last executing test programs:

2m17.42869464s ago: executing program 1 (id=174):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x828c, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
sendmsg$inet(r0, 0x0, 0x81)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)}], 0x1}, 0x0)

2m15.722577172s ago: executing program 1 (id=197):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0)

2m15.587453996s ago: executing program 1 (id=199):
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000050)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xc0002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8052b, 0xca, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0xc)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)='_t', 0x2}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)

2m14.253274667s ago: executing program 1 (id=203):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

2m14.02577796s ago: executing program 1 (id=208):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x11, &(0x7f0000000000), 0x4)

2m4.286590885s ago: executing program 0 (id=302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)={0x20, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m4.107265354s ago: executing program 0 (id=305):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x403, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fstat(r3, &(0x7f0000000340))
gettid()
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, 0x0, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x181}, 0x80)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004240)={0xdd0, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xdb8, 0x1, 0x0, 0x1, [@nested={0xdb4, 0x108, 0x0, 0x1, [@generic, @nested={0xd2a, 0x99, 0x0, 0x1, [@nested={0x4, 0x123}, @nested={0x4, 0xb6}, @generic="2cc94f554daac38d0bdc1dd0ea70b26760143394ddb1e326b9f449597e3aa22d0c291990fd908e3dbd51d966ac97e6f7259c942dd8576fbbb0d71992bb2b2d6513026922bd21c2", @generic="21843462172d99a2451e79d68f261d1c0d6b8c4767cbbf4b216a3e05eb52d90c57ce11c7e5a51c416df7aa3f3167a7559010737558f186893fb30d4f21062ba5ac22a869e445ee6bf7b49e3b2ffcdbadb2294c4c0b4998155008d7d667ce7afb3b19bd095871bc346d9bcec4dffa949cdbccc1b58b48c350079a42502a9e96665df192425c9cc025808d8e3957145ef1d8c6d16d64666149df61fdb00b372e1fa4367d20942c605907df4e8f846089845290bddc520725bef6aab762f21df83036139368defe86c1f39c22440dc576e7f50b158f52dd333941c5fc3a6a36152fbb9404a0bcc9540c3258a5556d5520d5285e247ac8b9f3af06c3ed5ee03a95905acfd516180d9125693815f027abe4e27eecf0d165dd91867a0d4ba8fa51fbf73594279fbd9c72298ed0fcc5906c1adf6cce6022991a06c7abe4dee4fb0cd9081f50982698dd29e1ddcec4082448a729615179a7dea74a7f5e7f74a45d3e95db206af2149945e393ed23b5296fd1815c9e3fc2c222c58b30e062d05a24c48114803acf5ba6e5ecf578ea444119def70ad3cf7486013c50e6504bc59b122cd93950cacb4dffc5edbf30c47c1a79c891db2f991c017ba0e0ddddc4da4ad2b696a3daf9b57ccdcc91ae82752faa905de3ec4ade0a9bb1ef545b5fe2de9f79aff189c0b760233afb6bf09b47faf70c7c180bbdfe54498cff1180d682adf3ff30e22cb2462f0eea7b2053c43a58ca10c3614f84a4295350bb3a9e4f82c91380b5e9a13458529c684bd5b6230f3a2400690daccf4f27e3cbeb02852cf7f2b9e652917b7e177349f92db0d3671c19b76158d8a030fb9f0de9f0ef9e94b05f8a4c8839c8ae95b491d5774a909dd85604ca7a5ba346adb259e0589005fe2c28a17b49ded92ab007a8683e07f9278aa102c1cc191225f4af274c2d6f2ca9863a65484483a42c7c3859ccf0a7479aee87f497edda8c629c17d79698da3ec7089be3e9f3c3ccf4eca3757338d44d79ab89ba44665272709cae40c5911c9849c5c65a4926c441dedc2067387214d5e8ee1c36b4d7a1ca4f9125c58a9c444a5298f7062f3a9bbc423a1fe975ed59185f2412325388b434bc702281150f3917fd7c9d4ae708f39762180c0751d67c2e3a72c7d7d8f79cdeac49e7a4799b85177c204aa55a1599c840d4efe3ac1ff735ded24c600e0728bad9a3913b02edddb796547afaf2f7e8336f0611b81a7b1659d6aaa08735306bb8b49f66196e66fec49de9805055c67290376e4d6ff652821fd5faf1b90d95294aa88bd2a0c36f05b3dd056e9d0e9bd43962bd1a4705760e4cfa6d8e5eadef6ee5f5a6241600166f06c70e93e4322cc9fbf655b1b01c7a2cc8627d310ab56a4f620bb7afc53aff68b4af4a06ad7ec67bd3ac3ff75526b18695828d06df3840319710536322a388586421ae892e628e11f1951bde248a785b750eceb371cec016ca565f3c9b8955ca36dc3a6fe5e8ea2c8f2e72ecef4da6bebc8d2d262da7cbf53e766db3bdf6a632dc1019114087ca815c950d6d22a0e58c205e76175621722056c7951d7ce3bda0ceb78cc54c90f133da0008b17bb72240a1f1ef1f8bbe54466dd799596273551965dba0bd213c1fd19f10073bce65441d21d4d80d81ba637242df5f51185af8d8af16c8b3d80c9f11a8621bd4cccd73426ccff7bdcff5e63b053501cb0438f514a3fc5af8dbe7e6b81c7aaa37f98e4aa60cde1d125d5f8ed010a9a8af9109ad7f2af48b1ead5493447a121260170442f8903f514cc87998d8a0c75c67448296dd301bbdf34e23bce45d1449ac30124bd0f253a8a2201c3d1a748eacf274bc65b7237da9b19c64928d0ab7f9d4b0d35ea344e266f4b44c3b5c9c2cdcb3b2816a3f088153876f546c0dd31a97d4ec2f0b7b1bca2c4fc5182894d0eebad2f7bfe52fdeb9567c4791bc2e6391e67e92693dd6fff3cabe19d54426f04a228ac78bf13a3e1d8e390793b2eca985e3a1ab39f08354d8a3779519d8fd7ee9f8acb56aea5b99411e7d6896532bb317cf43fe37522eb7816328c2df3459ea4bf457d6b9ab2bd9c14af1b0c7de1aab0b46bae5804e4eeb4d9de12d0b529f6cbbe1c3a65f8c0f44f65f6d6824d11e087ef618a6e48ccc5425e6442c437ddeec06e5b323860af6d595adef5b644ed13b5ee2a36cbb90e2d89daa1ca03e92a1da03395fac4682529800e68cd54de63811ca3f5d0feee82e19a0afb46607b4f498c167bf0faf3b12538fe913737ac70e09db2431d9640800c2958832c0b085041d267eb9787587709dc9545bb2542a1a29ebccdf5d6f1b5b3ead6cc74a07a78785c2ce8108e83474b33a62b0a60301d454623712d86e49adc76c44bce1d389f0621639a098526bcd946de9e4fe5f9a35938b561a4c9af70bb90f59759fdab7aaf249344c26bcd820e54347afb8b3130f59f3fc700ef9fa4d1cc8e1d5af040d4bf14465a82d3b99b42a8b0abe1d4dddf1af74f7b029ea7caee31d04e127cb9714fe67d00e739fbd3be31dd9be50cb54254107dab28197c977c5cd537de4429f54063c29e6dc62cf33df3295850386f6ae1c843b32eef7ed8f30b51344ec641df6e1ba7ad066bc6d1322a4bf5d08fa4b2f07ab217fc452a7cb51a4dcb28d0b5367d5654368b36f41381b7f88d6567c94e31866d2aeccc44579c3456c7478ef6e9ea8d6de419bc3263ed9e75e082bdd94b23f7e977f54668c7957192e16fce2609d003015e99343ad512f1af3b4104de05c0af9eb26d0a3ce8798c0bdaffc27f36b244e5e4dda32cad6c40f8ca0065c091a3cd9c7c7b66492d813b0016084fdda03597b7ec4fbff33396bab02e96961f0b6d1d4e511e21ebeed8ccd039fd8f64a5bdba720ad1b144616f0029b6c777bf74b2bceaacf46c5cd74bd46459c9d85253f70355eb16b2cc2a2380fbe0344c35c4b604df70f662bb0bb817c13c3915625636afe48e1927b06328590237c69bd822575d7d220b4f389c23908e8eca085d93835ed5e4506ce487d61ff943716dcdd8ec6b709b02444521ad5c69b2915e81e6ee751c67ff54e16dd7aaad242c25e277f68e733ed3084f140df889bc510e0d12d74a63ea72e9079df09402da291c4f06a792462ef4d9c436fe7b74cb3649551fe8389b3639b58136b51ec1c6f0326411d56f12dbbbdf58d088330d6d7a8aee48edd0b5acfb0ebd846127660a86486d12e65918d563245adfaa5af67e4bdf25153cd0b757d634eeb525b76b102ff722cdee731c26d48121fff264a773a472f26ea945f1ad18b1ee6b3b704f5fe50b0947e326da56dab6679df6b1ae56e08510f4e8fc5f6244a00dfdb478b3a31106e48d5d762ae71cc0e2aea4f89714b4801d2818d46e645c0722e6cdf12c739b8f4ab1a3f109fdfdccf450d4ab57d797ab530e3cbef9ee512f478314c6b4b9fb00c973af32284b577e2de47938eefbea6e0550939e3b89aaa9e9814e49fe5a4c05b0fd9d9962602f9d65ccb84e5f2baade52cc5cfbc8d165f8fd45eee708ea230f8796a6556378027e0d1d7b1be61945f72c5eaf33533c97fe43466f0e23902b43d60230d758aaf353c642f5f418d5d8ac423d15f7a7a2199df97dd15996478319d4f5c4db831462132d583131926ae29f3dd502c467f9d9f12e9e40fb2eb7d96504962c35b27d0351ef6fa64b8647afc2ab3edfab031a16dde9fe48a6d034ed0f908e02375d6d84209ee6ca84b2b12275bca237df80fca8512251aeceaf5e9c6404cfd4f37152c0a8ee6ebb225ae64bedd341c4f9ec10a0c9e727e1d09b8c13cd6019031c2ff0510c2aff9ad602edcf5d56f01393b0416307e1563d7b60a597c2905cbe00c036d8d3361d11dcd8b8629999444c637db2cd14153beca181d09978a74f27dd96cb15ab1aaaa258a99a48b4e6760bc2cd62ccf3dbe4c82830123f387f22ed22722634d702413ef8ba849e3866ad5ca4c1cb83faf1b6d708ce31e217a2e9df6c16ac8bddd4e7e95624dc80e839cd3e5011bcc9e349d276f2f8929d56b10344159023c922c1b6c15e68a932c7adf276d1e2bd7bb0d640970c461c800ce58197f870763e61bd94594f252c041214cd5eb98f33a262e5b4ae25a4d2a855439b254406558dda5124b6563243d18ed2ae05d6909a04bf1419df0a724ff15525b6689f50c6d71857ede980377c0134b24905628e74905f09df785e8913f4b3dab4764e8acd0255a6864ed4901535a4eaa9311c751c4dfbc9f41e4e406437bd5b3d3556517b7fb164f9e73479197bfc86e3fe11bbf7fa5d3e3f615702949b022895a8240e14d0fad8451db7142a80349902c118bc1cd02e68408b3d52f68a5f260446bf04f158f9c7a9f53624790044d40fe5a83d7c958913c3def23047dc187ee01291d8143ad700c4ee5d0c4e89c9b56036974228120c7930b4f4fe93fd18c9eed9df7cd6114203dc44afd22eb8d24a0b894faa9a1437df8efdff86a835e907e9a8e1ddf146cfcb16f630809771d62a465f8d4dd046bc68a21fe50e1bb8e624fee3c843a3ebe42eba65655222029c9405517bb97794c106a084c9c5147ba1c2c48062d002a53f45c4642b0fbb99a1560283f73b232e34a75554ee332c893a64bfacb26f45c52c5a851669349c5", @typed={0x8, 0xd1, 0x0, 0x0, @pid}, @nested={0x4, 0xe8}]}, @nested={0x79, 0xb0, 0x0, 0x1, [@generic="02db3c146c33c0014cea97c22dba209c9ab2ff28df612ad2fb8648e6b431093caff2a52d2027687d25683919b96dbefe5ec35c48be8d4c070d07cfb7efe0de9e3baa7ccb8547f9e3aa9e004f8a", @typed={0xc, 0x10b, 0x0, 0x0, @u64}, @nested={0x4, 0x66}, @nested={0x4, 0x142}, @typed={0xa, 0x37, 0x0, 0x0, @str='vlan0\x00'}, @typed={0x8, 0xd9, 0x0, 0x0, @uid=r5}, @generic]}, @typed={0x5, 0xeb, 0x0, 0x0, @str='\x00'}]}]}]}, 0xdd0}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x58, 0xfd, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0xf, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, r2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"})

