last executing test programs:

1m10.701078973s ago: executing program 1 (id=564):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"})
r1 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc00020006ebff0005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000100)="6ba4a2"}, 0x20)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400000024000b475280ce6e7806f37201cf3494", 0x14}], 0x1}, 0x44)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'syz_tun\x00', @random="0200ac7fac14"})

1m10.53454273s ago: executing program 1 (id=569):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000180)="7685", 0x0}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2e}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

1m10.160684589s ago: executing program 1 (id=573):
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000280), 0x4)

1m10.048836865s ago: executing program 1 (id=575):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})

1m9.861114459s ago: executing program 1 (id=577):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m9.796756302s ago: executing program 1 (id=579):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000003d000b08d25a80648c7494f90224fc6058000240", 0x18}], 0x1}, 0x0)

1m3.807302558s ago: executing program 0 (id=661):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12727bcc8e7a01e300a8001600200003400400000003a84942de4fe3aefb8000a007a290457f01e84460dd89b316277ce06bbace8017cbec4cce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5354f20d53aaf46b6b60db798262f3d40fad95667e006dcdf63951fd809d5e1cace5019999eece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e780000000000000000000000000000000064c69672c01ffb2d359e0000000000", 0xd8}], 0x1}, 0x8880)

1m3.741621688s ago: executing program 0 (id=662):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000010000002004e24ac1e00010000000000000000030006003c200000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0)

1m3.472444106s ago: executing program 0 (id=663):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$TUNSETCARRIER(r0, 0x80487436, 0x0)

1m3.398305147s ago: executing program 0 (id=664):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x30})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080))

1m3.281765379s ago: executing program 0 (id=667):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

1m3.215850752s ago: executing program 0 (id=668):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

54.472522082s ago: executing program 32 (id=579):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000003d000b08d25a80648c7494f90224fc6058000240", 0x18}], 0x1}, 0x0)

48.218842137s ago: executing program 33 (id=668):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

22.906413076s ago: executing program 2 (id=1014):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x7, 0x1, 0x4, 0x0, 0xb, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40}, 0x94)

22.835235036s ago: executing program 2 (id=1015):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

22.786220328s ago: executing program 2 (id=1016):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="350400004500054cc6a119e30c80a8430111d25a35400c0002000200002037153e370c040180060410004500ec002a560000e7ff00400000ac377653c6de2a7c3af4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000000000516c006c154938456646efee34b951a0789325687ed8934d4780bae8ba0a55a6c130214043ff8ad5086d9792a86372c10fa470195646e9c6", 0x94}, {&(0x7f0000000a40)="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", 0x3a1}], 0x2}, 0x10049014)

22.71607206s ago: executing program 2 (id=1017):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffff5)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x14, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800000020001f309a4f000000ffffffe474f70b0c590e129ab383986136e34f598d299cad5dc7be0a12a861f78528c782dd0220329382e1945f323ce267664c5f7f53e7a036436e6cda4066261e0cdfcbf561817826d602380f59a6000088e16e43ac1bf7b586a30040dba53b864854c65ffe523b53e5158b1b927dd13c0476a306935d9d53396d834565e04d7e57cbcc05c833cb24", @ANYRES32, @ANYRES8], 0x230}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x11b, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33)

22.638782725s ago: executing program 2 (id=1018):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x15, 0x5, 0x0)
close(r2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8800)

20.955843413s ago: executing program 2 (id=1026):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

5.488182667s ago: executing program 34 (id=1026):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

2.414347783s ago: executing program 3 (id=1176):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071106d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

2.413774342s ago: executing program 3 (id=1177):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.155276693s ago: executing program 3 (id=1181):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b704000014000000b70300002bb91a008500000008000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef)

1.911892416s ago: executing program 3 (id=1186):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x42)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2)
r4 = socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000500), 0x2}, 0x142, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffb}, 0x0, 0xffffffffffffffff, r3, 0xa)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0xa, 0x1, 0x106)
r6 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0x9, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x3, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r4)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)
r7 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r7, &(0x7f00000003c0)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/94, 0x5e}], 0x2, &(0x7f00000002c0)=""/215, 0xd7}, 0x10141)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

1.727324624s ago: executing program 4 (id=1187):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000640)=r1, 0x4)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
sendmsg$sock(r2, &(0x7f0000000e00)={&(0x7f0000000840)=@ethernet={0x306, @local}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000008c0)="c367a0da9944fc7ab3617944a6e518d00b76112fab695eee5d8289e0496292348733421eff4d462f43e5c0f6e7560ecaac27c500c4662c4dea830c8ac7e774572830275283de3f93751aca27ca8672af0c8cc3ab736ef6061478576ac6121c921489297916541a216aec69782d01a0a529b8ed53aabeb2b85be175deeb14063de5f5fb917c803b144e8d490c5a28b8c6cbfd449e3e29fd59ff88a277ed421125", 0xa0}, {&(0x7f00000009c0)="1d26bdf400b5aa75c04b70aedbb8290471a5eb960b9c23ea28bdf310940196d41eb54c73abec775bea13ef48387d350e8902d2c466513230cb500cf0f662fcb29ffd7d38a916ff49a359d26035c8aa6b30e2611dca91f75c0d12a645157e6e378dce040989e3db4eeee1da02518afd76e1431aa3a2189bdf3ed9b81c8eeb4c69e8bb9424fa17102ff85b784f3ddb5ceb4725c9bcd037092d60d773774ba57eb9a4ca900aba7652ba1359e8814f3bae8005cefeb50437448eaceeec71c7e152ec434fe74b625652147121da4ea55ddae2f71bde30557898bfc93e7c29960ca3d6", 0xe0}, {&(0x7f0000000ac0)="6db5484581950264393313c08140263695e89fdbec1b6cf185aa9a089b7cc64863f7b7bddef9a6472bc3951aef831042720e5a424216a46578040174204db7ec46f8cd65a32661b6042ee6935802e06de76296877228ee740325d10685c4a3df4a97aaeab4fd34cced87d81e8eaa1a4217aa85ac6111aa9455ab88f8113c29cc20ef626a741a8075a2a0c5fbf757849563ccddd0a4661abdf2757e95e9e51ee910f5aad3c794b3b94af6d73748d1163cbd25941d1c0fed1b5f9211fb2843fee72f532a4e2031105cddd919216f9c7eac12016b8bc90878df8845b6dc881a4aca796866b089359107bc7d", 0xea}, {&(0x7f0000000c40)="97acadd5a9e4df335ed3b30fd5d99ff9e145620d743a388ea61f4d46d5bed2a49b155538573855cf487d77bb61643b13041f66c90b026902b7a1dfa092365eb30febbc4f78700f28a40bc3d9404dbe9405d72b63dcfac4bb7017450ba1bdeec8ca0c6aa4a2da42448e3b68f4ea24e225d5831c8135f0e093cc51a73acf2315a5c4", 0x81}, {&(0x7f0000000bc0)="491f4c62a23f46f2cb0bb93cb5680e42cc54fb6cac82596f0ed48c69b627bfd7bd134c93320e9009a3369a1aada4f8414f4438bbb75562f56f", 0x39}, {&(0x7f0000000d00)="ecb7e34f6127db9f18a0a4afadf28ad6464f4fe5d425dec075e24d51273d7c", 0x1f}], 0x6, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/106, 0x6a}, {&(0x7f0000000580)=""/206, 0xce}], 0x6, &(0x7f0000000700)=""/239, 0xef}, 0x40000000)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))

1.252350398s ago: executing program 4 (id=1188):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xd50, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

187.658228ms ago: executing program 4 (id=1189):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

