435] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.450644][ T6435] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.460494][ T6435] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.507710][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.510561][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.513932][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.517004][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.596704][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.610376][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.616943][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.630792][ T6435] 8021q: adding VLAN 0 to HW filter on device team0
[   93.642959][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.645245][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.652334][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.654908][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.876777][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.920698][ T6435] veth0_vlan: entered promiscuous mode
[   93.931202][ T6435] veth1_vlan: entered promiscuous mode
[   93.968570][ T6435] veth0_macvtap: entered promiscuous mode
[   93.976350][ T6435] veth1_macvtap: entered promiscuous mode
[   93.997510][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.011866][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.060139][ T5919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.066083][ T5919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.069579][ T5919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.072958][ T5919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.147589][ T6464] netlink: 'syz.2.208': attribute type 2 has an invalid length.
[   94.168513][ T6464] : entered promiscuous mode
[   94.171844][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.181974][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.214913][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.217621][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.563486][ T5239] Bluetooth: hci1: command tx timeout
[   95.246357][ T6498] netlink: 'syz.2.221': attribute type 10 has an invalid length.
[   95.255005][ T6498] veth0_vlan: left promiscuous mode
[   95.280697][ T6498] veth0_vlan: entered promiscuous mode
[   95.353409][ T6498] team0: Device veth0_vlan failed to register rx_handler
[   95.484608][ T6498] syz.2.221 (6498) used greatest stack depth: 18936 bytes left
[   95.727106][ T6509] wlan1 speed is unknown, defaulting to 1000
[   95.729665][ T6509] wlan1 speed is unknown, defaulting to 1000
[   95.764556][ T6509] wlan1 speed is unknown, defaulting to 1000
[   95.771568][ T6509] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   95.816532][ T6509] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   95.920015][ T6509] wlan1 speed is unknown, defaulting to 1000
[   95.927481][ T5239] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17
[   95.928821][ T6509] wlan1 speed is unknown, defaulting to 1000
[   95.936933][ T6509] wlan1 speed is unknown, defaulting to 1000
[   95.942352][ T6509] wlan1 speed is unknown, defaulting to 1000
[   96.098440][ T6516] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   96.131698][ T6516] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   96.144202][ T6516] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   96.156502][ T6516] netlink: 'syz.2.227': attribute type 29 has an invalid length.
[   96.279485][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   96.481421][ T6527] netlink: 200 bytes leftover after parsing attributes in process `syz.3.230'.
[   96.546130][ T6527] wlan1 speed is unknown, defaulting to 1000
[   96.654311][ T5239] Bluetooth: hci1: command tx timeout
[   97.259029][ T6550] netlink: 'syz.3.240': attribute type 1 has an invalid length.
[   97.380170][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[   97.537113][ T6559] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.245'.
[   97.634088][ T6564] netlink: 'syz.3.247': attribute type 11 has an invalid length.
[   98.282800][ T5239] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[   98.723337][ T5239] Bluetooth: hci1: command tx timeout
[  100.803387][ T5239] Bluetooth: hci1: command tx timeout
[  101.199453][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1986125498 wd_nsec: 1986125621
[  102.289701][ T6618] netlink: 'syz.3.272': attribute type 21 has an invalid length.
[  102.293089][ T6618] netlink: 156 bytes leftover after parsing attributes in process `syz.3.272'.
[  103.237743][ T6648] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[  103.241075][ T6648] netlink: 'syz.2.285': attribute type 4 has an invalid length.
[  103.250084][ T6648] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.285'.
[  103.255458][ T6648] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[  103.258591][ T6648] netlink: 'syz.2.285': attribute type 4 has an invalid length.
[  103.261789][ T6648] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.285'.
[  103.605120][ T6660] netlink: 104 bytes leftover after parsing attributes in process `syz.2.291'.
[  103.943147][ T6671] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.295'.
[  104.100842][ T6673] netlink: 92 bytes leftover after parsing attributes in process `syz.3.296'.
[  104.118291][ T6673] netlink: 92 bytes leftover after parsing attributes in process `syz.3.296'.
[  105.384461][ T6682] netlink: 'syz.2.298': attribute type 6 has an invalid length.
[  105.388094][ T6682] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.298'.
[  105.410089][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.419873][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.423782][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.429268][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.432682][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.579799][ T6683] wlan1 speed is unknown, defaulting to 1000
[  105.596625][ T6694] netlink: 'syz.2.304': attribute type 21 has an invalid length.
[  105.669258][ T6693] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.303'.
[  105.792143][ T5919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.804192][ T6703] netlink: 'syz.2.307': attribute type 23 has an invalid length.