2m1.375423318s ago: executing program 0 (id=307):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2})

2m0.431719007s ago: executing program 0 (id=309):
socket$kcm(0x2, 0x200000000000001, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
recvmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000030000000000000000000000005e009a000000000000000008000000181100003aa98d6544c2059f2fb9b928826c2d68353e3262b54682859d7e7685f6cb0999de953b2305c7e5f088f9c24c350e0e17280f894043407c7c6ba7480e7364dcec2f6e6b038a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000370000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000fbffffff18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000186500000e00000000000000010000009500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b02d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x4, 0x1, 0x3, 0x3, 0x0, 0x5, 0xbb48, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfc9, 0x3}, 0x102, 0x7, 0x4, 0x9, 0x40, 0x9, 0xb2, 0x0, 0xdfe1, 0x0, 0x8}, 0x0, 0xb, r2, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r10}, 0x10)
r11 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca)
r12 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)

2m0.011099641s ago: executing program 0 (id=311):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000180)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))

1m59.719603516s ago: executing program 0 (id=312):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002)

1m59.561918329s ago: executing program 32 (id=312):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002)

1m59.517100889s ago: executing program 1 (id=314):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x200000000002d, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20044841)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = socket$kcm(0x10, 0x2, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c9a42, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)

1m59.452538374s ago: executing program 33 (id=314):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x200000000002d, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x20044841)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = socket$kcm(0x10, 0x2, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x5c9a42, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.numa_stat\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x8840)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)

14.208546855s ago: executing program 4 (id=1735):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

13.956954753s ago: executing program 4 (id=1737):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)

13.828871435s ago: executing program 4 (id=1741):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0xff7b)

13.779456368s ago: executing program 4 (id=1743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

13.725585118s ago: executing program 4 (id=1745):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

13.609270276s ago: executing program 4 (id=1747):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6996894ea0c3f91e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33)

681.131262ms ago: executing program 3 (id=1890):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="670000001600140006004c78081d", 0xe}, {&(0x7f0000000bc0)="cb4e88a8e5104b098d05b717b6338173cc10268987551878", 0x18}], 0x2}, 0x0)

618.898566ms ago: executing program 3 (id=1891):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x19c5a, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x1e, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r3})
r4 = socket$kcm(0x25, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20)

618.499605ms ago: executing program 2 (id=1892):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x12, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}, @generic="bd2d"]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

509.545986ms ago: executing program 2 (id=1893):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

509.307916ms ago: executing program 2 (id=1894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}}, 0x0)

438.074083ms ago: executing program 3 (id=1895):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))
close(0x3)

437.586938ms ago: executing program 2 (id=1896):
r0 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, &(0x7f0000000000))

249.502552ms ago: executing program 2 (id=1897):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@migrate={0x50, 0x27, 0x1, 0x4, 0x1, {{@in=@private=0xa010001, @in=@remote, 0x4e22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

187.954846ms ago: executing program 2 (id=1898):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007600"], 0xfe33)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ee0000000000000000000000000000000000000000000000005b00e500"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x11b, 0x22, &(0x7f0000000580)="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", &(0x7f0000000180)=""/34, 0xb3dc, 0x0, 0x10, 0xb4, &(0x7f00000001c0)="95722bb8903eaa715800000000000000", &(0x7f00000006c0)="bce43c60b09d1b86b1b8608c29c6a86d2df957693cd73699caea8882820b1fcb0aad35dad825969583e97c8172f4f6b6a4bc0f848d48c17bb202a8f9a8155b7bff5445e0b793e86ba45d2afee6869f78374e204753e515f2479d9544f8453e115afd9a2859bfecb0d91bf0f8685589aff76a5c591f126db4a31aec11ef54487b9a6df8060d4ec02124f5f67e5affb2c4bebfa833fa6f7fcd6d1cc0711d44d4c59cc51a556a99a7b83f8e8bbf49af9286b969f540", 0x6, 0x0, 0xae0}, 0x50)
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000040), 0x4)

108.630294ms ago: executing program 3 (id=1899):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40001)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, r1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040))

316.827µs ago: executing program 3 (id=1900):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4a, 0x8000000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