139.306003ms ago: executing program 4 (id=1190):
r0 = socket$kcm(0xa, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r1, 0x29, 0x36, &(0x7f0000000100)=r2, 0x120)
sendmsg$inet(r1, &(0x7f00000026c0)={&(0x7f0000002440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002480)="a9d2d9e8", 0x4}, {0x0}], 0x2, &(0x7f0000002680)}, 0x40000)
socket$kcm(0xa, 0x0, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x0)

133.976556ms ago: executing program 3 (id=1191):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

812.962µs ago: executing program 4 (id=1192):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x20)

457.77µs ago: executing program 3 (id=1193):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

0s ago: executing program 4 (id=1194):
socket$kcm(0x2, 0x922000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000ac0), 0x90)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3395)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13170' (ED25519) to the list of known hosts.
syzkaller login: [   55.801958][ T5831] cgroup: Unknown subsys name 'net'
[   55.910073][ T5831] cgroup: Unknown subsys name 'cpuset'
[   55.913949][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.228491][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.511515][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.516758][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.520131][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.523953][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.528181][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.531973][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.535443][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.560906][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.564818][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.568476][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.651479][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.655628][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.659542][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.663874][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.667967][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.843641][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   61.974087][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.977350][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.980523][ T5849] bridge_slave_0: entered allmulticast mode
[   61.983555][ T5849] bridge_slave_0: entered promiscuous mode
[   61.987710][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   62.003521][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.006545][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.010475][ T5849] bridge_slave_1: entered allmulticast mode
[   62.013712][ T5849] bridge_slave_1: entered promiscuous mode
[   62.071452][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.076000][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.137013][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   62.143052][ T5849] team0: Port device team_slave_0 added
[   62.158246][ T5849] team0: Port device team_slave_1 added
[   62.160367][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.162835][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.165228][ T5845] bridge_slave_0: entered allmulticast mode
[   62.169162][ T5845] bridge_slave_0: entered promiscuous mode
[   62.178249][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.180630][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.183203][ T5845] bridge_slave_1: entered allmulticast mode
[   62.186325][ T5845] bridge_slave_1: entered promiscuous mode
[   62.254230][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.256732][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.264992][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.270673][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.273243][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.282080][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.292529][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.317046][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.329694][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.332470][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.335405][ T5855] bridge_slave_0: entered allmulticast mode
[   62.338560][ T5855] bridge_slave_0: entered promiscuous mode
[   62.356712][ T5845] team0: Port device team_slave_0 added
[   62.362120][ T5845] team0: Port device team_slave_1 added
[   62.377132][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.380444][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.382738][ T5855] bridge_slave_1: entered allmulticast mode
[   62.385419][ T5855] bridge_slave_1: entered promiscuous mode
[   62.431694][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.434221][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.445460][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.452510][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.461656][ T5849] hsr_slave_0: entered promiscuous mode
[   62.464717][ T5849] hsr_slave_1: entered promiscuous mode
[   62.470597][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.473299][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.482584][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.488547][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.554564][ T5855] team0: Port device team_slave_0 added
[   62.571975][ T5855] team0: Port device team_slave_1 added
[   62.595696][ T5845] hsr_slave_0: entered promiscuous mode
[   62.598587][ T5845] hsr_slave_1: entered promiscuous mode
[   62.600796][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   62.603037][ T5845] Cannot create hsr debugfs directory
[   62.605478][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.610045][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.620493][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.633313][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.636206][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.647218][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.713997][ T5855] hsr_slave_0: entered promiscuous mode
[   62.716644][ T5855] hsr_slave_1: entered promiscuous mode
[   62.719657][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   62.721682][ T5855] Cannot create hsr debugfs directory
[   62.906838][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.915985][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.939745][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.951163][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.022068][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.039193][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.046225][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.054797][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.131180][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.144866][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.155535][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.169916][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.246648][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.263624][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.288416][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   63.293313][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   63.302704][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.305665][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.320781][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.323571][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.328036][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.330986][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.342430][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.344766][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.373304][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.422764][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   63.461453][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.464558][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.473755][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.476646][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.609633][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.619989][   T55] Bluetooth: hci0: command tx timeout
[   63.622613][   T55] Bluetooth: hci1: command tx timeout
[   63.623190][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.663892][ T5845] veth0_vlan: entered promiscuous mode
[   63.672584][ T5845] veth1_vlan: entered promiscuous mode
[   63.690784][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.699989][   T55] Bluetooth: hci2: command tx timeout
[   63.711422][ T5849] veth0_vlan: entered promiscuous mode
[   63.722703][ T5845] veth0_macvtap: entered promiscuous mode
[   63.731776][ T5849] veth1_vlan: entered promiscuous mode
[   63.736400][ T5845] veth1_macvtap: entered promiscuous mode
[   63.763444][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.773513][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.789202][ T5875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.797204][ T5875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.806960][ T5855] veth0_vlan: entered promiscuous mode
[   63.810162][ T5875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.813459][ T5849] veth0_macvtap: entered promiscuous mode
[   63.815982][ T5875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.835600][ T5849] veth1_macvtap: entered promiscuous mode
[   63.840693][ T5855] veth1_vlan: entered promiscuous mode
[   63.865681][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.876682][ T5855] veth0_macvtap: entered promiscuous mode
[   63.894136][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.899988][ T5855] veth1_macvtap: entered promiscuous mode