[  105.825917][ T6683] chnl_net:caif_netlink_parms(): no params data found
[  105.949282][ T5919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.038349][ T5919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.049108][ T5876] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7
[  106.069950][ T5876] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4
[  106.078331][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.089711][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.092942][ T6683] bridge_slave_0: entered allmulticast mode
[  106.098405][ T6683] bridge_slave_0: entered promiscuous mode
[  106.114562][ T5919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.133626][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.136478][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.140443][ T6683] bridge_slave_1: entered allmulticast mode
[  106.147477][ T6683] bridge_slave_1: entered promiscuous mode
[  106.195125][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.207068][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.259759][ T6683] team0: Port device team_slave_0 added
[  106.266580][ T6683] team0: Port device team_slave_1 added
[  106.390705][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.394299][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.404749][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.427330][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.430151][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.440772][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.460713][ T5919] bridge_slave_1: left allmulticast mode
[  106.475948][ T5919] bridge_slave_1: left promiscuous mode
[  106.484134][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.504310][ T5919] bridge_slave_0: left allmulticast mode
[  106.506647][ T5919] bridge_slave_0: left promiscuous mode
[  106.508994][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.871021][ T5919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.877533][ T5919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.882581][ T5919] bond0 (unregistering): Released all slaves
[  107.035104][ T6683] hsr_slave_0: entered promiscuous mode
[  107.038307][ T6683] hsr_slave_1: entered promiscuous mode
[  107.040449][ T6683] debugfs: 'hsr0' already exists in 'hsr'
[  107.054713][ T6683] Cannot create hsr debugfs directory
[  107.263971][ T5919] hsr_slave_0: left promiscuous mode
[  107.266799][ T5919] hsr_slave_1: left promiscuous mode
[  107.270440][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.273126][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.285748][ T5919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.288776][ T5919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.331679][ T5919] veth1_macvtap: left promiscuous mode
[  107.336007][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[  107.343687][ T5919] veth0_macvtap: left promiscuous mode
[  107.346112][ T5919] veth1_vlan: left promiscuous mode
[  107.346989][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[  107.348304][ T5919] veth0_vlan: left promiscuous mode
[  107.453929][ T5876] Bluetooth: hci3: command tx timeout
[  107.465072][ T6738] netlink: 'syz.3.321': attribute type 39 has an invalid length.
[  107.488960][ T6734] netlink: 'syz.2.319': attribute type 10 has an invalid length.
[  107.827994][ T5919] team0 (unregistering): Port device team_slave_1 removed
[  107.852312][ T5919] team0 (unregistering): Port device team_slave_0 removed
[  108.120621][ T6738] veth0_macvtap: left promiscuous mode
[  108.167933][ T6734] bond0: (slave bond_slave_0): Releasing backup interface
[  108.367814][ T6750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'.
[  108.432944][ T6683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  108.473637][ T6683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  108.482703][ T6683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  108.489359][ T6683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  108.661697][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.735831][ T6683] 8021q: adding VLAN 0 to HW filter on device team0
[  108.766139][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.769095][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.790818][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.793845][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.220997][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.532563][ T5876] Bluetooth: hci3: command tx timeout
[  109.556951][ T6683] veth0_vlan: entered promiscuous mode
[  109.568396][ T6683] veth1_vlan: entered promiscuous mode
[  109.601068][ T6683] veth0_macvtap: entered promiscuous mode
[  109.634233][ T6683] veth1_macvtap: entered promiscuous mode
[  109.666935][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.687425][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.719979][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.738207][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.741878][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.785192][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.805600][ T6809] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.336'.
[  109.890164][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.892590][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.932997][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.940943][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.275710][ T6833] netlink: 'syz.2.340': attribute type 1 has an invalid length.
[  110.279046][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'.
[  111.012629][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'.
[  111.122485][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'.
[  111.135809][ T6867] netlink: 56 bytes leftover after parsing attributes in process `syz.3.352'.
[  111.603793][ T5876] Bluetooth: hci3: command tx timeout
[  112.862290][ T6940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.381'.
[  112.945697][ T6940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.381'.
[  113.054098][ T6940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.381'.
[  113.570734][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'.
[  113.683779][ T5876] Bluetooth: hci3: command tx timeout
[  114.707719][ T6979] netlink: 14 bytes leftover after parsing attributes in process `syz.3.394'.
[  114.711150][ T6979] openvswitch: netlink: Message has 4 unknown bytes.
[  114.941283][ T6987] netlink: 'syz.2.398': attribute type 10 has an invalid length.
[  114.965367][ T6987] team0: Device hsr_slave_0 failed to register rx_handler
[  115.068253][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.400'.
[  115.611485][ T7003] netlink: 'syz.2.405': attribute type 10 has an invalid length.
[  115.617501][ T7003] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.405'.
[  116.229550][ T7020] netlink: 'syz.4.412': attribute type 26 has an invalid length.
[  116.382784][ T7026] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.416'.