0s ago: executing program 3 (id=1901):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="14000000000000002900000032000000fec00000000000007000000000000000000000000700000007073d0000007f441477517f00000100000009e0000002000080010100071f49ac1e01017f000001e0000006e0000002ac1414aaac141411ac1414aa4424ec5164010140000000097f00000100000dfe7f000001000000057f000001000000081c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0xa8}, 0x0)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10100, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff60)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff3f2df)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x4)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000001280)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0000000000000000818ca79aec5641d631a209c2583790000000000000000", 0x32}], 0x3}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4)
sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000003c0)="8f78c0e8b122c99d431db6ab0c", 0xd}], 0x2}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29769' (ED25519) to the list of known hosts.
syzkaller login: [   55.808834][ T5831] cgroup: Unknown subsys name 'net'
[   55.978516][ T5831] cgroup: Unknown subsys name 'cpuset'
[   55.982788][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.651545][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.166275][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.173397][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.184113][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.193245][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.201323][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.215824][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.219802][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.235398][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.238815][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.258568][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.261107][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.270333][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.280439][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.282811][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.287109][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.290889][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.310286][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.517727][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   71.670638][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.673413][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.675987][ T5874] bridge_slave_0: entered allmulticast mode
[   71.679800][ T5874] bridge_slave_0: entered promiscuous mode
[   71.732858][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.735922][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.738774][ T5874] bridge_slave_1: entered allmulticast mode
[   71.742678][ T5874] bridge_slave_1: entered promiscuous mode
[   71.764979][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   71.794958][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.805849][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.829905][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   71.875463][ T5874] team0: Port device team_slave_0 added
[   71.894084][ T5874] team0: Port device team_slave_1 added
[   71.966904][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.969930][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.972855][ T5871] bridge_slave_0: entered allmulticast mode
[   71.978970][ T5871] bridge_slave_0: entered promiscuous mode
[   71.991963][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.994400][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.002438][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.009704][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.012138][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.015709][ T5871] bridge_slave_1: entered allmulticast mode
[   72.018591][ T5871] bridge_slave_1: entered promiscuous mode
[   72.040544][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.043025][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.052867][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.083053][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.087380][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.090117][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.092935][ T5878] bridge_slave_0: entered allmulticast mode
[   72.096973][ T5878] bridge_slave_0: entered promiscuous mode
[   72.116202][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.119879][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.122735][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.128482][ T5878] bridge_slave_1: entered allmulticast mode
[   72.132000][ T5878] bridge_slave_1: entered promiscuous mode
[   72.186910][ T5874] hsr_slave_0: entered promiscuous mode
[   72.189961][ T5874] hsr_slave_1: entered promiscuous mode
[   72.208940][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.216711][ T5871] team0: Port device team_slave_0 added
[   72.221450][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.239588][ T5871] team0: Port device team_slave_1 added
[   72.327316][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.329808][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.340582][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.345566][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.347932][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.357167][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.362491][ T5878] team0: Port device team_slave_0 added
[   72.372025][ T5878] team0: Port device team_slave_1 added
[   72.418100][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.420633][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.429403][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.468869][ T5871] hsr_slave_0: entered promiscuous mode
[   72.471837][ T5871] hsr_slave_1: entered promiscuous mode
[   72.474748][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   72.477046][ T5871] Cannot create hsr debugfs directory
[   72.479805][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.482433][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.493023][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.635727][ T5878] hsr_slave_0: entered promiscuous mode
[   72.638181][ T5878] hsr_slave_1: entered promiscuous mode
[   72.640448][ T5878] debugfs: 'hsr0' already exists in 'hsr'
[   72.642169][ T5878] Cannot create hsr debugfs directory
[   72.717777][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.755816][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.766061][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.779699][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.883019][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.902120][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.910785][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.918206][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.964924][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.971088][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.977717][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.982825][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.093397][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.121473][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   73.145653][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.150086][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.152875][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.158377][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.161194][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.170801][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.199186][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   73.231255][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.234065][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.240927][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   73.250977][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.253328][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.260618][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.263385][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.291451][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.294452][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.325290][   T55] Bluetooth: hci1: command tx timeout
[   73.327675][   T55] Bluetooth: hci0: command tx timeout
[   73.330138][ T5876] Bluetooth: hci2: command tx timeout
[   73.493328][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.553303][ T5874] veth0_vlan: entered promiscuous mode
[   73.577590][ T5874] veth1_vlan: entered promiscuous mode
[   73.623045][ T5874] veth0_macvtap: entered promiscuous mode
[   73.637543][ T5874] veth1_macvtap: entered promiscuous mode
[   73.649403][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.661006][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.678863][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.693664][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.716427][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.720474][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.723782][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.747141][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.801047][ T5878] veth0_vlan: entered promiscuous mode
[   73.819572][ T5871] veth0_vlan: entered promiscuous mode
[   73.855907][ T5878] veth1_vlan: entered promiscuous mode
[   73.877572][ T5871] veth1_vlan: entered promiscuous mode
[   73.881269][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.886858][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.927069][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.930483][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.946670][ T5878] veth0_macvtap: entered promiscuous mode
[   73.970609][ T5871] veth0_macvtap: entered promiscuous mode
[   73.980104][ T5878] veth1_macvtap: entered promiscuous mode
[   73.989170][ T5871] veth1_macvtap: entered promiscuous mode
[   73.998945][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.015411][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.023363][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.030745][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.047196][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.058043][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.061872][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.091978][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.109110][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.115168][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.130161][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.160211][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.171254][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.284528][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.287395][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.296331][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.299258][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.356584][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.367291][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.380390][ T5943] netlink: 'syz.2.15': attribute type 1 has an invalid length.
[   74.399638][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.402691][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.981352][ T5968] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.26'.
[   74.988048][ T5968] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.26'.
[   75.196433][ T5876] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[   75.196470][ T5876] Bluetooth: unknown link type 110
[   75.202881][ T5876] Bluetooth: hci0: connection err: -111
[   75.404457][ T5881] Bluetooth: hci0: command tx timeout
[   75.406531][ T5881] Bluetooth: hci1: command tx timeout
[   75.409326][ T5876] Bluetooth: hci2: command tx timeout
[   75.903816][    C0] hrtimer: interrupt took 33973 ns
[   76.337129][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.441246][ T6038] netlink: 'syz.2.59': attribute type 7 has an invalid length.
[   76.497052][ T6042] netlink: 'syz.1.61': attribute type 10 has an invalid length.
[   76.505980][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.61'.
[   76.509692][ T6042] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   76.513504][ T6042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.675132][ T6048] delete_channel: no stack
[   76.825564][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.68'.
[   77.496559][ T5876] Bluetooth: hci2: command tx timeout
[   77.498941][ T5876] Bluetooth: hci1: command tx timeout
[   77.501116][ T5876] Bluetooth: hci0: command tx timeout
[   77.577462][ T6084] Zero length message leads to an empty skb
[   77.696529][ T6090] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.83'.
[   77.716978][ T6090] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   77.720526][ T6090] openvswitch: netlink: Message has 2 unknown bytes.
[   78.095820][ T6114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.93'.
[   79.566158][ T5881] Bluetooth: hci0: command tx timeout
[   79.567217][ T5876] Bluetooth: hci1: command tx timeout
[   79.568772][   T55] Bluetooth: hci2: command tx timeout
[   79.640649][ T6150] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.110'.
[   79.759014][ T6154] syz.2.112 uses obsolete (PF_INET,SOCK_PACKET)
[   79.925192][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   79.953458][ T6161] netlink: 'syz.0.115': attribute type 21 has an invalid length.
[   80.071404][ T6167] : renamed from wg2 (while UP)
[   80.394349][ T6185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.723217][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[   80.999736][ T6221] warning: `syz.2.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.038437][ T6221] netlink: 'syz.2.144': attribute type 10 has an invalid length.
[   81.061361][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.091652][ T6221] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   81.219088][ T6230] Driver unsupported XDP return value 0 on prog  (id 57) dev N/A, expect packet loss!
[   81.340408][ T6238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.152'.
[   81.424404][ T6238] netlink: 'syz.1.152': attribute type 10 has an invalid length.
[   81.566345][ T6244] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   81.571110][ T6244] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[   81.792539][ T6244] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.154'.
[   82.134626][ T6252] GPL: port 1(gretap0) entered blocking state
[   82.140051][ T6252] GPL: port 1(gretap0) entered disabled state