[   63.918446][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.924949][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.928852][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.932061][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.947124][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.955613][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.959055][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.000557][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.024458][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.031343][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.035545][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.046364][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.051325][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.062200][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.066668][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.071833][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.117339][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.133756][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.148729][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.184424][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.187012][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.231552][ T1864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.239236][ T1864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.537192][ T5931] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET)
[   65.293150][ T5958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'.
[   65.642475][ T5963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.698994][ T5852] Bluetooth: hci0: command tx timeout
[   65.701400][   T55] Bluetooth: hci1: command tx timeout
[   65.714877][ T5967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27'.
[   65.788212][   T55] Bluetooth: hci2: command tx timeout
[   65.807482][ T5969] netlink: 'syz.2.28': attribute type 3 has an invalid length.
[   65.857201][ T5969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.28'.
[   65.965490][ T5984] netlink: 104 bytes leftover after parsing attributes in process `syz.2.35'.
[   66.575901][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'.
[   66.833118][ T6013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'.
[   66.844483][ T6013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'.
[   66.856955][ T6013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.48'.
[   66.875452][ T6015] warning: `syz.0.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.243768][ T6034] netlink: 'syz.2.58': attribute type 16 has an invalid length.
[   67.249982][ T6034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.58'.
[   67.286622][ T6042] netlink: 'syz.0.62': attribute type 9 has an invalid length.
[   67.289507][ T6042] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.62'.
[   67.312020][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.555761][ T6051] nftables ruleset with unbound chain
[   67.686244][ T6057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.837963][   T55] Bluetooth: hci1: command tx timeout
[   67.839895][   T55] Bluetooth: hci0: command tx timeout
[   67.858200][ T5852] Bluetooth: hci2: command tx timeout
[   68.067120][ T6064] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   68.117550][    C1] hrtimer: interrupt took 42282 ns
[   68.166326][ T6064] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   69.354990][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.429353][ T6105] bridge_slave_0 (unregistering): left allmulticast mode
[   69.432021][ T6105] bridge_slave_0 (unregistering): left promiscuous mode
[   69.434491][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.560363][ T6114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.884545][ T5852] Bluetooth: hci0: command tx timeout
[   69.887098][ T5852] Bluetooth: hci1: command tx timeout
[   69.961348][ T5852] Bluetooth: hci2: command tx timeout
[   70.002174][ T6123] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[   70.630345][ T6136] __nla_validate_parse: 7 callbacks suppressed
[   70.630361][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'.
[   70.645349][ T6129] netlink: 'syz.1.97': attribute type 33 has an invalid length.
[   70.650901][ T6129] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.97'.
[   70.660963][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'.
[   71.034873][ T6147] netlink: 36 bytes leftover after parsing attributes in process `syz.1.106'.
[   71.141886][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.144518][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.293528][ T6169] netlink: 44 bytes leftover after parsing attributes in process `syz.1.114'.
[   71.372167][ T6173] sock: sock_timestamping_bind_phc: sock not bind to device
[   71.392944][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   71.403118][ T6171] netlink: 'syz.1.115': attribute type 28 has an invalid length.
[   71.507094][ T6179] netlink: 'syz.1.119': attribute type 21 has an invalid length.
[   71.644009][ T6183] xt_socket: unknown flags 0x40
[   72.554972][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'.
[   72.669867][ T6193] sit0: entered allmulticast mode
[   72.744750][ T6194] sit0: entered promiscuous mode
[   74.085001][ T6261] netlink: 'syz.0.153': attribute type 1 has an invalid length.
[   74.105475][ T6264] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.155'.
[   74.133769][ T6265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.136776][ T6265] IPv6: NLM_F_CREATE should be set when creating new route
[   74.139773][ T6265] IPv6: NLM_F_CREATE should be set when creating new route
[   74.142073][ T6265] IPv6: NLM_F_CREATE should be set when creating new route
[   74.491173][ T6284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.597371][ T6292] netlink: 'syz.1.168': attribute type 3 has an invalid length.
[   74.602533][ T6292] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.168'.
[   76.051950][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[   76.817158][   T55] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[   76.969586][ T6375] netlink: 'syz.0.200': attribute type 20 has an invalid length.
[   77.088960][ T6383] GPL: port 1(gretap0) entered blocking state
[   77.091041][ T6383] GPL: port 1(gretap0) entered disabled state
[   77.093088][ T6383] gretap0: entered allmulticast mode
[   77.095679][ T6383] gretap0: entered promiscuous mode
[   77.953225][ T6416] netlink: 'syz.2.218': attribute type 8 has an invalid length.
[   78.042702][ T6422] netlink: 'syz.0.221': attribute type 10 has an invalid length.
[   78.151004][ T6430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.225'.
[   78.320385][ T6442] netlink: 'syz.2.231': attribute type 3 has an invalid length.
[   78.323760][ T6442] netlink: 'syz.2.231': attribute type 1 has an invalid length.
[   78.326899][ T6442] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.231'.
[   78.356659][ T6446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.376769][ T6442] netlink: 'syz.2.231': attribute type 8 has an invalid length.
[   78.639747][ T6465] netlink: 'syz.0.240': attribute type 1 has an invalid length.
[   78.774949][ T6473] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.244'.
[   78.833698][ T6477] netlink: 830 bytes leftover after parsing attributes in process `syz.0.243'.
[   78.840007][ T6478] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[   78.843344][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   78.847401][ T6477] bond_slave_0: entered promiscuous mode
[   78.850290][ T6477] bond_slave_1: entered promiscuous mode
[   78.902420][ T6477] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.243'.
[   78.984228][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[   79.361133][ T6494] netlink: 22 bytes leftover after parsing attributes in process `syz.2.252'.
[   79.993417][ T6497] syzkaller0: entered promiscuous mode
[   79.995953][ T6497] syzkaller0: entered allmulticast mode
[   81.028118][ T6520] Driver unsupported XDP return value 0 on prog  (id 93) dev N/A, expect packet loss!
[   81.398981][   T10] cfg80211: failed to load regulatory.db
[   82.131694][ T6546] netlink: 156 bytes leftover after parsing attributes in process `syz.1.275'.
[   82.273087][ T6551] netlink: 180 bytes leftover after parsing attributes in process `syz.2.277'.
[   82.724715][ T6558] netlink: 'syz.0.280': attribute type 1 has an invalid length.
[   82.886581][ T6571] netlink: 'syz.1.286': attribute type 10 has an invalid length.
[   82.890716][ T6571] netlink: 'syz.1.286': attribute type 1 has an invalid length.
[   82.893354][ T6571] bridge0: port 1(bridge_slave_0) entered learning state
[   82.969031][ T6572] netlink: 92 bytes leftover after parsing attributes in process `syz.2.287'.
[   83.250613][ T6581] netlink: 'syz.2.287': attribute type 39 has an invalid length.
[   83.548777][ T6589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.293'.
[   83.698431][ T6597] netlink: 830 bytes leftover after parsing attributes in process `syz.1.297'.
[   83.863962][ T6602] netlink: 'syz.2.296': attribute type 21 has an invalid length.
[   83.919298][ T6602] netlink: 156 bytes leftover after parsing attributes in process `syz.2.296'.
[   83.924196][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'.
[   84.149630][ T6615] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   84.637626][ T6620] openvswitch: netlink: EtherType 50a is less than min 600
[   85.266956][ T6634] Zero length message leads to an empty skb
[   85.336429][ T6640] netlink: 124 bytes leftover after parsing attributes in process `syz.2.312'.
[   85.337355][ T6627] netlink: 'syz.0.308': attribute type 29 has an invalid length.
[   85.347281][ T6630] netlink: 'syz.0.308': attribute type 29 has an invalid length.
[   85.364970][ T6640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.312'.
[   85.370651][ T6633] netlink: 'syz.0.308': attribute type 29 has an invalid length.
[   85.380964][ T6636] netlink: 'syz.0.308': attribute type 29 has an invalid length.
[   85.495952][ T6642] netlink: 'syz.1.313': attribute type 1 has an invalid length.
[   85.596956][ T6645] : entered promiscuous mode
[   85.906957][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'.
[   87.472453][ T6740] __nla_validate_parse: 7 callbacks suppressed
[   87.472515][ T6740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'.