[  117.135169][ T7061] : renamed from bond_slave_0
[  117.442028][ T7071] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  119.100887][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'.
[  119.201641][ T7088] : entered promiscuous mode
[  120.788758][   T33] audit: type=1107 audit(1757979360.868:2): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  120.822766][ T7134] netlink: 'syz.4.462': attribute type 6 has an invalid length.
[  121.667760][ T7187] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.482'.
[  121.838177][ T7195] netlink: 'syz.4.484': attribute type 29 has an invalid length.
[  121.881172][ T7195] netlink: 'syz.4.484': attribute type 29 has an invalid length.
[  122.012281][ T7204] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.489'.
[  122.151099][ T7210] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  122.196872][ T7210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.426041][ T7222] netlink: 64 bytes leftover after parsing attributes in process `syz.3.497'.
[  122.486326][ T7225] netlink: 'syz.2.498': attribute type 32 has an invalid length.
[  122.768856][ T7240] netlink: 'syz.3.500': attribute type 3 has an invalid length.
[  122.771825][ T7240] netlink: 'syz.3.500': attribute type 1 has an invalid length.
[  122.777193][ T7240] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.500'.
[  124.296406][ T7277] netlink: 'syz.4.517': attribute type 3 has an invalid length.
[  124.299676][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.517'.
[  124.447894][ T7280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.518'.
[  124.609792][ T7283] netlink: 'syz.3.519': attribute type 1 has an invalid length.
[  124.613777][ T7283] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.519'.
[  124.722756][ T7287] syzkaller0: entered promiscuous mode
[  124.724663][ T7287] syzkaller0: entered allmulticast mode
[  125.292991][ T7296] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.169666][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.531'.
[  126.262844][ T7316] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[  126.415222][ T7326] sctp: [Deprecated]: syz.2.537 (pid 7326) Use of int in maxseg socket option.
[  126.415222][ T7326] Use struct sctp_assoc_value instead
[  126.440765][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'.
[  126.440823][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'.
[  126.440840][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'.
[  127.354745][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'.
[  127.370999][ T7367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.555'.
[  127.586030][ T7385] sock: sock_timestamping_bind_phc: sock not bind to device
[  127.897055][ T7400] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  129.704168][ T7463] netlink: 'syz.3.599': attribute type 11 has an invalid length.
[  129.708135][ T7461] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  129.829841][ T7468] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[  130.054070][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  130.157830][ T7500] netlink: 763 bytes leftover after parsing attributes in process `syz.2.609'.
[  130.816059][ T7600] netlink: 60 bytes leftover after parsing attributes in process `syz.4.619'.
[  130.835185][ T7600] unsupported nlmsg_type 40
[  131.056618][ T7604] netlink: 104 bytes leftover after parsing attributes in process `syz.4.621'.
[  131.322912][ T7612] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.625'.
[  131.492950][   T33] audit: type=1107 audit(1757979371.568:3): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  131.555406][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'.
[  131.622792][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.637'.
[  131.974967][ T7652] netlink: 'syz.2.643': attribute type 10 has an invalid length.
[  132.766466][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.768927][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.910894][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'.
[  132.932082][ T7670] netlink: 14 bytes leftover after parsing attributes in process `syz.4.651'.
[  133.007464][ T7672] netlink: 196 bytes leftover after parsing attributes in process `syz.3.652'.
[  134.790040][ T7705] openvswitch: netlink: IP tunnel dst address not specified
[  135.356072][ T5876] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  135.431924][ T7742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'.
[  135.542269][ T7749] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.687'.
[  135.811593][ T7760] netlink: 'syz.3.693': attribute type 1 has an invalid length.
[  135.819576][ T7760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.908642][ T7767] netlink: 'syz.2.697': attribute type 21 has an invalid length.
[  136.000188][ T7774] netlink: 'syz.3.698': attribute type 10 has an invalid length.
[  136.006485][ T7774] vlan0: entered allmulticast mode
[  136.008677][ T7774] veth0_vlan: entered allmulticast mode
[  136.025917][ T7774] team0: Port device vlan0 added
[  136.908589][ T7817] netlink: 'syz.4.720': attribute type 13 has an invalid length.
[  137.140143][ T5876] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  137.140162][ T5876] Bluetooth: hci1: Ignoring connect complete event for invalid link type
[  137.497723][ T7851] netlink: 'syz.4.737': attribute type 2 has an invalid length.
[  137.501117][ T7851] netlink: 'syz.4.737': attribute type 1 has an invalid length.
[  137.596666][ T7851] netlink: 228 bytes leftover after parsing attributes in process `syz.4.737'.
[  137.789681][ T7873] netlink: 'syz.2.748': attribute type 21 has an invalid length.
[  137.793001][ T7873] netlink: 168 bytes leftover after parsing attributes in process `syz.2.748'.