[   82.160720][ T6252] gretap0: entered allmulticast mode
[   82.174828][ T6252] gretap0: entered promiscuous mode
[   82.574674][ T6268] netlink: 948 bytes leftover after parsing attributes in process `syz.2.164'.
[   82.657862][ T6274] netlink: 'syz.0.167': attribute type 1 has an invalid length.
[   82.706766][ T6272] netlink: 'syz.1.165': attribute type 2 has an invalid length.
[   82.709907][ T6272] netlink: 'syz.1.165': attribute type 1 has an invalid length.
[   83.080274][ T6292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'.
[   83.086483][ T6289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'.
[   83.144834][ T6295] netlink: 124 bytes leftover after parsing attributes in process `syz.1.174'.
[   83.148591][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.174'.
[   83.213881][ T6301] netlink: 'syz.0.177': attribute type 7 has an invalid length.
[   83.705003][ T6315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.184'.
[   83.963186][ T6325] netlink: 56 bytes leftover after parsing attributes in process `syz.2.189'.
[   84.943264][ T6345] netlink: 'syz.1.199': attribute type 13 has an invalid length.
[   85.764222][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.771081][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.982437][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.995055][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.255985][ T6345] syz.1.199 (6345) used greatest stack depth: 19832 bytes left
[   86.282257][ T5901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.301119][ T5901] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.308761][ T5901] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.343939][ T5901] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.383037][ T6358] =======================================================
[   86.383037][ T6358] WARNING: The mand mount option has been deprecated and
[   86.383037][ T6358]          and is ignored by this kernel. Remove the mand
[   86.383037][ T6358]          option from the mount to silence this warning.
[   86.383037][ T6358] =======================================================
[   86.412556][ T6362] netlink: 'syz.0.206': attribute type 12 has an invalid length.
[   86.416201][ T6362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.206'.
[   86.593005][ T6365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.616229][  T974] cfg80211: failed to load regulatory.db
[   88.023589][ T6373] netlink: 192 bytes leftover after parsing attributes in process `syz.0.211'.
[   88.043055][ T6375] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[   88.584868][ T6399] openvswitch: netlink: VXLAN extension message has 10 unknown bytes.
[   89.477574][ T6414] netlink: 'syz.0.229': attribute type 10 has an invalid length.
[   89.490496][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.229'.
[   89.508271][ T6414] team0: entered promiscuous mode
[   89.522107][ T6414] team_slave_0: entered promiscuous mode
[   89.536241][ T6414] team_slave_1: entered promiscuous mode
[   89.558313][ T6414] team0: entered allmulticast mode
[   89.562694][ T6414] team_slave_0: entered allmulticast mode
[   89.573208][ T6414] team_slave_1: entered allmulticast mode
[   89.581251][ T6414] bridge0: port 3(team0) entered blocking state
[   89.585199][ T6414] bridge0: port 3(team0) entered disabled state
[   89.610115][ T6414] bridge0: port 3(team0) entered blocking state
[   89.613777][ T6414] bridge0: port 3(team0) entered forwarding state
[   90.487603][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[   90.901633][ T6451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.244'.
[   91.929750][ T6460] nftables ruleset with unbound set
[   92.149036][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'.
[   92.255975][ T6475] netlink: 830 bytes leftover after parsing attributes in process `syz.2.254'.
[   92.332366][ T6479] netlink: 14 bytes leftover after parsing attributes in process `syz.0.256'.
[   93.110785][ T6502] wlan1 speed is unknown, defaulting to 1000
[   93.113494][ T6502] wlan1 speed is unknown, defaulting to 1000
[   93.121593][ T6502] wlan1 speed is unknown, defaulting to 1000
[   93.143052][ T6502] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.189055][ T6502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   93.302885][ T6502] wlan1 speed is unknown, defaulting to 1000
[   93.318134][ T6502] wlan1 speed is unknown, defaulting to 1000
[   93.322210][ T6502] wlan1 speed is unknown, defaulting to 1000
[   93.358072][ T6502] wlan1 speed is unknown, defaulting to 1000
[   94.319948][ T6520] netlink: 200 bytes leftover after parsing attributes in process `syz.2.271'.
[   94.393576][ T6520] wlan1 speed is unknown, defaulting to 1000
[   94.658416][ T6528] netlink: 'syz.2.273': attribute type 1 has an invalid length.
[   94.685341][ T6528] netlink: 17 bytes leftover after parsing attributes in process `syz.2.273'.
[   94.825814][ T6532] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.274'.
[   95.023602][   T55] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17
[   95.593497][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.288'.
[   95.807393][ T6576] netlink: 'syz.2.293': attribute type 10 has an invalid length.
[   95.892549][ T6576] veth0_vlan: left promiscuous mode
[   95.903213][ T6576] veth0_vlan: entered promiscuous mode
[   95.933494][ T6576] team0: Device veth0_vlan failed to register rx_handler
[   95.988586][ T6576] syz.2.293 (6576) used greatest stack depth: 19128 bytes left
[   96.338075][ T6596] openvswitch: netlink: Flow key attr not present in new flow.
[   99.325692][ T6615] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.308'.
[   99.331493][ T6615] netlink: zone id is out of range
[   99.338186][ T6615] netlink: zone id is out of range
[   99.341619][ T6615] netlink: zone id is out of range
[   99.344523][ T6615] netlink: get zone limit has 8 unknown bytes
[  100.128678][ T6617] netlink: 'syz.0.309': attribute type 29 has an invalid length.
[  100.140376][ T6618] netlink: 'syz.0.309': attribute type 29 has an invalid length.
[  100.158522][ T6617] netlink: 'syz.0.309': attribute type 29 has an invalid length.
[  100.408316][ T6618] netlink: 'syz.0.309': attribute type 29 has an invalid length.
[  100.792389][ T5934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.876744][ T5934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.985700][ T5934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.045934][ T5934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.192363][ T5934] bridge0: port 3(team0) entered disabled state
[  101.200729][ T5934] bridge_slave_1: left allmulticast mode
[  101.205592][ T5934] bridge_slave_1: left promiscuous mode
[  101.207659][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.212771][ T5934] bridge_slave_0: left allmulticast mode
[  101.218885][ T5934] bridge_slave_0: left promiscuous mode
[  101.220768][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.568098][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.575276][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.580232][ T5934] bond0 (unregistering): Released all slaves
[  101.837121][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.841803][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.845325][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.859100][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.864776][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.867815][ T5934] hsr_slave_0: left promiscuous mode
[  101.870909][ T5934] hsr_slave_1: left promiscuous mode
[  101.878803][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.885975][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.888993][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.891890][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.905087][ T5934] veth1_macvtap: left promiscuous mode
[  101.907611][ T5934] veth0_macvtap: left promiscuous mode
[  101.909739][ T5934] veth1_vlan: left promiscuous mode
[  101.911448][ T5934] veth0_vlan: left promiscuous mode
[  102.207377][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.217043][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.220131][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.224428][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.228423][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.287874][ T6645] netlink: 'syz.2.316': attribute type 23 has an invalid length.
[  102.390397][ T5934] team_slave_1 (unregistering): left promiscuous mode
[  102.393190][ T5934] team_slave_1 (unregistering): left allmulticast mode
[  102.400025][ T5934] team0 (unregistering): Port device team_slave_1 removed
[  102.430569][ T5934] team_slave_0 (unregistering): left promiscuous mode
[  102.433409][ T5934] team_slave_0 (unregistering): left allmulticast mode
[  102.438187][ T5934] team0 (unregistering): Port device team_slave_0 removed
[  102.863731][ T6642] wlan1 speed is unknown, defaulting to 1000
[  102.907099][ T6637] wlan1 speed is unknown, defaulting to 1000
[  103.178386][ T6642] chnl_net:caif_netlink_parms(): no params data found
[  103.189967][ T6658] netlink: 68 bytes leftover after parsing attributes in process `syz.2.320'.
[  103.250671][ T6637] chnl_net:caif_netlink_parms(): no params data found
[  103.348292][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.351408][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.359271][ T6642] bridge_slave_0: entered allmulticast mode
[  103.365104][ T6642] bridge_slave_0: entered promiscuous mode
[  103.399642][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.402611][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.409020][ T6642] bridge_slave_1: entered allmulticast mode
[  103.413546][ T6642] bridge_slave_1: entered promiscuous mode
[  103.505076][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.524321][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.593633][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.597921][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.601705][ T6637] bridge_slave_0: entered allmulticast mode
[  103.606117][ T6637] bridge_slave_0: entered promiscuous mode
[  103.613753][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.617322][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.620025][ T6637] bridge_slave_1: entered allmulticast mode
[  103.624345][ T6637] bridge_slave_1: entered promiscuous mode
[  103.660286][ T6642] team0: Port device team_slave_0 added
[  103.718133][ T6642] team0: Port device team_slave_1 added
[  103.733753][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.742650][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.885020][ T5881] Bluetooth: hci0: command tx timeout
[  104.284815][ T5881] Bluetooth: hci2: command tx timeout
[  104.968347][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.971146][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.982545][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.996537][ T6637] team0: Port device team_slave_0 added
[  105.000008][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.002651][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.021324][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.046504][ T6637] team0: Port device team_slave_1 added
[  105.093514][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.099509][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.116254][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.136700][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.139523][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.162225][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.200845][ T6642] hsr_slave_0: entered promiscuous mode
[  105.204264][ T6642] hsr_slave_1: entered promiscuous mode
[  105.207117][ T6642] debugfs: 'hsr0' already exists in 'hsr'
[  105.209423][ T6642] Cannot create hsr debugfs directory
[  105.217656][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'.
[  105.222147][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'.
[  105.250765][ T6684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'.
[  105.325374][ T6686] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.330'.
[  105.331975][ T6637] hsr_slave_0: entered promiscuous mode
[  105.335407][ T6637] hsr_slave_1: entered promiscuous mode
[  105.338196][ T6637] debugfs: 'hsr0' already exists in 'hsr'
[  105.340110][ T6637] Cannot create hsr debugfs directory
[  105.622567][ T6642] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.655033][ T6642] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.678665][ T6642] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.704810][ T6642] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.769672][ T6637] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.787754][ T6637] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.809100][ T6637] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.819648][ T6637] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.949469][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.965190][ T5881] Bluetooth: hci0: command tx timeout
[  105.996799][ T6642] 8021q: adding VLAN 0 to HW filter on device team0
[  106.020183][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.023973][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.028814][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.031702][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.111999][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.141093][ T6637] 8021q: adding VLAN 0 to HW filter on device team0
[  106.159335][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.162303][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.172295][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.175349][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.232125][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'.
[  106.366237][ T5881] Bluetooth: hci2: command tx timeout
[  106.478190][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.556473][ T6726] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.340'.
[  106.596501][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.667123][ T6637] veth0_vlan: entered promiscuous mode
[  106.688743][ T6637] veth1_vlan: entered promiscuous mode
[  106.722764][ T6637] veth0_macvtap: entered promiscuous mode
[  106.729429][ T6637] veth1_macvtap: entered promiscuous mode
[  106.745476][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.779198][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.807841][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.817458][ T6735] netlink: 'syz.2.341': attribute type 39 has an invalid length.
[  106.820534][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.828183][ T6735] veth0_macvtap: left promiscuous mode