[   88.005520][ T6774] validate_nla: 2 callbacks suppressed
[   88.005561][ T6774] netlink: 'syz.1.374': attribute type 5 has an invalid length.
[   88.029575][ T6776] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   89.280070][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[   89.409311][ T6819] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   89.414215][ T6819] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   89.784074][ T6837] netlink: 'syz.2.404': attribute type 28 has an invalid length.
[   89.799092][ T6837] netlink: 'syz.2.404': attribute type 3 has an invalid length.
[   89.805047][ T6837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.404'.
[   90.308284][ T6881] netlink: 'syz.1.424': attribute type 1 has an invalid length.
[   90.558863][ T6890] netlink: 'syz.0.428': attribute type 10 has an invalid length.
[   90.564102][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.573366][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[   90.640795][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.644571][ T6890] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.682057][ T6890] bridge0: entered promiscuous mode
[   90.691171][ T6890] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   90.791209][ T6900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.434'.
[   90.795383][ T6900] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   90.802430][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'.
[   90.813373][ T6902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.835245][ T6904] netlink: 'syz.1.435': attribute type 21 has an invalid length.
[   90.838532][ T6904] netlink: 'syz.1.435': attribute type 4 has an invalid length.
[   90.842027][ T6904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.435'.
[   90.875490][ T6906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.436'.
[   90.885734][ T6906] netlink: 6 bytes leftover after parsing attributes in process `syz.0.436'.
[   91.131495][ T5849] cgroup: fork rejected by pids controller in /syz1
[   91.603731][ T6941] netlink: 4800 bytes leftover after parsing attributes in process `syz.0.454'.
[   91.740689][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.744592][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   91.749578][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   91.752624][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   91.755530][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   91.930606][ T6946] chnl_net:caif_netlink_parms(): no params data found
[   91.971761][ T6955] netlink: 'syz.0.458': attribute type 46 has an invalid length.
[   91.978528][ T6955] netlink: 'syz.0.458': attribute type 19 has an invalid length.
[   92.079383][ T6946] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.084998][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.092373][ T6946] bridge_slave_0: entered allmulticast mode
[   92.102313][ T6946] bridge_slave_0: entered promiscuous mode
[   92.107245][ T6946] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.111362][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.114434][ T6946] bridge_slave_1: entered allmulticast mode
[   92.128589][ T6946] bridge_slave_1: entered promiscuous mode
[   92.165524][ T6946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.173698][ T6946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.253542][ T6946] team0: Port device team_slave_0 added
[   92.308731][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.325698][ T6946] team0: Port device team_slave_1 added
[   92.453157][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.478215][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.480587][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.494403][ T6946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.542504][ T6946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.545544][ T6946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.555631][ T6946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.571542][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.635535][ T6946] hsr_slave_0: entered promiscuous mode
[   92.639560][ T6946] hsr_slave_1: entered promiscuous mode
[   92.641753][ T6946] debugfs: 'hsr0' already exists in 'hsr'
[   92.643510][ T6946] Cannot create hsr debugfs directory
[   92.673355][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.880590][ T5876] bridge_slave_1: left allmulticast mode
[   92.884149][ T5876] bridge_slave_1: left promiscuous mode
[   92.887132][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.896382][ T5876] bridge_slave_0: left allmulticast mode
[   92.903378][ T5876] bridge_slave_0: left promiscuous mode
[   92.909325][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.044689][ T6987] __nla_validate_parse: 2 callbacks suppressed
[   93.044705][ T6987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.265635][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.290237][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.294832][ T5876] bond0 (unregistering): Released all slaves
[   93.348212][ T7000] netlink: 'syz.2.473': attribute type 3 has an invalid length.
[   93.351148][ T7000] netlink: 116 bytes leftover after parsing attributes in process `syz.2.473'.
[   93.355636][ T5876] : left promiscuous mode
[   93.386216][ T6994] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   93.779291][   T55] Bluetooth: hci1: command tx timeout
[   94.694059][ T7015] netlink: 60 bytes leftover after parsing attributes in process `syz.2.475'.
[   94.703194][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.2.475'.
[   94.736575][ T7016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.475'.
[   94.836997][ T7022] =======================================================
[   94.836997][ T7022] WARNING: The mand mount option has been deprecated and
[   94.836997][ T7022]          and is ignored by this kernel. Remove the mand
[   94.836997][ T7022]          option from the mount to silence this warning.
[   94.836997][ T7022] =======================================================
[   94.856696][ T7022] tmpfs: Bad value for 'mode'
[   94.912496][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'.
[   95.115718][ T5876] hsr_slave_0: left promiscuous mode
[   95.121227][ T5876] hsr_slave_1: left promiscuous mode
[   95.124597][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.130203][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.137263][ T7041] netlink: 'syz.2.483': attribute type 10 has an invalid length.
[   95.144043][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.147277][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.176486][ T5876] veth1_macvtap: left promiscuous mode
[   95.179284][ T5876] veth0_macvtap: left promiscuous mode
[   95.181740][ T5876] veth1_vlan: left promiscuous mode
[   95.184063][ T5876] veth0_vlan: left promiscuous mode
[   95.247619][ T7044] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.483'.
[   95.595072][ T5876] team0 (unregistering): Port device team_slave_1 removed
[   95.618670][ T5876] team0 (unregistering): Port device team_slave_0 removed
[   95.859098][   T55] Bluetooth: hci1: command tx timeout
[   95.934254][ T7041] team0 (unregistering): Port device team_slave_0 removed
[   95.942316][ T7041] team0 (unregistering): Port device team_slave_1 removed
[   95.952754][ T7052] netlink: 'syz.0.487': attribute type 29 has an invalid length.
[   95.956806][ T7053] netlink: 'syz.0.487': attribute type 29 has an invalid length.
[   95.982240][ T7054] netlink: 'syz.0.487': attribute type 29 has an invalid length.
[   95.985924][ T7055] netlink: 'syz.0.487': attribute type 29 has an invalid length.
[   96.051867][ T6946] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.057335][ T6946] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.062662][ T6946] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.080754][ T6946] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.185330][   T55] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[   97.560420][ T7079] syzkaller1: tun_chr_ioctl cmd 1074812118
[   97.564827][ T7080] netlink: 'syz.2.494': attribute type 3 has an invalid length.
[   97.568602][ T7080] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.494'.
[   97.631672][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.661009][ T6946] 8021q: adding VLAN 0 to HW filter on device team0
[   97.697768][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.700881][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.706469][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.709492][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.857232][ T7102] netlink: 112 bytes leftover after parsing attributes in process `syz.0.502'.
[   97.903977][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.940101][ T6946] veth0_vlan: entered promiscuous mode
[   97.948452][ T5852] Bluetooth: hci1: command tx timeout
[   97.956158][ T6946] veth1_vlan: entered promiscuous mode
[   97.980425][ T6946] veth0_macvtap: entered promiscuous mode
[   97.986336][ T6946] veth1_macvtap: entered promiscuous mode
[   98.001844][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.011741][ T6946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.019289][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.022263][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.032715][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.266931][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[   98.714952][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.774801][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.781180][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.826721][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.832814][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.055661][ T7120] netlink: 'syz.0.508': attribute type 10 has an invalid length.
[   99.583630][ T7120] team0: Device ipvlan1 failed to register rx_handler
[   99.874486][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'.
[   99.878851][ T7147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'.