[  138.002637][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.753'.
[  138.084185][ T7892] netlink: 'syz.2.756': attribute type 29 has an invalid length.
[  138.109976][ T7895] tap0: tun_chr_ioctl cmd 2147767517
[  138.185694][ T7898] netlink: 'syz.2.759': attribute type 21 has an invalid length.
[  138.425895][ T7921] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  138.545353][ T7926] netlink: 60 bytes leftover after parsing attributes in process `syz.4.770'.
[  138.875647][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.785'.
[  138.905966][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'.
[  138.910735][ T7962] netlink: 'syz.4.786': attribute type 2 has an invalid length.
[  138.916381][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.786'.
[  139.413064][ T7977] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  139.570678][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'.
[  140.116174][ T8013] netlink: 'syz.2.810': attribute type 6 has an invalid length.
[  140.328774][ T8017] option changes via remount are deprecated (pid=8016 comm=syz.3.812)
[  140.430617][ T8025] netlink: 'syz.3.815': attribute type 11 has an invalid length.
[  140.435074][ T8025] __nla_validate_parse: 1 callbacks suppressed
[  140.435086][ T8025] netlink: 140 bytes leftover after parsing attributes in process `syz.3.815'.
[  140.701907][ T8043] C: renamed from team_slave_0
[  140.714365][ T8043] netlink: 'syz.2.825': attribute type 3 has an invalid length.
[  140.716787][ T8043] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.736436][ T8047] netlink: 132 bytes leftover after parsing attributes in process `syz.4.827'.
[  140.880973][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.884813][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.889438][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.892328][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.597254][ T8080] netlink: 'syz.3.839': attribute type 29 has an invalid length.
[  141.673282][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.2.844'.
[  141.880554][ T8097] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.849'.
[  142.058296][ T8101] netlink: 328 bytes leftover after parsing attributes in process `syz.2.851'.
[  142.143465][ T8103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.852'.
[  142.152339][ T8103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.852'.
[  142.157991][ T8103] netlink: 60 bytes leftover after parsing attributes in process `syz.4.852'.
[  143.049198][ T5876] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  143.249253][ T8127] siw: device registration error -23
[  143.323633][ T8134] netlink: 64 bytes leftover after parsing attributes in process `syz.4.865'.
[  143.659660][ T8153] _Z`Ԁ@S!!: entered promiscuous mode
[  143.702999][ T8159] validate_nla: 1 callbacks suppressed
[  143.703032][ T8159] netlink: 'syz.2.876': attribute type 4 has an invalid length.
[  143.708700][ T8159] netlink: 152 bytes leftover after parsing attributes in process `syz.2.876'.
[  143.713551][ T8159] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  146.854883][ T8186] netlink: 'syz.2.887': attribute type 29 has an invalid length.
[  146.859313][ T8186] netlink: 'syz.2.887': attribute type 29 has an invalid length.
[  146.997032][ T8196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.892'.
[  147.122970][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.125734][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.134059][ T8202] bridge0: entered allmulticast mode
[  147.179682][ T8202] bridge_slave_1: left allmulticast mode
[  147.183938][ T8202] bridge_slave_1: left promiscuous mode
[  147.352423][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.660537][ T8202] bridge_slave_0: left allmulticast mode
[  147.665572][ T8202] bridge_slave_0: left promiscuous mode
[  147.673413][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.422851][ T8208] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  148.438491][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'.
[  148.442108][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  148.449200][ T8210] netlink: 2 bytes leftover after parsing attributes in process `syz.2.898'.
[  148.453092][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  148.464961][ T8210] netlink: 2 bytes leftover after parsing attributes in process `syz.2.898'.
[  148.523788][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.900'.
[  148.602978][ T8217] netlink: 'syz.4.901': attribute type 10 has an invalid length.
[  149.183368][ T8228] ip6tnl0: mtu less than device minimum
[  149.213325][ T8229] netlink: 24051 bytes leftover after parsing attributes in process `syz.2.904'.
[  149.431456][ T8234] netlink: 7 bytes leftover after parsing attributes in process `syz.4.906'.
[  149.436455][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'.
[  149.635798][ T8238] netlink: 'syz.2.908': attribute type 21 has an invalid length.
[  149.951982][ T8257] netlink: 'syz.2.917': attribute type 6 has an invalid length.
[  150.166586][ T8269] netlink: 'syz.4.922': attribute type 1 has an invalid length.
[  156.226864][ T8372] netlink: 'syz.3.960': attribute type 12 has an invalid length.
[  156.229333][ T8372] __nla_validate_parse: 5 callbacks suppressed
[  156.229341][ T8372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.960'.
[  156.530632][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'.
[  157.040734][ T8384] netlink: 'syz.4.965': attribute type 10 has an invalid length.