[  106.852309][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.855362][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.978391][ T6642] veth0_vlan: entered promiscuous mode
[  106.993723][ T6642] veth1_vlan: entered promiscuous mode
[  107.021427][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.031070][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.091003][ T6642] veth0_macvtap: entered promiscuous mode
[  107.099550][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.099635][ T6642] veth1_macvtap: entered promiscuous mode
[  107.102700][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.129992][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.138890][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.149488][ T5934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.186935][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.192592][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.201862][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.352594][ T6605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.356363][ T6605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.411266][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.417347][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.046006][ T5881] Bluetooth: hci0: command tx timeout
[  108.097259][ T6760] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  108.453483][ T5881] Bluetooth: hci2: command tx timeout
[  108.736501][ T6786] netlink: 'syz.4.361': attribute type 10 has an invalid length.
[  108.859768][ T6786] team0: Device ipvlan1 failed to register rx_handler
[  109.006821][ T6786] netlink: 'syz.4.361': attribute type 29 has an invalid length.
[  109.010378][ T6786] netlink: 'syz.4.361': attribute type 3 has an invalid length.
[  109.012790][ T6786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.361'.
[  109.267703][ T5881] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7
[  109.533243][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[  109.585745][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'.
[  109.660585][ T6809] netlink: 'syz.2.368': attribute type 10 has an invalid length.
[  109.747623][ T6809] bond0: (slave bond_slave_0): Releasing backup interface
[  110.128076][ T5881] Bluetooth: hci0: command tx timeout
[  110.400908][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'.
[  110.534430][ T6835] netlink: 'syz.2.378': attribute type 4 has an invalid length.
[  110.545794][ T5881] Bluetooth: hci2: command tx timeout
[  110.781595][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'.
[  111.228824][ T6868] netlink: zone id is out of range
[  111.230779][ T6868] netlink: zone id is out of range
[  111.232586][ T6868] netlink: zone id is out of range
[  111.234552][ T6868] netlink: zone id is out of range
[  111.236238][ T6868] netlink: zone id is out of range
[  111.237985][ T6868] netlink: zone id is out of range
[  111.239974][ T6868] netlink: zone id is out of range
[  111.241672][ T6868] netlink: zone id is out of range
[  111.243494][ T6868] netlink: zone id is out of range
[  111.248127][ T6868] netlink: zone id is out of range
[  111.522520][ T6883] netlink: 201660 bytes leftover after parsing attributes in process `syz.2.398'.
[  112.828219][ T6897] netlink: 149044 bytes leftover after parsing attributes in process `syz.4.403'.
[  114.171188][ T6931] netlink: 'syz.4.417': attribute type 10 has an invalid length.
[  114.181942][ T6931] team0: Device hsr_slave_0 failed to register rx_handler
[  114.787845][   T33] audit: type=1107 audit(1757979354.848:2): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  115.351402][ T6970] : renamed from team_slave_1 (while UP)
[  115.418338][ T6960] syz.3.430 (6960) used greatest stack depth: 19000 bytes left
[  115.585918][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'.
[  115.658057][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.440'.
[  115.661071][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'.
[  115.667098][ T6984] netlink: 'syz.4.441': attribute type 26 has an invalid length.
[  115.672734][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.440'.
[  115.684430][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'.
[  115.691678][ T6986] netlink: 'syz.3.442': attribute type 22 has an invalid length.
[  115.715948][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'.
[  116.566920][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.652467][ T7021] net_ratelimit: 78 callbacks suppressed
[  116.652504][ T7021] netlink: zone id is out of range
[  116.665338][ T7021] netlink: zone id is out of range
[  116.721611][ T7026] netlink: del zone limit has 4 unknown bytes
[  116.741421][ T7021] netlink: set zone limit has 4 unknown bytes
[  117.137327][ T7046] netlink: 'syz.4.466': attribute type 21 has an invalid length.
[  117.505673][ T7064] : renamed from bond_slave_0 (while UP)
[  117.568617][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.477'.
[  117.768268][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'.
[  118.408104][ T7103] xt_l2tp: invalid flags combination: 8
[  118.544500][ T7109] wlan1 speed is unknown, defaulting to 1000
[  120.735181][ T7152] netlink: 'syz.4.510': attribute type 32 has an invalid length.
[  120.855406][ T7158] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.515'.
[  121.121773][ T7178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  121.168572][ T7182] netlink: 'syz.3.524': attribute type 29 has an invalid length.
[  121.171948][ T7182] netlink: 'syz.3.524': attribute type 29 has an invalid length.
[  121.176745][ T7182] netlink: 'syz.3.524': attribute type 29 has an invalid length.
[  121.183203][ T7179] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.523'.
[  121.532638][   T33] audit: type=1107 audit(1757979361.578:3): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  121.849155][ T7210] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  121.856156][ T7210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.538779][ T7233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.547'.
[  123.266958][ T7250] netlink: 'syz.3.554': attribute type 10 has an invalid length.
[  123.789419][ T7275] C: renamed from team_slave_0 (while UP)
[  123.793191][ T7275] netlink: 'syz.2.562': attribute type 3 has an invalid length.
[  123.799538][ T7275] netlink: 'syz.2.562': attribute type 1 has an invalid length.
[  123.802380][ T7275] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  124.520698][ T7316] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.581'.
[  124.647496][ T7321] netlink: 376 bytes leftover after parsing attributes in process `syz.2.583'.
[  124.651092][ T7321] netlink: 376 bytes leftover after parsing attributes in process `syz.2.583'.
[  127.099582][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'.
[  127.102492][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'.
[  127.106396][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'.
[  127.732935][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  127.736846][ T7424] netlink: 52 bytes leftover after parsing attributes in process `syz.4.629'.
[  128.651926][ T7448] syzkaller0: entered promiscuous mode
[  128.660292][ T7448] syzkaller0: entered allmulticast mode
[  131.040107][ T7499] netlink: 'syz.3.663': attribute type 11 has an invalid length.
[  131.309334][ T7502] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.319446][ T7502] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.541585][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.673'.
[  131.696373][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[  131.715616][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'.
[  132.666706][ T7548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'.
[  132.675876][ T7502] syz.4.665 (7502) used greatest stack depth: 18320 bytes left
[  132.688849][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.691144][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.719892][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'.
[  133.707520][ T7587] netlink: 'syz.4.702': attribute type 10 has an invalid length.
[  133.712428][ T7587] geneve0: entered promiscuous mode
[  133.760109][ T7587] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  134.038809][ T7604] openvswitch: netlink: IP tunnel dst address not specified
[  134.351764][ T7621] netlink: 104 bytes leftover after parsing attributes in process `syz.3.717'.
[  135.007755][ T5881] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  135.220538][ T7654] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.733'.
[  135.333144][ T7658] netlink: 'syz.4.735': attribute type 1 has an invalid length.
[  135.350901][ T7658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.738516][ T7682] netlink: 60 bytes leftover after parsing attributes in process `syz.3.746'.
[  136.310477][ T7728] netlink: 208 bytes leftover after parsing attributes in process `syz.4.768'.
[  136.427175][ T5881] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  137.041502][ T7764] veth1_macvtap: left promiscuous mode
[  138.069960][ T7797] netlink: 'syz.4.799': attribute type 2 has an invalid length.
[  138.073401][ T7797] netlink: 'syz.4.799': attribute type 1 has an invalid length.
[  138.195950][ T7797] netlink: 228 bytes leftover after parsing attributes in process `syz.4.799'.
[  138.231374][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'.
[  138.427524][ T7825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'.
[  138.511153][ T7835] netlink: 'syz.3.818': attribute type 11 has an invalid length.
[  138.513646][ T7835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.818'.
[  138.646309][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'.
[  138.870836][ T7858] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  138.959571][ T7865] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  138.961855][ T7865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'.
[  138.980609][ T7867] netlink: 'syz.3.832': attribute type 21 has an invalid length.
[  139.062180][   T47] wlan1 speed is unknown, defaulting to 1000
[  139.064996][   T47] syz0: Port: 1 Link DOWN
[  139.096840][ T7873] netlink: 328 bytes leftover after parsing attributes in process `syz.4.835'.
[  139.350709][ T7895] netlink: 'syz.3.844': attribute type 10 has an invalid length.
[  139.369312][ T7895] vlan0: entered allmulticast mode
[  139.371317][ T7895] veth0_vlan: entered allmulticast mode
[  139.399076][ T7895] team0: Port device vlan0 added
[  139.636724][ T7894] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.645031][ T7894] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.938751][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'.
[  140.130455][ T7915] C: renamed from team_slave_0 (while UP)
[  140.138220][ T7915] netlink: 'syz.4.854': attribute type 3 has an invalid length.
[  140.141937][ T7915] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.878492][ T7945] netlink: 'syz.3.865': attribute type 29 has an invalid length.
[  140.896527][ T7946] netlink: 'syz.4.866': attribute type 1 has an invalid length.
[  140.899656][ T7946] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.866'.
[  141.290602][ T7953] netlink: 'syz.3.870': attribute type 11 has an invalid length.
[  141.294158][ T7953] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.870'.
[  141.300836][ T7952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.368659][ T7955] IPv6: NLM_F_CREATE should be specified when creating new route
[  141.715334][ T7969] netlink: 'syz.3.878': attribute type 10 has an invalid length.
[  141.836210][ T5881] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  141.860313][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.863143][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.869665][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.872513][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.265593][ T7999] netlink: 'syz.4.891': attribute type 1 has an invalid length.
[  142.270192][ T7993] option changes via remount are deprecated (pid=7992 comm=syz.3.888)
[  143.300264][ T8029] netlink: 'syz.2.903': attribute type 2 has an invalid length.
[  143.541420][ T5881] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  148.498027][ T8102] netlink: 'syz.2.929': attribute type 21 has an invalid length.
[  148.501205][ T8102] __nla_validate_parse: 4 callbacks suppressed
[  148.501222][ T8102] netlink: 168 bytes leftover after parsing attributes in process `syz.2.929'.
[  148.659813][ T8106] netlink: 182 bytes leftover after parsing attributes in process `syz.2.932'.
[  148.679319][ T8106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.932'.
[  148.695219][ T8106] netlink: 'syz.2.932': attribute type 10 has an invalid length.
[  148.701606][ T8106] veth0_vlan: left promiscuous mode
[  148.733421][ T8106] veth0_vlan: entered promiscuous mode
[  148.833496][ T8106] team0: Device veth0_vlan failed to register rx_handler
[  148.886608][ T8115] netlink: 216 bytes leftover after parsing attributes in process `syz.2.932'.
[  149.251101][ T8136] netlink: 'syz.2.944': attribute type 1 has an invalid length.
[  150.002416][ T8156] netlink: 10 bytes leftover after parsing attributes in process `syz.4.952'.
[  151.299923][ T8184] netlink: 'syz.2.964': attribute type 6 has an invalid length.
[  151.302886][ T8184] netlink: 164 bytes leftover after parsing attributes in process `syz.2.964'.
[  151.321966][ T8187] netlink: 'syz.3.963': attribute type 29 has an invalid length.
[  151.329672][ T8187] netlink: 'syz.3.963': attribute type 29 has an invalid length.
[  151.334020][ T8187] netlink: 'syz.3.963': attribute type 29 has an invalid length.
[  151.337909][ T8187] netlink: 'syz.3.963': attribute type 29 has an invalid length.
[  151.386683][ T8191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.966'.
[  151.536306][ T8201] netlink: 'syz.4.971': attribute type 10 has an invalid length.
[  151.540144][ T8201] mac80211_hwsim hwsim12 wlan1: left allmulticast mode
[  151.575760][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[  151.581680][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[  152.304894][ T8235] netlink: 124 bytes leftover after parsing attributes in process `syz.3.987'.
[  152.422508][ T8243] syzkaller0: entered promiscuous mode
[  152.425838][ T8243] syzkaller0: entered allmulticast mode
[  154.159158][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.163550][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.170373][ T8254] bridge0: entered allmulticast mode
[  154.183268][ T8256] __nla_validate_parse: 2 callbacks suppressed
[  154.183286][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.4.995'.
[  154.197855][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.4.995'.
[  154.685454][ T8276] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1003'.
[  155.346738][ T8294] netlink: 'syz.2.1009': attribute type 10 has an invalid length.