[  100.017755][   T55] Bluetooth: hci1: command tx timeout
[  100.084728][ T7120] syz.0.508 (7120) used greatest stack depth: 19120 bytes left
[  102.070637][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[  102.074186][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[  102.142144][ T7190] openvswitch: netlink: IP tunnel dst address not specified
[  102.374998][ T7196] netlink: 'syz.1.537': attribute type 10 has an invalid length.
[  102.390275][ T7196] veth0_vlan: entered allmulticast mode
[  102.447274][ T7196] veth0_vlan: left promiscuous mode
[  102.466512][ T7196] veth0_vlan: entered promiscuous mode
[  102.496457][ T7196] team0: Device veth0_vlan failed to register rx_handler
[  102.632977][ T7198] delete_channel: no stack
[  102.689636][ T7196] syz.1.537 (7196) used greatest stack depth: 17000 bytes left
[  102.797923][ T7208] netlink: 'syz.2.542': attribute type 11 has an invalid length.
[  103.132544][ T7228] lo speed is unknown, defaulting to 1000
[  103.166750][ T7228] lo speed is unknown, defaulting to 1000
[  103.174235][ T7228] lo speed is unknown, defaulting to 1000
[  103.403264][ T7158] Set syz1 is full, maxelem 65536 reached
[  104.005747][ T7253] bridge0: port 3(ip6gretap0) entered blocking state
[  104.011977][ T7253] bridge0: port 3(ip6gretap0) entered disabled state
[  104.014315][ T7253] ip6gretap0: entered allmulticast mode
[  104.032406][ T7253] ip6gretap0: entered promiscuous mode
[  104.035509][ T7253] bridge0: port 3(ip6gretap0) entered blocking state
[  104.037943][ T7253] bridge0: port 3(ip6gretap0) entered forwarding state
[  104.091223][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[  104.094982][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[  104.110316][ T5820] lo speed is unknown, defaulting to 1000
[  104.113246][ T7228] infiniband syz2: set down
[  104.115349][ T7228] infiniband syz2: added lo
[  104.122161][ T7228] syz2: rxe_create_cq: returned err = -12
[  104.124679][ T7228] infiniband syz2: Couldn't create ib_mad CQ
[  104.127433][ T7228] infiniband syz2: Couldn't open port 1
[  104.165573][ T7228] RDS/IB: syz2: added
[  104.180008][ T7228] smc: adding ib device syz2 with port count 1
[  104.182665][ T7228] smc:    ib device syz2 port 1 has pnetid 
[  104.186495][ T5820] lo speed is unknown, defaulting to 1000
[  104.194746][ T7228] lo speed is unknown, defaulting to 1000
[  104.237872][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'.
[  104.475781][ T7228] lo speed is unknown, defaulting to 1000
[  104.807962][ T7228] lo speed is unknown, defaulting to 1000
[  105.261895][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  105.266180][ T7294] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  105.273113][ T7294] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  105.978093][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'.
[  106.039857][ T7327] netlink: 'syz.2.598': attribute type 4 has an invalid length.
[  106.043191][ T7327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.598'.
[  106.062254][ T7327] .`: renamed from bond0 (while UP)
[  107.015221][ T7348] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  107.022663][ T7348] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.608'.
[  107.638151][ T7364] netlink: 'syz.2.615': attribute type 4 has an invalid length.
[  108.561885][ T7389] netlink: 'syz.0.627': attribute type 21 has an invalid length.
[  108.764925][ T7399] netlink: 'syz.0.631': attribute type 9 has an invalid length.
[  108.779715][ T7399] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.631'.
[  109.182403][ T7415] netlink: 'syz.0.639': attribute type 2 has an invalid length.
[  109.185677][ T7415] netlink: 'syz.0.639': attribute type 8 has an invalid length.
[  109.196064][ T7415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.639'.
[  109.533419][ T7420] netlink: 'syz.0.641': attribute type 1 has an invalid length.
[  109.536865][ T7420] netlink: 616 bytes leftover after parsing attributes in process `syz.0.641'.
[  109.546705][ T7420] netlink: 'syz.0.641': attribute type 1 has an invalid length.
[  110.308335][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.651'.
[  110.485987][ T7443] netlink: 156 bytes leftover after parsing attributes in process `syz.0.652'.
[  110.573698][ T7450] netlink: 'syz.2.655': attribute type 11 has an invalid length.
[  110.775729][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'.
[  111.336806][ T7470] bridge0: port 1(hsr_slave_1) entered blocking state
[  111.342201][ T7470] bridge0: port 1(hsr_slave_1) entered disabled state
[  111.368932][ T7470] hsr_slave_1: entered allmulticast mode
[  111.380387][ T7470] hsr_slave_1: left allmulticast mode
[  111.450543][ T7476] sysfs: Unknown parameter 'subj_type'
[  111.629410][ T7480] validate_nla: 1 callbacks suppressed
[  111.629425][ T7480] netlink: 'syz.2.670': attribute type 3 has an invalid length.
[  111.634997][ T7480] netlink: 'syz.2.670': attribute type 16 has an invalid length.
[  111.639694][ T7480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.670'.
[  112.601161][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'.
[  113.822996][ T7510] netlink: 'syz.2.683': attribute type 10 has an invalid length.
[  113.850021][ T7510] .`: (slave netdevsim0): Enslaving as an active interface with an up link
[  117.762320][ T7561] macvtap0: refused to change device tx_queue_len
[  117.877363][ T7563] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  117.881169][ T7563] netlink: 'syz.2.708': attribute type 2 has an invalid length.
[  117.883968][ T7563] netlink: 'syz.2.708': attribute type 4 has an invalid length.
[  117.886706][ T7563] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  117.892544][ T7563] netlink: 'syz.2.708': attribute type 2 has an invalid length.
[  117.895819][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  117.900033][ T7563] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.708'.
[  117.903954][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  119.836776][ T7596] netlink: 17 bytes leftover after parsing attributes in process `syz.2.724'.
[  119.847162][ T7596] netlink: zone id is out of range
[  119.850480][ T7596] netlink: zone id is out of range
[  119.853800][ T7596] netlink: zone id is out of range
[  119.856370][ T7596] netlink: zone id is out of range
[  119.860223][ T7596] netlink: zone id is out of range
[  119.863029][ T7596] netlink: zone id is out of range
[  119.864932][ T7596] netlink: zone id is out of range
[  119.866740][ T7596] netlink: zone id is out of range
[  119.871512][ T7596] netlink: zone id is out of range
[  119.874279][ T7596] netlink: zone id is out of range
[  120.598941][ T7597] syz.2.724 (7597) used obsolete PPPIOCDETACH ioctl
[  120.862689][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.866121][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.873416][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.877218][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.880680][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.910835][ T7601] lo speed is unknown, defaulting to 1000
[  121.054046][ T5876] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.121249][ T5876] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.186991][ T5876] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.265519][ T5876] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.285238][ T7601] chnl_net:caif_netlink_parms(): no params data found
[  121.434217][ T7601] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.440253][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.442984][ T7601] bridge_slave_0: entered allmulticast mode
[  121.446290][ T7601] bridge_slave_0: entered promiscuous mode
[  121.472297][ T7601] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.487702][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.497925][ T7601] bridge_slave_1: entered allmulticast mode
[  121.500759][ T7601] bridge_slave_1: entered promiscuous mode
[  121.555493][ T5876] ip6gretap0: left allmulticast mode
[  121.557273][ T5876] ip6gretap0: left promiscuous mode
[  121.559801][ T5876] bridge0: port 3(ip6gretap0) entered disabled state
[  121.568004][ T5876] bridge_slave_1: left allmulticast mode
[  121.570328][ T5876] bridge_slave_1: left promiscuous mode
[  121.572782][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.581772][ T5876] bridge_slave_0: left allmulticast mode
[  121.584033][ T5876] bridge_slave_0: left promiscuous mode
[  121.585964][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.885248][ T5852] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  121.888892][ T5852] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  121.973939][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.982965][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.990517][ T5876] bond0 (unregistering): Released all slaves
[  122.011041][ T7601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.038935][ T7601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.208487][ T7601] team0: Port device team_slave_0 added
[  122.212198][ T7601] team0: Port device team_slave_1 added
[  122.308279][ T5852] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  122.373594][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.376565][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.421667][ T7601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.439081][ T7601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.442034][ T7601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.468737][ T7601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.613330][ T7601] hsr_slave_0: entered promiscuous mode
[  122.616803][ T7601] hsr_slave_1: entered promiscuous mode
[  122.721396][ T5876] hsr_slave_0: left promiscuous mode
[  122.724297][ T5876] hsr_slave_1: left promiscuous mode
[  122.727031][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.732057][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.736915][ T5876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.741100][ T5876] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.754883][ T5876] veth1_macvtap: left promiscuous mode