[  157.155648][ T8401] netlink: 763 bytes leftover after parsing attributes in process `syz.2.971'.
[  157.564587][ T8422] netlink: 'syz.3.982': attribute type 10 has an invalid length.
[  157.574893][ T8420] netlink: 14 bytes leftover after parsing attributes in process `syz.4.981'.
[  157.596967][ T8422] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  157.602989][ T8420] hsr_slave_0: left promiscuous mode
[  157.643609][ T8420] hsr_slave_1: left promiscuous mode
[  158.009418][ T8433] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  158.012509][ T8433] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  158.382552][ T8441] netlink: 'syz.4.990': attribute type 4 has an invalid length.
[  158.388745][ T8441] netlink: 152 bytes leftover after parsing attributes in process `syz.4.990'.
[  158.433872][ T8441] .`: renamed from bond0 (while UP)
[  158.766127][ T8449] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.994'.
[  158.774548][ T8449] netlink: zone id is out of range
[  158.779620][ T8449] netlink: zone id is out of range
[  158.782207][ T8449] netlink: get zone limit has 8 unknown bytes
[  158.818726][ T8453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.826124][ T8455] netlink: 'syz.3.995': attribute type 10 has an invalid length.
[  158.832150][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.835554][ T8455] team0: Port device batadv0 added
[  158.962101][ T5876] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5
[  160.720911][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1014'.
[  160.789957][ T8502] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  160.794921][ T8502] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  160.811497][   T51] wlan1 speed is unknown, defaulting to 1000
[  160.917509][ T8509] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1019'.
[  161.056883][ T8526] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1027'.
[  161.549147][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'.
[  161.570325][ T8560] syzkaller1: entered promiscuous mode
[  161.572405][ T8560] syzkaller1: entered allmulticast mode
[  161.663460][ T8564] : renamed from bond_slave_0 (while UP)
[  163.177424][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'.
[  163.426644][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'.
[  163.468955][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1079'.
[  163.632457][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'.
[  163.643273][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'.
[  163.646705][ T8654] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1087'.
[  163.650281][ T8654] bridge_slave_0: entered allmulticast mode
[  163.654065][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'.
[  163.657552][ T8654] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1087'.
[  163.911467][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1093'.
[  163.970351][ T8670] netlink: 'syz.3.1094': attribute type 1 has an invalid length.
[  166.490286][ T8717] netlink: 'syz.2.1112': attribute type 39 has an invalid length.
[  168.893376][ T8723] netlink: 'syz.4.1113': attribute type 10 has an invalid length.
[  168.951268][ T8725] netlink: 'syz.3.1115': attribute type 10 has an invalid length.
[  169.775946][ T8723] team0 (unregistering): Port device team_slave_0 removed
[  169.802314][ T8723] team0 (unregistering): Port device team_slave_1 removed
[  169.820899][ T8725] bond0: (slave bond_slave_0): Releasing backup interface
[  171.058809][ T8746] __nla_validate_parse: 9 callbacks suppressed
[  171.058825][ T8746] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1123'.
[  171.246700][ T8757] netlink: 'syz.4.1128': attribute type 3 has an invalid length.
[  171.249256][ T8757] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  171.251881][ T8757] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1128'.
[  171.275787][ T8757] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  171.278638][ T8757] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  171.500377][ T8771] netlink: 'syz.4.1133': attribute type 21 has an invalid length.
[  171.549241][ T8773] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1134'.
[  171.630834][ T8773] netlink: 'syz.3.1134': attribute type 10 has an invalid length.
[  171.719019][ T8773] batman_adv: batadv0: Adding interface: netdevsim0
[  171.722140][ T8773] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.732366][ T8773] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  171.887844][ T5876] Bluetooth: hci1: adv larger than maximum supported
[  172.101769][ T8798] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1143'.
[  172.198519][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1146'.
[  172.238592][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'.
[  172.613879][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1154'.
[  172.704087][ T8828] netlink: 'syz.4.1156': attribute type 13 has an invalid length.
[  172.707245][ T8828] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1156'.
[  172.806009][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1158'.
[  172.810689][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1158'.
[  172.968293][ T8841] netlink: 'syz.2.1160': attribute type 39 has an invalid length.