[  155.714374][ T8294] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  156.046119][ T8310] pim6reg1: entered allmulticast mode
[  156.447681][ T8327] netlink: 'syz.2.1024': attribute type 27 has an invalid length.
[  156.450663][ T8327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1024'.
[  156.470036][ T8327] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  156.600518][ T8335] wlan1 speed is unknown, defaulting to 1000
[  156.846940][ T8351] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1032'.
[  156.851114][ T8351] hsr_slave_0: left promiscuous mode
[  156.865481][ T8351] hsr_slave_1: left promiscuous mode
[  157.541143][ T8361] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1036'.
[  157.544863][ T8361] netlink: zone id is out of range
[  157.546853][ T8361] netlink: zone id is out of range
[  157.548788][ T8361] netlink: get zone limit has 8 unknown bytes
[  158.111995][ T8389] netlink: 'syz.2.1048': attribute type 10 has an invalid length.
[  158.122946][ T8389] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  158.256555][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.557240][   T55] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  159.356768][ T8436] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  159.359038][ T8436] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  159.419367][ T8440] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1073'.
[  159.467881][ T8445] netlink: 'syz.2.1075': attribute type 10 has an invalid length.
[  159.479412][ T8445] bond0: (slave batadv0): Releasing backup interface
[  159.486574][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.489741][ T8445] team0: Port device batadv0 added
[  159.712070][ T8467] netlink: 'syz.2.1085': attribute type 21 has an invalid length.
[  159.717831][ T8467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1085'.
[  159.770770][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'.
[  159.776313][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'.
[  160.050444][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1096'.
[  160.718375][ T8531] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1116'.
[  160.812989][ T8541] netlink: 'syz.4.1120': attribute type 2 has an invalid length.
[  160.820926][ T8541] netlink: 'syz.4.1120': attribute type 1 has an invalid length.
[  160.826425][ T8541] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1120'.
[  160.829938][ T8541] nbd: couldn't find device at index 16
[  160.878707][ T8547] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1124'.
[  161.203616][ T8570] netlink: 'syz.3.1135': attribute type 10 has an invalid length.
[  161.266869][ T8570] bridge0: port 3(netdevsim0) entered blocking state
[  161.270670][ T8570] bridge0: port 3(netdevsim0) entered disabled state
[  161.277480][ T8570] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  161.306528][ T8570] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  161.365854][ T8578] : renamed from bond_slave_0
[  161.558251][ T8580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1138'.
[  162.136452][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'.
[  163.227627][ T8648] netlink: 'syz.4.1168': attribute type 12 has an invalid length.
[  164.357217][ T8656] syzkaller0: entered promiscuous mode
[  164.359011][ T8656] syzkaller0: entered allmulticast mode
[  164.374132][ T8658] netlink: 'syz.3.1171': attribute type 1 has an invalid length.
[  166.283699][ T8704] netlink: 'syz.4.1193': attribute type 1 has an invalid length.
[  166.488422][ T8715] __nla_validate_parse: 4 callbacks suppressed
[  166.488436][ T8715] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1198'.
[  166.561392][ T8720] netlink: 'syz.4.1200': attribute type 10 has an invalid length.
[  166.742027][ T8733] siw: device registration error -23
[  166.755864][ T8729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1204'.
[  167.178993][ T8754] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1214'.
[  167.216558][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1217'.
[  167.412310][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'.
[  167.838940][ T8797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.832486][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'.
[  168.850219][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'.
[  168.856810][ T8827] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1246'.
[  168.878579][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'.
[  168.974487][ T8827] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1246'.
[  169.492590][   T55] Bluetooth: hci0: adv larger than maximum supported
[  170.287812][ T8878] netlink: 'syz.3.1266': attribute type 3 has an invalid length.
[  170.294117][ T8878] netlink: 'syz.3.1266': attribute type 1 has an invalid length.
[  170.302444][ T8880] netlink: 'syz.2.1267': attribute type 37 has an invalid length.
[  170.333256][ T8878] netlink: 'syz.3.1266': attribute type 1 has an invalid length.
[  170.337325][ T8878] netlink: 'syz.3.1266': attribute type 1 has an invalid length.
[  171.541873][   T55] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  171.709625][ T8942] netlink: 'syz.2.1294': attribute type 39 has an invalid length.
[  172.088915][ T8952] __nla_validate_parse: 11 callbacks suppressed
[  172.088932][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'.
[  172.123778][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'.
[  172.242209][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1302'.
[  172.281145][ T8958] netlink: 'syz.4.1303': attribute type 21 has an invalid length.
[  172.331638][ T5881] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11
[  172.422729][ T8967] netlink: 'syz.3.1307': attribute type 13 has an invalid length.
[  172.427134][ T8967] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1307'.
[  173.318557][ T9019] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1331'.
[  173.565352][ T5881] Bluetooth: hci2: command 0x0406 tx timeout
[  174.136134][ T9054] netlink: 62967 bytes leftover after parsing attributes in process `syz.3.1347'.
[  174.176489][ T9058] netlink: 'syz.3.1349': attribute type 10 has an invalid length.
[  174.265409][ T9061] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1349'.
[  174.336902][ T9058] team0 (unregistering): Port device team_slave_0 removed
[  174.352688][ T9058] team0 (unregistering): Port device team_slave_1 removed
[  174.361526][ T9058] team0 (unregistering): Port device vlan0 removed
[  176.364721][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  176.367435][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[  176.370751][   T55] Bluetooth: hci0: hardware error 0x00
[  177.606495][ T9089] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1362'.
[  177.649169][ T9089] netlink: 'syz.4.1362': attribute type 10 has an invalid length.
[  177.813710][ T9089] batman_adv: batadv0: Adding interface: netdevsim0
[  177.817634][ T9089] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.832245][ T9089] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  178.899146][ T9115] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1373'.
[  178.960619][ T9119] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1375'.
[  178.967566][ T9121] netlink: 'syz.3.1376': attribute type 3 has an invalid length.
[  178.970523][ T9121] netlink: 'syz.3.1376': attribute type 1 has an invalid length.
[  178.974730][ T9121] netlink: 201352 bytes leftover after parsing attributes in process `syz.3.1376'.
[  179.089057][ T9127] netlink: 'syz.2.1379': attribute type 21 has an invalid length.
[  179.171401][ T9130] netlink: 'syz.3.1380': attribute type 10 has an invalid length.
[  179.400137][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  179.434807][ T9130] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  179.454685][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'.
[  179.457537][ T9148] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  179.461802][ T9148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.612713][ T9160] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1395'.
[  179.703955][ T9154] netlink: 'syz.3.1391': attribute type 1 has an invalid length.
[  179.731367][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'.
[  179.742393][ T9154] netlink: 'syz.3.1391': attribute type 16 has an invalid length.
[  179.747625][ T9154] netlink: 'syz.3.1391': attribute type 17 has an invalid length.
[  180.022350][ T9154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.085384][ T9168] netlink: 'syz.2.1400': attribute type 21 has an invalid length.
[  180.087970][ T9168] netlink: 'syz.2.1400': attribute type 15 has an invalid length.
[  180.090471][ T9168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1400'.
[  180.093451][ T9168] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.097108][ T9168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.099630][ T9168] IPv6: NLM_F_CREATE should be set when creating new route
[  180.101887][ T9168] IPv6: NLM_F_CREATE should be set when creating new route
[  180.104288][ T9168] IPv6: NLM_F_CREATE should be set when creating new route
[  180.472074][ T9195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.823093][ T9213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1421'.
[  180.829291][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'.
[  181.211636][ T9226] syzkaller0: tun_chr_ioctl cmd 1074025677
[  181.213707][ T9226] syzkaller0: linktype set to 801
[  181.602069][ T9235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.611547][ T9235] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  181.618344][ T9235] bond0 (unregistering): Released all slaves
[  182.620038][ T9293] __nla_validate_parse: 3 callbacks suppressed
[  182.620054][ T9293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1459'.
[  182.855404][ T9305] validate_nla: 2 callbacks suppressed
[  182.855427][ T9305] netlink: 'syz.4.1466': attribute type 10 has an invalid length.
[  182.887521][ T9305] veth0_vlan: left promiscuous mode
[  182.891176][ T9305] veth0_vlan: entered promiscuous mode
[  182.895363][ T9305] team0: Device veth0_vlan failed to register rx_handler
[  182.919035][ T9314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1469'.
[  183.413945][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'.
[  183.788317][ T9339] netlink: 'syz.3.1480': attribute type 22 has an invalid length.
[  183.912202][ T9336] netlink: 'syz.2.1478': attribute type 1 has an invalid length.
[  183.916568][ T9336] netlink: 'syz.2.1478': attribute type 2 has an invalid length.
[  184.556122][ T9334] delete_channel: no stack
[  184.698683][ T9362] netlink: 'syz.2.1487': attribute type 8 has an invalid length.
[  184.716814][ T9362] netlink: 'syz.2.1487': attribute type 6 has an invalid length.
[  184.731226][ T9362] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1487'.
[  187.118336][   T55] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  187.344951][ T9406] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1506'.
[  188.556779][ T9453] netlink: 'syz.3.1526': attribute type 2 has an invalid length.
[  188.559521][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1526'.
[  189.241186][ T5881] Bluetooth: hci1: command 0x0406 tx timeout
[  189.836705][ T9465] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1532'.
[  189.840628][ T9465] : entered promiscuous mode
[  189.842728][ T9465] bond_slave_1: entered promiscuous mode
[  189.844992][ T9465] dummy0: entered promiscuous mode
[  189.976806][ T9478] netlink: 'syz.4.1537': attribute type 1 has an invalid length.
[  189.979205][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'.
[  190.090990][ T9490] netlink: 'syz.3.1544': attribute type 21 has an invalid length.
[  190.478382][ T9509] netdevsim netdevsim4 : renamed from netdevsim0
[  190.486995][ T9519] netlink: 'syz.3.1555': attribute type 9 has an invalid length.
[  190.493875][ T9519] netlink: 195776 bytes leftover after parsing attributes in process `syz.3.1555'.
[  190.594432][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1558'.
[  191.237811][ T9583] openvswitch: netlink: Key type 29 is not supported
[  191.318429][ T9585] netlink: 'syz.3.1585': attribute type 29 has an invalid length.
[  191.432562][ T9599] syzkaller1: tun_chr_ioctl cmd 1074025677
[  191.435530][ T9599] syzkaller1: linktype set to 776
[  191.917519][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'.
[  192.049778][ T9628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1606'.
[  192.053898][ T9628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1606'.
[  192.181750][ T9642] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  192.615074][ T9670] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1623'.
[  192.617859][ T9670] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1623'.
[  192.822928][ T9683] netlink: 'syz.3.1630': attribute type 4 has an invalid length.
[  193.005589][ T9705] netlink: 'syz.3.1639': attribute type 29 has an invalid length.
[  193.052575][ T9709] netlink: 'syz.3.1641': attribute type 3 has an invalid length.
[  193.056406][ T9709] netlink: 'syz.3.1641': attribute type 6 has an invalid length.
[  193.059031][ T9709] netlink: 'syz.3.1641': attribute type 8 has an invalid length.
[  193.775558][ T9727] tun0: tun_chr_ioctl cmd 1074025677
[  193.778090][ T9727] tun0: linktype set to 270
[  193.871618][ T9724] validate_nla: 2 callbacks suppressed
[  193.871711][ T9724] netlink: 'syz.3.1647': attribute type 10 has an invalid length.
[  193.893721][ T9724] __nla_validate_parse: 2 callbacks suppressed
[  193.896818][ T9724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1647'.
[  194.102454][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1655'.
[  194.137291][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.141362][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.412952][ T9759] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  194.569822][ T5934] bridge_slave_1: left allmulticast mode
[  194.571721][ T5934] bridge_slave_1: left promiscuous mode
[  194.574425][ T9773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1670'.
[  194.574448][ T9773] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1670'.
[  194.579885][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.584244][ T9773] netlink: 'syz.3.1670': attribute type 5 has an invalid length.
[  194.586574][ T9773] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1670'.
[  194.590002][ T5934] bridge_slave_0: left allmulticast mode
[  194.591849][ T5934] bridge_slave_0: left promiscuous mode
[  194.596154][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.873465][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.881198][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.885456][ T5934] bond0 (unregistering): Released all slaves