[  122.756764][ T5876] veth0_macvtap: left promiscuous mode
[  122.759223][ T5876] veth1_vlan: left promiscuous mode
[  122.898363][ T5852] Bluetooth: hci1: command tx timeout
[  123.223699][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  123.257214][ T5876] team0 (unregistering): Port device team_slave_0 removed
[  123.718314][ T7652] delete_channel: no stack
[  123.925162][ T7601] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  123.940460][ T7601] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  123.960082][ T7601] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  123.970481][ T7601] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  123.980846][ T7667] netlink: 176 bytes leftover after parsing attributes in process `syz.2.742'.
[  124.130750][ T7601] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.162969][ T7601] 8021q: adding VLAN 0 to HW filter on device team0
[  124.188375][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.191393][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.214226][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.217409][ T6998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.562767][ T7601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.626904][ T7601] veth0_vlan: entered promiscuous mode
[  124.645119][ T7601] veth1_vlan: entered promiscuous mode
[  124.705798][ T7601] veth0_macvtap: entered promiscuous mode
[  124.715178][ T7601] veth1_macvtap: entered promiscuous mode
[  124.735125][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.745004][ T7601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.758470][ T5876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.762300][ T5876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.765972][ T5876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.785561][ T5876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.878490][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.881853][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.942919][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.947168][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.951395][ T7704] netlink: 'syz.2.750': attribute type 6 has an invalid length.
[  124.982632][ T5852] Bluetooth: hci1: command tx timeout
[  125.375237][ T7711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.752'.
[  125.844772][ T5852] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[  126.083531][ T7742] netlink: 176 bytes leftover after parsing attributes in process `syz.3.766'.
[  126.182278][ T7744] netlink: 'syz.2.767': attribute type 21 has an invalid length.
[  126.207468][ T7744] netlink: 'syz.2.767': attribute type 15 has an invalid length.
[  126.213519][ T7744] netlink: 156 bytes leftover after parsing attributes in process `syz.2.767'.
[  126.217272][ T7744] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.223599][ T7744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.226169][ T7744] IPv6: NLM_F_CREATE should be set when creating new route
[  126.229380][ T7744] IPv6: NLM_F_CREATE should be set when creating new route
[  126.232456][ T7744] IPv6: NLM_F_CREATE should be set when creating new route
[  126.663847][ T7762] syzkaller0: entered promiscuous mode
[  126.676881][ T7762] syzkaller0: entered allmulticast mode
[  126.989148][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.994493][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.999687][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.004472][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.026244][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.059503][   T55] Bluetooth: hci1: command tx timeout
[  127.179908][ T5875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.196102][ T7769] lo speed is unknown, defaulting to 1000
[  127.280424][ T5875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.410438][ T7778] IPv6: NLM_F_CREATE should be specified when creating new route
[  128.318586][ T5875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.476287][ T5875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.486661][ T7769] chnl_net:caif_netlink_parms(): no params data found
[  128.625438][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.628672][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.631308][ T7769] bridge_slave_0: entered allmulticast mode
[  128.634248][ T7769] bridge_slave_0: entered promiscuous mode
[  128.658075][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.660724][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.663607][ T7769] bridge_slave_1: entered allmulticast mode
[  128.666790][ T7769] bridge_slave_1: entered promiscuous mode
[  128.679630][ T5875] bridge_slave_1: left allmulticast mode
[  128.682096][ T5875] bridge_slave_1: left promiscuous mode
[  128.684303][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.696703][ T5875] gretap0: left allmulticast mode
[  128.703132][ T5875] gretap0: left promiscuous mode
[  128.706159][ T5875] GPL: port 1(gretap0) entered disabled state
[  128.828203][ T5875] bond_slave_0: left promiscuous mode
[  128.830225][ T5875] bond_slave_1: left promiscuous mode
[  128.921451][ T7806] netlink: 'syz.2.791': attribute type 10 has an invalid length.
[  128.967207][ T5875] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  129.057728][   T55] Bluetooth: hci2: command tx timeout
[  129.117991][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.124534][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.130165][ T5875] bond0 (unregistering): Released all slaves
[  129.138087][   T55] Bluetooth: hci1: command tx timeout
[  129.160631][ T7806] veth1_vlan: entered allmulticast mode
[  129.211883][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.254635][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.354534][ T7769] team0: Port device team_slave_0 added
[  129.406707][ T7769] team0: Port device team_slave_1 added
[  129.417406][ T7820] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  129.472940][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.475919][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.517238][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.525799][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.531020][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.543030][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.986658][ T7769] hsr_slave_0: entered promiscuous mode
[  129.989262][ T7769] hsr_slave_1: entered promiscuous mode
[  129.991467][ T7769] debugfs: 'hsr0' already exists in 'hsr'
[  129.993373][ T7769] Cannot create hsr debugfs directory
[  130.157330][ T7833] netlink: 'syz.3.799': attribute type 10 has an invalid length.
[  130.755610][ T7847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'.
[  130.826959][ T7833] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  130.875285][ T7849] option changes via remount are deprecated (pid=7848 comm=syz.2.806)
[  130.892645][ T5875] hsr_slave_0: left promiscuous mode
[  130.895046][ T5875] hsr_slave_1: left promiscuous mode
[  130.899733][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.902768][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.906468][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.909762][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.920193][ T5875] veth1_macvtap: left promiscuous mode
[  130.922119][ T5875] veth0_macvtap: left promiscuous mode
[  130.924366][ T5875] veth1_vlan: left promiscuous mode
[  130.926430][ T5875] veth0_vlan: left promiscuous mode
[  131.137725][   T55] Bluetooth: hci2: command tx timeout
[  131.253605][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  131.275915][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  131.615931][ T7886] netlink: 112 bytes leftover after parsing attributes in process `syz.3.812'.
[  131.657989][ T7769] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.666185][ T7769] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  131.682491][ T7769] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.695042][ T7769] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  131.810535][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.846836][ T7769] 8021q: adding VLAN 0 to HW filter on device team0
[  131.877590][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.880762][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.896787][ T7908] net_ratelimit: 75 callbacks suppressed
[  131.896798][ T7908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.907087][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.910030][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.053674][ T7910] netlink: 'syz.3.816': attribute type 10 has an invalid length.
[  132.224894][ T7910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.305915][ T7910] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  132.317173][ T7922] netlink: 10 bytes leftover after parsing attributes in process `syz.2.820'.
[  132.394377][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.508329][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'.
[  132.580850][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.583308][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.645174][ T7769] veth0_vlan: entered promiscuous mode
[  132.660444][ T7769] veth1_vlan: entered promiscuous mode
[  132.676871][ T7769] veth0_macvtap: entered promiscuous mode
[  132.677469][ T7945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.682174][ T7769] veth1_macvtap: entered promiscuous mode
[  132.694053][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.703956][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.713962][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.717500][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.724300][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.728708][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.773912][ T7947] netlink: 'syz.3.826': attribute type 3 has an invalid length.
[  132.780294][ T7947] netlink: 'syz.3.826': attribute type 3 has an invalid length.