[  175.133750][ T8943] ==================================================================
[  175.136262][ T8943] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  175.138492][ T8943] Read of size 4 at addr ffff888028d3d744 by task syz.4.1205/8943
[  175.141910][ T8943] 
[  175.142793][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: syz.4.1205 Not tainted syzkaller #0 PREEMPT(full) 
[  175.142814][ T8943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.142825][ T8943] Call Trace:
[  175.142832][ T8943]  <TASK>
[  175.142841][ T8943]  dump_stack_lvl+0x189/0x250
[  175.142871][ T8943]  ? __kasan_check_byte+0x12/0x40
[  175.142894][ T8943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.142910][ T8943]  ? lock_release+0x4b/0x3e0
[  175.142934][ T8943]  ? __virt_addr_valid+0x4a5/0x5c0
[  175.142953][ T8943]  print_report+0xca/0x240
[  175.142967][ T8943]  ? xfrm_alloc_spi+0x570/0xf30
[  175.142986][ T8943]  kasan_report+0x118/0x150
[  175.143007][ T8943]  ? xfrm_alloc_spi+0x570/0xf30
[  175.143029][ T8943]  xfrm_alloc_spi+0x570/0xf30
[  175.143049][ T8943]  ? xfrm_alloc_spi+0x2a0/0xf30
[  175.143069][ T8943]  ? __local_bh_enable_ip+0x132/0x1c0
[  175.143086][ T8943]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  175.143106][ T8943]  ? xfrm_find_acq+0x87/0xa0
[  175.143127][ T8943]  pfkey_getspi+0x7a8/0xee0
[  175.143149][ T8943]  pfkey_sendmsg+0xbfe/0x1090
[  175.143178][ T8943]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  175.143205][ T8943]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.143222][ T8943]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.143268][ T8943]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  175.143285][ T8943]  __sock_sendmsg+0x21c/0x270
[  175.143308][ T8943]  ____sys_sendmsg+0x505/0x830
[  175.143325][ T8943]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.143343][ T8943]  ? import_iovec+0x74/0xa0
[  175.143361][ T8943]  ___sys_sendmsg+0x21f/0x2a0
[  175.143378][ T8943]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.143405][ T8943]  ? __fget_files+0x2a/0x420
[  175.143416][ T8943]  ? __fget_files+0x3a0/0x420
[  175.143430][ T8943]  __x64_sys_sendmsg+0x19b/0x260
[  175.143448][ T8943]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.143474][ T8943]  do_syscall_64+0xfa/0x3b0
[  175.143490][ T8943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.143504][ T8943]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.143520][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.143534][ T8943] RIP: 0033:0x7fb52bf8eba9
[  175.143548][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.143562][ T8943] RSP: 002b:00007fb52ce1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.143578][ T8943] RAX: ffffffffffffffda RBX: 00007fb52c1d6090 RCX: 00007fb52bf8eba9
[  175.143589][ T8943] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  175.143599][ T8943] RBP: 00007fb52c011e19 R08: 0000000000000000 R09: 0000000000000000
[  175.143608][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.143617][ T8943] R13: 00007fb52c1d6128 R14: 00007fb52c1d6090 R15: 00007ffc567d88f8
[  175.143635][ T8943]  </TASK>
[  175.143640][ T8943] 
[  175.233558][ T8943] Allocated by task 8629:
[  175.235015][ T8943]  kasan_save_track+0x3e/0x80
[  175.236805][ T8943]  __kasan_slab_alloc+0x6c/0x80
[  175.238355][ T8943]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  175.240040][ T8943]  xfrm_state_alloc+0x24/0x2f0
[  175.241602][ T8943]  __find_acq_core+0x8a7/0x1c00
[  175.243497][ T8943]  xfrm_find_acq+0x78/0xa0
[  175.244942][ T8943]  xfrm_alloc_userspi+0x6b3/0xc90
[  175.246641][ T8943]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.248158][ T8943]  netlink_rcv_skb+0x208/0x470
[  175.249840][ T8943]  xfrm_netlink_rcv+0x79/0x90
[  175.251344][ T8943]  netlink_unicast+0x82f/0x9e0
[  175.252824][ T8943]  netlink_sendmsg+0x805/0xb30
[  175.254392][ T8943]  __sock_sendmsg+0x21c/0x270
[  175.255934][ T8943]  ____sys_sendmsg+0x505/0x830
[  175.257456][ T8943]  ___sys_sendmsg+0x21f/0x2a0
[  175.258914][ T8943]  __x64_sys_sendmsg+0x19b/0x260
[  175.260451][ T8943]  do_syscall_64+0xfa/0x3b0
[  175.261862][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.263695][ T8943] 
[  175.264496][ T8943] Freed by task 972:
[  175.265837][ T8943]  kasan_save_track+0x3e/0x80
[  175.267330][ T8943]  kasan_save_free_info+0x46/0x50
[  175.268893][ T8943]  __kasan_slab_free+0x5b/0x80
[  175.270371][ T8943]  kmem_cache_free+0x18f/0x400
[  175.271880][ T8943]  xfrm_state_gc_task+0x52d/0x6b0