[  194.893705][ T9774] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1671'.
[  195.119768][ T5934] hsr_slave_0: left promiscuous mode
[  195.123125][ T5934] hsr_slave_1: left promiscuous mode
[  195.129162][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.132461][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.462631][ T5934] team0 (unregistering): Port device team_slave_1 removed
[  195.496466][ T5934] team0 (unregistering): Port device team_slave_0 removed
[  196.204946][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  197.438497][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.443721][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.449404][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.455589][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.460432][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.503657][ T9817] wlan1 speed is unknown, defaulting to 1000
[  197.714753][ T9817] chnl_net:caif_netlink_parms(): no params data found
[  197.780804][ T9824] netlink: 'syz.3.1691': attribute type 10 has an invalid length.
[  198.242436][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.245050][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.247368][ T9817] bridge_slave_0: entered allmulticast mode
[  198.250806][ T9817] bridge_slave_0: entered promiscuous mode
[  198.260387][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.262775][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.265662][ T9817] bridge_slave_1: entered allmulticast mode
[  198.269080][ T9817] bridge_slave_1: entered promiscuous mode
[  198.350376][   T55] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  198.351076][   T55] Bluetooth: hci2: unexpected event for opcode 0x0000
[  198.369809][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.392408][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.551300][ T9840] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1694'.
[  198.602741][ T9817] team0: Port device team_slave_0 added
[  198.617184][ T9817] team0: Port device team_slave_1 added
[  198.922546][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.925835][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.936949][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.946472][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.949340][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.960361][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.027097][ T9817] hsr_slave_0: entered promiscuous mode
[  199.029641][ T9817] hsr_slave_1: entered promiscuous mode
[  199.033190][ T9817] debugfs: 'hsr0' already exists in 'hsr'
[  199.037332][ T9817] Cannot create hsr debugfs directory
[  199.243417][ T9817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.392007][ T9817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.489952][   T55] Bluetooth: hci1: command tx timeout
[  201.564064][   T55] Bluetooth: hci1: command tx timeout
[  202.177357][ T9817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.365438][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  202.369022][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  202.376096][   T55] Bluetooth: hci2: hardware error 0x00
[  202.655740][ T9817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.871172][ T9817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  202.883668][ T9817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  202.891773][ T9817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  202.903303][ T9817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  203.101310][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.122122][ T9817] 8021q: adding VLAN 0 to HW filter on device team0
[  203.139977][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.142721][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.160726][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.163546][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.217913][ T9817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.349615][ T9894] syzkaller0: entered promiscuous mode
[  203.351783][ T9894] syzkaller0: entered allmulticast mode
[  203.644011][ T5881] Bluetooth: hci1: command tx timeout
[  204.693966][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  204.736831][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.810456][ T9817] veth0_vlan: entered promiscuous mode
[  204.821225][ T9817] veth1_vlan: entered promiscuous mode
[  204.843352][ T9901] netlink: 'syz.3.1716': attribute type 2 has an invalid length.
[  204.853896][ T9901] netlink: 'syz.3.1716': attribute type 8 has an invalid length.
[  204.857024][ T9901] netlink: 'syz.3.1716': attribute type 9 has an invalid length.
[  204.860176][ T9901] netlink: 'syz.3.1716': attribute type 10 has an invalid length.
[  204.862602][ T9817] veth0_macvtap: entered promiscuous mode
[  204.863306][ T9901] netlink: 'syz.3.1716': attribute type 11 has an invalid length.
[  204.870518][ T9817] veth1_macvtap: entered promiscuous mode
[  204.873088][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1716'.
[  204.910144][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.920310][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.938115][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.941793][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.951761][ T5901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.958424][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.042678][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.060725][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.101653][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.105392][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.726003][   T55] Bluetooth: hci1: command tx timeout
[  206.108396][ T9939] netdevsim netdevsim3 : renamed from netdevsim0
[  206.816878][ T9969] sysfs: Unknown parameter 'subj_type'
[  207.008299][ T9975] netlink: 'syz.3.1749': attribute type 21 has an invalid length.
[  207.011015][ T9975] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1749'.
[  207.170526][ T9981] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1752'.
[  207.235700][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'.
[  210.200919][T10027] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  210.560099][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'.
[  211.769862][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'.
[  211.908951][   T55] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  212.071698][T10096] netlink: 'syz.2.1805': attribute type 2 has an invalid length.
[  212.257260][T10102] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1808'.
[  212.261127][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1808'.
[  212.363467][T10104] netlink: 'syz.2.1809': attribute type 21 has an invalid length.
[  213.247623][T10109] netlink: 'syz.3.1811': attribute type 1 has an invalid length.
[  213.264344][T10109] netlink: 'syz.3.1811': attribute type 3 has an invalid length.
[  213.267389][T10109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1811'.
[  213.415700][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'.
[  213.418518][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1817'.
[  213.461458][T10123] netlink: 'syz.2.1818': attribute type 10 has an invalid length.
[  213.491924][T10123] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1818'.
[  213.966017][   T55] Bluetooth: hci1: command tx timeout
[  213.966599][T10149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.339340][T10166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.383514][T10168] netlink: 'syz.3.1833': attribute type 1 has an invalid length.
[  214.921002][T10185] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1841'.
[  215.115163][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'.
[  215.126395][T10194] siw: device registration error -23
[  215.863127][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'.
[  215.909425][T10209] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1851'.
[  216.278422][T10215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.878510][T10242] netlink: 'syz.2.1865': attribute type 21 has an invalid length.
[  217.051711][T10247] xt_policy: too many policy elements
[  217.605246][T10253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1870'.
[  218.217468][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'.
[  218.387623][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'.
[  218.436968][T10283] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1883'.
[  218.567603][T10290] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1886'.
[  218.574953][T10287] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1886'.
[  218.595804][T10287] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1886'.
[  219.708004][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1014140997 wd_nsec: 1014140931
[  219.922418][T10306] netlink: 'syz.2.1892': attribute type 1 has an invalid length.
[  219.929790][T10306] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1892'.
[  220.242441][T10317] unsupported nlmsg_type 40
[  221.010190][    C1] ==================================================================
[  221.012787][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  221.015724][    C1] Write of size 8 at addr ffff88803bc5dfb0 by task syz.3.1901/10325
[  221.019795][    C1] 
[  221.020569][    C1] CPU: 1 UID: 0 PID: 10325 Comm: syz.3.1901 Not tainted syzkaller #0 PREEMPT(full) 
[  221.020580][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.020587][    C1] Call Trace:
[  221.020591][    C1]  <IRQ>
[  221.020596][    C1]  dump_stack_lvl+0x189/0x250
[  221.020616][    C1]  ? __kasan_check_byte+0x12/0x40
[  221.020629][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.020637][    C1]  ? lock_release+0x4b/0x3e0
[  221.020651][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  221.020662][    C1]  print_report+0xca/0x240
[  221.020670][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  221.020680][    C1]  kasan_report+0x118/0x150
[  221.020691][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  221.020702][    C1]  __xfrm_state_delete+0x696/0xca0
[  221.020713][    C1]  __xfrm_state_delete+0x87b/0xca0
[  221.020723][    C1]  xfrm_timer_handler+0x18f/0xa00
[  221.020732][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  221.020742][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.020751][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.020760][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.020770][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.020778][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  221.020790][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  221.020799][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  221.020808][    C1]  handle_softirqs+0x286/0x870
[  221.020817][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  221.020825][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  221.020833][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  221.020844][    C1]  __irq_exit_rcu+0xca/0x1f0
[  221.020851][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  221.020860][    C1]  irq_exit_rcu+0x9/0x30
[  221.020867][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  221.020877][    C1]  </IRQ>
[  221.020879][    C1]  <TASK>
[  221.020883][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.020892][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  221.020902][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 ab 7a 14 f6 e8 16 d7 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  221.020909][    C1] RSP: 0018:ffffc900032df6c0 EFLAGS: 00000282
[  221.020918][    C1] RAX: 91ecbda04d1c1700 RBX: 0000000000000000 RCX: 91ecbda04d1c1700
[  221.020924][    C1] RDX: 0000000000000000 RSI: ffffffff8d9ba2bf RDI: 0000000000000001
[  221.020930][    C1] RBP: ffffc900032df770 R08: ffffffff8fa3a937 R09: 1ffffffff1f47526
[  221.020935][    C1] R10: dffffc0000000000 R11: fffffbfff1f47527 R12: 0000000000000000
[  221.020941][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200065bed8
[  221.020950][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  221.020959][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  221.020968][    C1]  irqentry_exit+0x6f/0x90
[  221.020977][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.020985][    C1] RIP: 0010:rcu_is_watching+0x7a/0xb0
[  221.020993][    C1] Code: d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d d9 5d fa 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc <e8> e1 54 8d ff eb e8 48 c7 c7 00 fe 13 8e 48 89 de e8 f0 54 59 03
[  221.020999][    C1] RSP: 0018:ffffc900032df838 EFLAGS: 00000246
[  221.021005][    C1] RAX: 000000000005f47c RBX: ffff888136632f98 RCX: 91ecbda04d1c1700
[  221.021011][    C1] RDX: 0000000000000001 RSI: ffffffff8be33de0 RDI: ffffffff8be33da0
[  221.021017][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
[  221.021022][    C1] R10: ffffc900032df978 R11: ffffffff81ac4d00 R12: 1ffff9200065bf25
[  221.021027][    C1] R13: ffffc900032df960 R14: ffffffff8dbe2d18 R15: dffffc0000000000
[  221.021034][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  221.021044][    C1]  ? unwind_next_frame+0xa5/0x2390
[  221.021055][    C1]  ? rcu_is_watching+0x15/0xb0
[  221.021062][    C1]  ? sock_alloc_file+0xb8/0x2e0
[  221.021074][    C1]  ? unwind_next_frame+0xa5/0x2390
[  221.021082][    C1]  unwind_next_frame+0xd4/0x2390
[  221.021091][    C1]  ? unwind_next_frame+0xa5/0x2390
[  221.021100][    C1]  ? alloc_file_pseudo+0x13d/0x210
[  221.021110][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  221.021119][    C1]  arch_stack_walk+0x11c/0x150
[  221.021130][    C1]  ? sock_alloc_file+0xb8/0x2e0
[  221.021142][    C1]  stack_trace_save+0x9c/0xe0
[  221.021151][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  221.021160][    C1]  ? mod_objcg_mlstate+0x24/0x260
[  221.021173][    C1]  kasan_save_track+0x3e/0x80
[  221.021183][    C1]  ? kasan_save_track+0x3e/0x80
[  221.021192][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  221.021201][    C1]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.021220][    C1]  ? alloc_empty_file+0x55/0x1d0
[  221.021228][    C1]  ? alloc_file_pseudo+0x13d/0x210
[  221.021235][    C1]  ? sock_alloc_file+0xb8/0x2e0
[  221.021255][    C1]  __kasan_slab_alloc+0x6c/0x80
[  221.021265][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.021276][    C1]  ? alloc_empty_file+0x55/0x1d0
[  221.021284][    C1]  alloc_empty_file+0x55/0x1d0
[  221.021292][    C1]  alloc_file_pseudo+0x13d/0x210
[  221.021301][    C1]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  221.021311][    C1]  sock_alloc_file+0xb8/0x2e0
[  221.021323][    C1]  __sys_socketpair+0x387/0x560
[  221.021332][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  221.021340][    C1]  do_syscall_64+0xfa/0x3b0