[  132.840711][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.844044][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.894270][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.900496][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.228042][   T55] Bluetooth: hci2: command tx timeout
[  133.591174][ T7987] syzkaller0: entered promiscuous mode
[  133.593526][ T7987] syzkaller0: entered allmulticast mode
[  135.307637][   T55] Bluetooth: hci2: command tx timeout
[  135.546106][ T8001] tun0: tun_chr_ioctl cmd 1074812117
[  135.902885][ T8037] netlink: 'syz.4.854': attribute type 39 has an invalid length.
[  137.072530][ T8087] netlink: 'syz.3.863': attribute type 4 has an invalid length.
[  137.075789][ T8087] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.863'.
[  137.760265][ T8100] netlink: 'syz.3.867': attribute type 12 has an invalid length.
[  137.766352][ T8100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.867'.
[  137.983906][ T8112] netlink: 'syz.3.873': attribute type 28 has an invalid length.
[  137.987154][ T8112] netlink: 'syz.3.873': attribute type 4 has an invalid length.
[  137.996582][ T8112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.873'.
[  138.590876][ T8133] delete_channel: no stack
[  138.592858][ T8133] delete_channel: no stack
[  138.616713][ T8136] netlink: 92 bytes leftover after parsing attributes in process `syz.4.882'.
[  138.627218][ T8135] delete_channel: no stack
[  138.883794][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.4.887'.
[  138.887417][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'.
[  139.169006][ T8159] netlink: 'syz.4.892': attribute type 22 has an invalid length.
[  139.178365][ T8159] netlink: 'syz.4.892': attribute type 1 has an invalid length.
[  139.181046][ T8159] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.892'.
[  141.912353][ T8210] lo speed is unknown, defaulting to 1000
[  142.282324][ T8227] netlink: 'syz.2.920': attribute type 46 has an invalid length.
[  142.285657][ T8227] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.920'.
[  142.806070][ T8264] netlink: 'syz.3.934': attribute type 19 has an invalid length.
[  142.812337][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.934'.
[  143.668136][ T8281] netlink: 'syz.2.937': attribute type 2 has an invalid length.
[  143.680145][ T8281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'.
[  144.506675][ T8291] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.940'.
[  144.742186][ T8312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.950'.
[  144.845104][ T8319] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  144.850248][ T8319] netlink: 'syz.2.953': attribute type 2 has an invalid length.
[  144.853558][ T8319] netlink: 'syz.2.953': attribute type 3 has an invalid length.
[  144.856860][ T8319] netlink: 'syz.2.953': attribute type 5 has an invalid length.
[  144.863022][ T8319] netlink: 'syz.2.953': attribute type 6 has an invalid length.
[  144.866348][ T8319] netlink: 'syz.2.953': attribute type 7 has an invalid length.
[  144.871760][ T8319] netlink: 9 bytes leftover after parsing attributes in process `syz.2.953'.
[  144.875557][ T8319] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.953'.
[  144.884465][ T8319] netlink: 'syz.2.953': attribute type 1 has an invalid length.
[  144.890345][ T8319] netlink: 9 bytes leftover after parsing attributes in process `syz.2.953'.
[  145.253453][ T8333] netlink: 156 bytes leftover after parsing attributes in process `syz.2.960'.
[  147.286255][ T8343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'.
[  147.289764][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.963'.
[  147.561136][ T8352] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.585584][ T8352] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.502704][ T8375] netlink: 277 bytes leftover after parsing attributes in process `syz.3.975'.
[  149.406652][ T8385] xt_l2tp: v2 sid > 0xffff: 131072
[  149.443534][   T55] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  149.580149][ T8391] validate_nla: 9 callbacks suppressed
[  149.580165][ T8391] netlink: 'syz.3.983': attribute type 4 has an invalid length.
[  149.676794][ T8402] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.988'.
[  149.701049][ T8402] netlink: 'syz.2.988': attribute type 4 has an invalid length.
[  149.873106][ T8402] netlink: 'syz.2.988': attribute type 10 has an invalid length.
[  150.814381][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1004'.
[  151.001251][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'.
[  151.317721][   T55] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13
[  151.935645][ T8467] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1016'.
[  152.057435][ T8469] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1017'.
[  154.094223][ T8496] netlink: 'syz.4.1028': attribute type 21 has an invalid length.
[  154.097439][ T8496] netlink: 'syz.4.1028': attribute type 1 has an invalid length.
[  155.229510][ T8510] netlink: 'syz.3.1035': attribute type 5 has an invalid length.
[  155.622326][ T8525] netlink: 'syz.4.1041': attribute type 1 has an invalid length.
[  155.700520][ T8531] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  155.882783][ T8535] syzkaller0: entered promiscuous mode
[  155.885059][ T8535] syzkaller0: entered allmulticast mode
[  155.931020][ T8529] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  155.955990][ T8537] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1046'.
[  156.390840][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'.
[  160.858173][ T8589] netlink: 'syz.3.1068': attribute type 21 has an invalid length.
[  160.861302][ T8589] netlink: 'syz.3.1068': attribute type 6 has an invalid length.
[  160.864036][ T8589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1068'.
[  161.865568][ T8603] netlink: 'syz.3.1074': attribute type 10 has an invalid length.
[  161.871813][ T8603] geneve0: entered promiscuous mode
[  161.891938][ T8603] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  162.819354][ T8622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1080'.
[  162.976995][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1084'.
[  163.017248][ T8632] cgroup: Unknown subsys name 'uid'
[  163.083786][ T8634] wg2: entered promiscuous mode
[  163.085904][ T8634] wg2: entered allmulticast mode
[  163.092166][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1086'.
[  163.413577][ T8638] netlink: 'syz.3.1088': attribute type 4 has an invalid length.
[  163.430333][ T8638] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1088'.
[  163.575823][ T8638] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1088'.
[  163.581188][ T8638] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  163.672163][ T8643] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1090'.
[  164.012360][ T8659] netlink: 'syz.3.1097': attribute type 3 has an invalid length.
[  164.015798][ T8659] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.1097'.
[  164.034640][ T8659] netlink: 'syz.3.1097': attribute type 3 has an invalid length.
[  164.039940][ T8659] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.1097'.
[  164.880647][ T8699] netlink: 'syz.4.1114': attribute type 3 has an invalid length.
[  164.883464][ T8699] netlink: 'syz.4.1114': attribute type 2 has an invalid length.
[  164.886725][ T8699] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.1114'.
[  164.893818][ T8701] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1115'.
[  164.990432][ T8706] netlink: 'syz.4.1117': attribute type 1 has an invalid length.
[  169.700129][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  169.707150][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  169.712664][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  169.716322][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  169.720955][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  169.746273][ T8790] IPv6: Can't replace route, no match found
[  169.764094][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.798290][ T8788] lo speed is unknown, defaulting to 1000
[  169.871269][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.962371][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.031608][   T12] .`: (slave netdevsim0): Releasing backup interface
[  170.036970][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.144094][ T8788] chnl_net:caif_netlink_parms(): no params data found
[  170.212230][   T12] bridge_slave_1: left allmulticast mode
[  170.214576][   T12] bridge_slave_1: left promiscuous mode
[  170.217142][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.225187][   T12] bridge_slave_0: left promiscuous mode
[  170.238089][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.359134][ T8810] netlink: 'syz.3.1160': attribute type 29 has an invalid length.
[  170.363143][ T8810] netlink: 'syz.3.1160': attribute type 3 has an invalid length.
[  170.367810][ T8810] __nla_validate_parse: 2 callbacks suppressed
[  170.367886][ T8810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1160'.
[  170.683823][   T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.720269][   T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.725469][   T12] .` (unregistering): Released all slaves
[  170.983152][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.985897][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.994913][ T8788] bridge_slave_0: entered allmulticast mode
[  171.007875][ T8788] bridge_slave_0: entered promiscuous mode
[  171.022959][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.026201][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.046647][ T8788] bridge_slave_1: entered allmulticast mode
[  171.055774][ T8788] bridge_slave_1: entered promiscuous mode
[  171.141302][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'.
[  171.186032][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.282751][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.356667][ T8788] team0: Port device team_slave_0 added
[  171.369712][ T8788] team0: Port device team_slave_1 added