[  175.273932][ T8943]  process_scheduled_works+0xae1/0x17b0
[  175.276011][ T8943]  worker_thread+0x8a0/0xda0
[  175.277569][ T8943]  kthread+0x711/0x8a0
[  175.278880][ T8943]  ret_from_fork+0x439/0x7d0
[  175.280343][ T8943]  ret_from_fork_asm+0x1a/0x30
[  175.281857][ T8943] 
[  175.282593][ T8943] The buggy address belongs to the object at ffff888028d3d680
[  175.282593][ T8943]  which belongs to the cache xfrm_state of size 928
[  175.286716][ T8943] The buggy address is located 196 bytes inside of
[  175.286716][ T8943]  freed 928-byte region [ffff888028d3d680, ffff888028d3da20)
[  175.291307][ T8943] 
[  175.292254][ T8943] The buggy address belongs to the physical page:
[  175.294685][ T8943] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028d3d680 pfn:0x28d3c
[  175.297758][ T8943] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  175.300324][ T8943] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  175.302593][ T8943] page_type: f5(slab)
[  175.303797][ T8943] raw: 00fff00000000040 ffff88801bf00b40 dead000000000122 0000000000000000
[  175.306424][ T8943] raw: ffff888028d3d680 00000000800e000b 00000000f5000000 0000000000000000
[  175.309052][ T8943] head: 00fff00000000040 ffff88801bf00b40 dead000000000122 0000000000000000
[  175.311903][ T8943] head: ffff888028d3d680 00000000800e000b 00000000f5000000 0000000000000000
[  175.315111][ T8943] head: 00fff00000000002 ffffea0000a34f01 00000000ffffffff 00000000ffffffff
[  175.317807][ T8943] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  175.320881][ T8943] page dumped because: kasan: bad access detected
[  175.323147][ T8943] page_owner tracks the page as allocated
[  175.324930][ T8943] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6000, tgid 5999 (syz.0.16), ts 76872825042, free_ts 76831173862
[  175.330855][ T8943]  post_alloc_hook+0x240/0x2a0
[  175.332688][ T8943]  get_page_from_freelist+0x21e4/0x22c0
[  175.334927][ T8943]  __alloc_frozen_pages_noprof+0x181/0x370
[  175.337178][ T8943]  alloc_pages_mpol+0x232/0x4a0
[  175.339071][ T8943]  allocate_slab+0x8a/0x370
[  175.340888][ T8943]  ___slab_alloc+0xbeb/0x1420
[  175.342727][ T8943]  kmem_cache_alloc_noprof+0x283/0x3c0
[  175.344446][ T8943]  xfrm_state_alloc+0x24/0x2f0
[  175.346021][ T8943]  xfrm_add_sa+0x17d1/0x4070
[  175.347487][ T8943]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.348973][ T8943]  netlink_rcv_skb+0x208/0x470
[  175.350438][ T8943]  xfrm_netlink_rcv+0x79/0x90
[  175.352120][ T8943]  netlink_unicast+0x82f/0x9e0
[  175.354029][ T8943]  netlink_sendmsg+0x805/0xb30
[  175.355993][ T8943]  __sock_sendmsg+0x21c/0x270
[  175.357916][ T8943]  ____sys_sendmsg+0x505/0x830
[  175.359798][ T8943] page last free pid 5907 tgid 5907 stack trace:
[  175.362092][ T8943]  __free_frozen_pages+0xbc4/0xd30
[  175.364056][ T8943]  __put_partials+0x156/0x1a0
[  175.365862][ T8943]  put_cpu_partial+0x17c/0x250
[  175.367538][ T8943]  __slab_free+0x2d5/0x3c0
[  175.368942][ T8943]  qlist_free_all+0x97/0x140
[  175.370406][ T8943]  kasan_quarantine_reduce+0x148/0x160
[  175.372269][ T8943]  __kasan_slab_alloc+0x22/0x80
[  175.374163][ T8943]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  175.375815][ T8943]  getname_flags+0xb8/0x540
[  175.377232][ T8943]  user_path_at+0x24/0x60
[  175.378631][ T8943]  __x64_sys_umount+0xee/0x160
[  175.380348][ T8943]  do_syscall_64+0xfa/0x3b0
[  175.381779][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.383756][ T8943] 
[  175.384505][ T8943] Memory state around the buggy address:
[  175.386282][ T8943]  ffff888028d3d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  175.388757][ T8943]  ffff888028d3d680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.391386][ T8943] >ffff888028d3d700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.394407][ T8943]                                            ^
[  175.396320][ T8943]  ffff888028d3d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.398810][ T8943]  ffff888028d3d800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.401835][ T8943] ==================================================================
[  175.405310][ T8943] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  175.408032][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: syz.4.1205 Not tainted syzkaller #0 PREEMPT(full) 
[  175.411961][ T8943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.415788][ T8943] Call Trace:
[  175.417081][ T8943]  <TASK>
[  175.418240][ T8943]  dump_stack_lvl+0x99/0x250
[  175.420061][ T8943]  ? __asan_memcpy+0x40/0x70