[  221.021349][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.021357][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.021366][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.021373][    C1] RIP: 0033:0x7fed70f8eba9
[  221.021381][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.021387][    C1] RSP: 002b:00007fed71ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  221.021395][    C1] RAX: ffffffffffffffda RBX: 00007fed711d5fa0 RCX: 00007fed70f8eba9
[  221.021401][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  221.021405][    C1] RBP: 00007fed71011e19 R08: 0000000000000000 R09: 0000000000000000
[  221.021410][    C1] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  221.021415][    C1] R13: 00007fed711d6038 R14: 00007fed711d5fa0 R15: 00007fffc814fa18
[  221.021423][    C1]  </TASK>
[  221.021427][    C1] 
[  221.235420][    C1] Allocated by task 9482:
[  221.237163][    C1]  kasan_save_track+0x3e/0x80
[  221.239062][    C1]  __kasan_slab_alloc+0x6c/0x80
[  221.241020][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.243131][    C1]  xfrm_state_alloc+0x24/0x2f0
[  221.244994][    C1]  __find_acq_core+0x8a7/0x1c00
[  221.246913][    C1]  xfrm_find_acq+0x78/0xa0
[  221.248682][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  221.250649][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  221.252390][    C1]  netlink_rcv_skb+0x208/0x470
[  221.253897][    C1]  xfrm_netlink_rcv+0x79/0x90
[  221.255388][    C1]  netlink_unicast+0x82f/0x9e0
[  221.257015][    C1]  netlink_sendmsg+0x805/0xb30
[  221.258513][    C1]  __sock_sendmsg+0x21c/0x270
[  221.259964][    C1]  ____sys_sendmsg+0x505/0x830
[  221.261460][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  221.262901][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  221.264428][    C1]  do_syscall_64+0xfa/0x3b0
[  221.265849][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.267722][    C1] 
[  221.268480][    C1] Freed by task 9:
[  221.269640][    C1]  kasan_save_track+0x3e/0x80
[  221.271090][    C1]  kasan_save_free_info+0x46/0x50
[  221.272642][    C1]  __kasan_slab_free+0x5b/0x80
[  221.274200][    C1]  kmem_cache_free+0x18f/0x400
[  221.275717][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  221.277336][    C1]  process_scheduled_works+0xae1/0x17b0
[  221.279259][    C1]  worker_thread+0x8a0/0xda0
[  221.280814][    C1]  kthread+0x711/0x8a0
[  221.282371][    C1]  ret_from_fork+0x439/0x7d0
[  221.284234][    C1]  ret_from_fork_asm+0x1a/0x30
[  221.286191][    C1] 
[  221.287162][    C1] The buggy address belongs to the object at ffff88803bc5df80
[  221.287162][    C1]  which belongs to the cache xfrm_state of size 928
[  221.292379][    C1] The buggy address is located 48 bytes inside of
[  221.292379][    C1]  freed 928-byte region [ffff88803bc5df80, ffff88803bc5e320)
[  221.296639][    C1] 
[  221.297382][    C1] The buggy address belongs to the physical page:
[  221.299470][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803bc5d680 pfn:0x3bc5c
[  221.303058][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  221.306340][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  221.309238][    C1] page_type: f5(slab)
[  221.310495][    C1] raw: 00fff00000000040 ffff88801cff33c0 dead000000000122 0000000000000000
[  221.313338][    C1] raw: ffff88803bc5d680 00000000800e0006 00000000f5000000 0000000000000000
[  221.316637][    C1] head: 00fff00000000040 ffff88801cff33c0 dead000000000122 0000000000000000
[  221.319324][    C1] head: ffff88803bc5d680 00000000800e0006 00000000f5000000 0000000000000000
[  221.322025][    C1] head: 00fff00000000002 ffffea0000ef1701 00000000ffffffff 00000000ffffffff
[  221.325306][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  221.328652][    C1] page dumped because: kasan: bad access detected
[  221.331082][    C1] page_owner tracks the page as allocated
[  221.333318][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6837, tgid 6836 (syz.4.379), ts 110548832923, free_ts 109689362574
[  221.339802][    C1]  post_alloc_hook+0x240/0x2a0
[  221.341224][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  221.342991][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  221.344938][    C1]  alloc_pages_mpol+0x232/0x4a0
[  221.346532][    C1]  allocate_slab+0x8a/0x370
[  221.347952][    C1]  ___slab_alloc+0xbeb/0x1420
[  221.349458][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  221.351127][    C1]  xfrm_state_alloc+0x24/0x2f0
[  221.352576][    C1]  xfrm_add_acquire+0xf7/0xb20
[  221.354038][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  221.355793][    C1]  netlink_rcv_skb+0x208/0x470
[  221.357477][    C1]  xfrm_netlink_rcv+0x79/0x90
[  221.358999][    C1]  netlink_unicast+0x82f/0x9e0
[  221.360529][    C1]  netlink_sendmsg+0x805/0xb30
[  221.362047][    C1]  __sock_sendmsg+0x21c/0x270
[  221.363462][    C1]  ____sys_sendmsg+0x505/0x830
[  221.364902][    C1] page last free pid 5295 tgid 5295 stack trace:
[  221.366831][    C1]  __free_frozen_pages+0xbc4/0xd30
[  221.368511][    C1]  __put_partials+0x156/0x1a0
[  221.370000][    C1]  put_cpu_partial+0x17c/0x250
[  221.371410][    C1]  __slab_free+0x2d5/0x3c0
[  221.372781][    C1]  qlist_free_all+0x97/0x140
[  221.374222][    C1]  kasan_quarantine_reduce+0x148/0x160
[  221.375918][    C1]  __kasan_slab_alloc+0x22/0x80
[  221.377389][    C1]  __kmalloc_noprof+0x224/0x4f0
[  221.378853][    C1]  tomoyo_realpath_from_path+0xe3/0x5d0
[  221.380608][    C1]  tomoyo_path_perm+0x213/0x4b0
[  221.382128][    C1]  security_inode_getattr+0x12f/0x330
[  221.383825][    C1]  vfs_fstatat+0xb1/0x170
[  221.385182][    C1]  __x64_sys_newfstatat+0x116/0x190
[  221.386824][    C1]  do_syscall_64+0xfa/0x3b0
[  221.388244][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.389945][    C1] 
[  221.390719][    C1] Memory state around the buggy address:
[  221.392817][    C1]  ffff88803bc5de80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  221.395621][    C1]  ffff88803bc5df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.398470][    C1] >ffff88803bc5df80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.400918][    C1]                                      ^
[  221.402634][    C1]  ffff88803bc5e000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.405084][    C1]  ffff88803bc5e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.407643][    C1] ==================================================================
[  221.410397][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  221.412652][    C1] CPU: 1 UID: 0 PID: 10325 Comm: syz.3.1901 Not tainted syzkaller #0 PREEMPT(full) 
[  221.415551][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.418700][    C1] Call Trace:
[  221.419750][    C1]  <IRQ>
[  221.420667][    C1]  dump_stack_lvl+0x99/0x250
[  221.422113][    C1]  ? __asan_memcpy+0x40/0x70
[  221.423610][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.425696][    C1]  ? __pfx__printk+0x10/0x10
[  221.427357][    C1]  vpanic+0x281/0x750
[  221.428576][    C1]  ? __pfx_vpanic+0x10/0x10
[  221.430274][    C1]  ? irqentry_exit+0x74/0x90
[  221.431684][    C1]  panic+0xb9/0xc0
[  221.432841][    C1]  ? __pfx_panic+0x10/0x10
[  221.434231][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  221.436077][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  221.437921][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  221.439586][    C1]  check_panic_on_warn+0x89/0xb0
[  221.441129][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  221.442783][    C1]  end_report+0x78/0x160
[  221.444108][    C1]  kasan_report+0x129/0x150
[  221.445456][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  221.447108][    C1]  __xfrm_state_delete+0x696/0xca0
[  221.448843][    C1]  __xfrm_state_delete+0x87b/0xca0
[  221.450539][    C1]  xfrm_timer_handler+0x18f/0xa00
[  221.452080][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  221.453694][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.455402][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.457112][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.458840][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  221.460573][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  221.462188][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  221.463972][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  221.465573][    C1]  handle_softirqs+0x286/0x870
[  221.467068][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  221.468572][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  221.470196][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  221.472156][    C1]  __irq_exit_rcu+0xca/0x1f0
[  221.474014][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  221.476089][    C1]  irq_exit_rcu+0x9/0x30
[  221.477802][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  221.480016][    C1]  </IRQ>
[  221.481108][    C1]  <TASK>
[  221.482073][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.483944][    C1] RIP: 0010:preempt_schedule_irq+0xb0/0x150
[  221.485791][    C1] Code: 24 20 f6 44 24 21 02 74 0c 90 0f 0b 48 f7 03 08 00 00 00 74 64 bf 01 00 00 00 e8 ab 7a 14 f6 e8 16 d7 4b f6 fb bf 01 00 00 00 <e8> 5b ab ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24
[  221.492120][    C1] RSP: 0018:ffffc900032df6c0 EFLAGS: 00000282
[  221.494464][    C1] RAX: 91ecbda04d1c1700 RBX: 0000000000000000 RCX: 91ecbda04d1c1700
[  221.497797][    C1] RDX: 0000000000000000 RSI: ffffffff8d9ba2bf RDI: 0000000000000001
[  221.500852][    C1] RBP: ffffc900032df770 R08: ffffffff8fa3a937 R09: 1ffffffff1f47526
[  221.503595][    C1] R10: dffffc0000000000 R11: fffffbfff1f47527 R12: 0000000000000000
[  221.506669][    C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200065bed8
[  221.509248][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  221.511077][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  221.513309][    C1]  irqentry_exit+0x6f/0x90
[  221.515023][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.517070][    C1] RIP: 0010:rcu_is_watching+0x7a/0xb0
[  221.518959][    C1] Code: d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d d9 5d fa 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc <e8> e1 54 8d ff eb e8 48 c7 c7 00 fe 13 8e 48 89 de e8 f0 54 59 03
[  221.525083][    C1] RSP: 0018:ffffc900032df838 EFLAGS: 00000246
[  221.527010][    C1] RAX: 000000000005f47c RBX: ffff888136632f98 RCX: 91ecbda04d1c1700
[  221.529541][    C1] RDX: 0000000000000001 RSI: ffffffff8be33de0 RDI: ffffffff8be33da0
[  221.532003][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
[  221.534796][    C1] R10: ffffc900032df978 R11: ffffffff81ac4d00 R12: 1ffff9200065bf25
[  221.537204][    C1] R13: ffffc900032df960 R14: ffffffff8dbe2d18 R15: dffffc0000000000
[  221.539555][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  221.541457][    C1]  ? unwind_next_frame+0xa5/0x2390
[  221.543319][    C1]  ? rcu_is_watching+0x15/0xb0
[  221.545091][    C1]  ? sock_alloc_file+0xb8/0x2e0
[  221.546983][    C1]  ? unwind_next_frame+0xa5/0x2390
[  221.549036][    C1]  unwind_next_frame+0xd4/0x2390
[  221.550843][    C1]  ? unwind_next_frame+0xa5/0x2390
[  221.552472][    C1]  ? alloc_file_pseudo+0x13d/0x210
[  221.554065][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  221.556000][    C1]  arch_stack_walk+0x11c/0x150
[  221.557529][    C1]  ? sock_alloc_file+0xb8/0x2e0
[  221.559060][    C1]  stack_trace_save+0x9c/0xe0
[  221.560607][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  221.562281][    C1]  ? mod_objcg_mlstate+0x24/0x260
[  221.563902][    C1]  kasan_save_track+0x3e/0x80
[  221.565789][    C1]  ? kasan_save_track+0x3e/0x80
[  221.567756][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  221.569763][    C1]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.571695][    C1]  ? alloc_empty_file+0x55/0x1d0
[  221.573250][    C1]  ? alloc_file_pseudo+0x13d/0x210
[  221.574861][    C1]  ? sock_alloc_file+0xb8/0x2e0
[  221.576411][    C1]  __kasan_slab_alloc+0x6c/0x80
[  221.577945][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.579756][    C1]  ? alloc_empty_file+0x55/0x1d0
[  221.581260][    C1]  alloc_empty_file+0x55/0x1d0
[  221.582809][    C1]  alloc_file_pseudo+0x13d/0x210
[  221.584701][    C1]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  221.586397][    C1]  sock_alloc_file+0xb8/0x2e0
[  221.588106][    C1]  __sys_socketpair+0x387/0x560
[  221.589555][    C1]  __x64_sys_socketpair+0x9b/0xb0
[  221.590963][    C1]  do_syscall_64+0xfa/0x3b0
[  221.592571][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.594758][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.596829][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.598679][    C1] RIP: 0033:0x7fed70f8eba9
[  221.600059][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.605886][    C1] RSP: 002b:00007fed71ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  221.609022][    C1] RAX: ffffffffffffffda RBX: 00007fed711d5fa0 RCX: 00007fed70f8eba9
[  221.612059][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  221.615120][    C1] RBP: 00007fed71011e19 R08: 0000000000000000 R09: 0000000000000000
[  221.618174][    C1] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  221.621215][    C1] R13: 00007fed711d6038 R14: 00007fed711d5fa0 R15: 00007fffc814fa18
[  221.623978][    C1]  </TASK>
[  221.625539][    C1] Kernel Offset: disabled
[  221.627133][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:37:41  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82395900 RBX=ffff88803b784800 RCX=ffff888022db9cc0 RDX=0000000000000000
RSI=00007fff2c8ddbb8 RDI=ffff88803b784800 RBP=ffffc9000443fea8 RSP=ffffc9000443fc18
R8 =ffff888022db9cc0 R9 =0000000000000013 R10=00000000c020660b R11=0000000000000000
R12=0000000040086602 R13=1ffff92000887f88 R14=ffff88803b784800 R15=ffff88802bf64a10
RIP=ffffffff8245b560 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556d76c500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33e0dff8 CR3=0000000039054000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6e7fa12e53
XMM06=0000000000000000 00007f6e7fa12e4d XMM07=0000000000000000 00007f6e7fa12e61
XMM08=0000000000000000 00007f6e7fa12ee7 XMM09=0000000000000000 00007f6e7fa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0330
R8 =ffff888107090237 R9 =1ffff11020e12046 R10=dffffc0000000000 R11=ffffffff854fa080
R12=dffffc0000000000 R13=ffffffff99b02919 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa0fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fed71ec86c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33e17ff8 CR3=000000010f5de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fed71012e53
XMM06=0000000000000000 00007fed71012e4d XMM07=0000000000000000 00007fed71012e61
XMM08=0000000000000000 00007fed71012ee7 XMM09=0000000000000000 00007fed71012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