[  175.421879][ T8943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.423679][ T8943]  ? __pfx__printk+0x10/0x10
[  175.425145][ T8943]  vpanic+0x281/0x750
[  175.426431][ T8943]  ? __pfx_vpanic+0x10/0x10
[  175.427863][ T8943]  ? irqentry_exit+0x74/0x90
[  175.429613][ T8943]  panic+0xb9/0xc0
[  175.431028][ T8943]  ? __pfx_panic+0x10/0x10
[  175.432704][ T8943]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  175.435020][ T8943]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.437461][ T8943]  ? xfrm_alloc_spi+0x570/0xf30
[  175.439308][ T8943]  check_panic_on_warn+0x89/0xb0
[  175.440987][ T8943]  ? xfrm_alloc_spi+0x570/0xf30
[  175.442967][ T8943]  end_report+0x78/0x160
[  175.444453][ T8943]  kasan_report+0x129/0x150
[  175.446040][ T8943]  ? xfrm_alloc_spi+0x570/0xf30
[  175.447752][ T8943]  xfrm_alloc_spi+0x570/0xf30
[  175.449686][ T8943]  ? xfrm_alloc_spi+0x2a0/0xf30
[  175.451238][ T8943]  ? __local_bh_enable_ip+0x132/0x1c0
[  175.452836][ T8943]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  175.454461][ T8943]  ? xfrm_find_acq+0x87/0xa0
[  175.455861][ T8943]  pfkey_getspi+0x7a8/0xee0
[  175.457314][ T8943]  pfkey_sendmsg+0xbfe/0x1090
[  175.458827][ T8943]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  175.460432][ T8943]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.461968][ T8943]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.463609][ T8943]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  175.465196][ T8943]  __sock_sendmsg+0x21c/0x270
[  175.466628][ T8943]  ____sys_sendmsg+0x505/0x830
[  175.468342][ T8943]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.469981][ T8943]  ? import_iovec+0x74/0xa0
[  175.471411][ T8943]  ___sys_sendmsg+0x21f/0x2a0
[  175.472863][ T8943]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.474429][ T8943]  ? __fget_files+0x2a/0x420
[  175.475811][ T8943]  ? __fget_files+0x3a0/0x420
[  175.477236][ T8943]  __x64_sys_sendmsg+0x19b/0x260
[  175.478723][ T8943]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.480608][ T8943]  do_syscall_64+0xfa/0x3b0
[  175.482176][ T8943]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.484146][ T8943]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  175.486240][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.488006][ T8943] RIP: 0033:0x7fb52bf8eba9
[  175.489357][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.495426][ T8943] RSP: 002b:00007fb52ce1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.498310][ T8943] RAX: ffffffffffffffda RBX: 00007fb52c1d6090 RCX: 00007fb52bf8eba9
[  175.500686][ T8943] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  175.503231][ T8943] RBP: 00007fb52c011e19 R08: 0000000000000000 R09: 0000000000000000
[  175.505899][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.508231][ T8943] R13: 00007fb52c1d6128 R14: 00007fb52c1d6090 R15: 00007ffc567d88f8
[  175.510739][ T8943]  </TASK>
[  175.512256][ T8943] Kernel Offset: disabled
[  175.513810][ T8943] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:36:55  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4621b RBX=1ffff11026cc7f61 RCX=ffff888020518000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002f3f600 RSP=ffffc90002f3f480
R8 =ffffffff8fa3a937 R9 =1ffffffff1f47526 R10=dffffc0000000000 R11=fffffbfff1f47527
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b46203 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcc9045b6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f419ff8 CR3=0000000105e40000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa6f8212e53
XMM06=0000000000000000 00007fa6f8212e4d XMM07=0000000000000000 00007fa6f8212e61
XMM08=0000000000000000 00007fa6f8212ee7 XMM09=0000000000000000 00007fa6f8212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=00000000000013e6 RDI=00000000000013e7 RBP=00000000000003f9 RSP=ffffc9000309eeb0
R8 =ffff8881061b0237 R9 =1ffff11020c36046 R10=dffffc0000000000 R11=ffffffff854fa080
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa0fc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb52ce1e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e815ff8 CR3=00000001240d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb52c1a7498 00007fb52c1a7470 XMM03=00007fb52c1a74a8 00007fb52c1a74a0
XMM04=00007fb52cd0d100 00007fb52c1a7460 XMM05=00007fb52c1a7478 00007fb52c1a74c0
XMM06=00007fb52c1a74b8 00007fb52c1a74b0 XMM07=00007fb52c1a74a8 00007fb52c1a74a0
XMM08=0000000000000000 00007fb52c012ee7 XMM09=0000000000000000 00007fb52c012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