[  171.475611][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.497588][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.511920][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.520766][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.523800][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.535068][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.543986][   T12] hsr_slave_0: left promiscuous mode
[  171.546747][   T12] hsr_slave_1: left promiscuous mode
[  171.552030][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.554869][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.558721][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.561682][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.568434][   T12] veth1_macvtap: left promiscuous mode
[  171.570625][   T12] veth0_macvtap: left promiscuous mode
[  171.572877][   T12] veth0_vlan: left promiscuous mode
[  171.790971][ T5852] Bluetooth: hci3: command tx timeout
[  172.125466][   T32] smc: removing ib device syz2
[  172.289293][ T8843] netlink: 'syz.4.1175': attribute type 7 has an invalid length.
[  172.315320][ T8788] hsr_slave_0: entered promiscuous mode
[  172.347399][ T8788] hsr_slave_1: entered promiscuous mode
[  172.352573][ T8788] debugfs: 'hsr0' already exists in 'hsr'
[  172.355007][ T8788] Cannot create hsr debugfs directory
[  172.490405][ T8851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.571860][ T8853] netlink: 'syz.4.1180': attribute type 6 has an invalid length.
[  173.126734][ T8788] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  173.990447][ T5852] Bluetooth: hci3: command tx timeout
[  174.495714][ T8788] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  174.561925][ T8788] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  174.567293][ T8788] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  174.665807][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.691451][ T8788] 8021q: adding VLAN 0 to HW filter on device team0
[  174.705933][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.709144][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.732748][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.735703][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.772398][ T8891] netlink: 'syz.4.1194': attribute type 2 has an invalid length.
[  174.775204][ T8891] netlink: 'syz.4.1194': attribute type 8 has an invalid length.
[  174.775477][ T8788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.789946][ T8891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1194'.
[  174.798368][   T12] ------------[ cut here ]------------
[  174.800970][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  174.804950][   T12] Modules linked in:
[  174.807465][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  174.811897][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.816741][   T12] Workqueue: netns cleanup_net
[  174.819000][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  174.821232][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 32 e1 f7 e8 94 f9 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 86 f9 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  174.828893][   T12] RSP: 0000:ffffc900000f7898 EFLAGS: 00010293
[  174.831416][   T12] RAX: ffffffff8a22c76c RBX: ffff88801ee60000 RCX: ffff88801ba8d640
[  174.834687][   T12] RDX: 0000000000000000 RSI: ffffffff8dba9eed RDI: ffff88801ba8d640
[  174.838205][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  174.841360][   T12] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffffffff8f633080
[  174.844687][   T12] R13: 1ffff9200001ef40 R14: ffff88801ee61480 R15: dffffc0000000000
[  174.848184][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  174.851935][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.854749][   T12] CR2: 000000110c2c09c3 CR3: 000000000df36000 CR4: 00000000000006f0
[  174.858344][   T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  174.861698][   T12] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  174.864988][   T12] Call Trace:
[  174.866445][   T12]  <TASK>
[  174.867836][   T12]  xfrm_net_exit+0x2d/0x70
[  174.869737][   T12]  ops_undo_list+0x49a/0x990
[  174.871727][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  174.873777][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  174.875842][   T12]  cleanup_net+0x4c5/0x800
[  174.877749][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  174.880255][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.882333][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.884756][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  174.887014][   T12]  process_scheduled_works+0xae1/0x17b0
[  174.889783][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  174.892304][   T12]  worker_thread+0x8a0/0xda0
[  174.894252][   T12]  kthread+0x711/0x8a0
[  174.895997][   T12]  ? __pfx_worker_thread+0x10/0x10
[  174.898333][   T12]  ? __pfx_kthread+0x10/0x10
[  174.900324][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.902546][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.904738][   T12]  ? __pfx_kthread+0x10/0x10
[  174.906588][   T12]  ret_from_fork+0x439/0x7d0
[  174.908678][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  174.910770][   T12]  ? __switch_to_asm+0x39/0x70
[  174.912882][   T12]  ? __switch_to_asm+0x33/0x70
[  174.914934][   T12]  ? __pfx_kthread+0x10/0x10
[  174.916906][   T12]  ret_from_fork_asm+0x1a/0x30
[  174.919079][   T12]  </TASK>
[  174.920442][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  174.923520][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  174.927429][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.931658][   T12] Workqueue: netns cleanup_net
[  174.933702][   T12] Call Trace:
[  174.935157][   T12]  <TASK>
[  174.936436][   T12]  dump_stack_lvl+0x99/0x250
[  174.938413][   T12]  ? __asan_memcpy+0x40/0x70
[  174.940353][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.942559][   T12]  ? __pfx__printk+0x10/0x10
[  174.944559][   T12]  vpanic+0x281/0x750
[  174.946290][   T12]  ? __pfx__printk+0x10/0x10
[  174.948275][   T12]  ? __pfx_vpanic+0x10/0x10
[  174.950230][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  174.952502][   T12]  panic+0xb9/0xc0
[  174.954127][   T12]  ? __pfx_panic+0x10/0x10
[  174.955971][   T12]  __warn+0x31b/0x4b0
[  174.957648][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  174.959247][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  174.960837][   T12]  report_bug+0x2be/0x4f0
[  174.962954][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  174.964464][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  174.966321][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  174.968322][   T12]  handle_bug+0x84/0x160
[  174.970168][   T12]  exc_invalid_op+0x1a/0x50
[  174.972037][   T12]  asm_exc_invalid_op+0x1a/0x20
[  174.974015][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  174.976261][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 9b 77 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 32 e1 f7 e8 94 f9 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 86 f9 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  174.983350][   T12] RSP: 0000:ffffc900000f7898 EFLAGS: 00010293
[  174.985771][   T12] RAX: ffffffff8a22c76c RBX: ffff88801ee60000 RCX: ffff88801ba8d640
[  174.989011][   T12] RDX: 0000000000000000 RSI: ffffffff8dba9eed RDI: ffff88801ba8d640
[  174.992386][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa3b537 R09: 1ffffffff1f476a6
[  174.995619][   T12] R10: dffffc0000000000 R11: fffffbfff1f476a7 R12: ffffffff8f633080
[  174.998837][   T12] R13: 1ffff9200001ef40 R14: ffff88801ee61480 R15: dffffc0000000000
[  175.002028][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  175.003634][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  175.005512][   T12]  xfrm_net_exit+0x2d/0x70
[  175.007331][   T12]  ops_undo_list+0x49a/0x990
[  175.009248][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  175.011357][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  175.013449][   T12]  cleanup_net+0x4c5/0x800
[  175.015267][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  175.017398][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.019201][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  175.021534][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  175.023882][   T12]  process_scheduled_works+0xae1/0x17b0
[  175.026131][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  175.028329][   T12]  worker_thread+0x8a0/0xda0
[  175.030118][   T12]  kthread+0x711/0x8a0
[  175.031877][   T12]  ? __pfx_worker_thread+0x10/0x10
[  175.033921][   T12]  ? __pfx_kthread+0x10/0x10
[  175.035907][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.038153][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.040351][   T12]  ? __pfx_kthread+0x10/0x10
[  175.042334][   T12]  ret_from_fork+0x439/0x7d0
[  175.044333][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  175.046530][   T12]  ? __switch_to_asm+0x39/0x70
[  175.048587][   T12]  ? __switch_to_asm+0x33/0x70
[  175.050644][   T12]  ? __pfx_kthread+0x10/0x10
[  175.052667][   T12]  ret_from_fork_asm+0x1a/0x30
[  175.054742][   T12]  </TASK>
[  175.056867][   T12] Kernel Offset: disabled
[  175.058739][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:02:18  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000400a1 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888126169cc0 RBP=00000000000000a1 RSP=ffffc90002abf530
R8 =0000000000000000 R9 =ffffffff82099bd4 R10=0000000000000000 R11=0000000300000001
R12=0000000000000000 R13=0000000000000000 R14=ffff88812616a7d8 R15=ffff88812616a7b0
RIP=ffffffff819d799d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3011eff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81725e1b ffffffff8133c59e
XMM02=00007fecddfa7498 ffffffff8133c59e XMM03=00007fecddfa74a8 00007fecddfa74a0
XMM04=00007fecdeb0d100 00007fecddfa7460 XMM05=00007fecddfa7478 00007fecddfa74c0
XMM06=00007fecddfa74b8 00007fecddfa74b0 XMM07=00007fecddfa74a8 00007fecddfa74a0
XMM08=0000000000000000 00007fecdde12ee7 XMM09=0000000000000000 00007fecdde12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff88801fd08237 R9 =1ffff11003fa1046 R10=dffffc0000000000 R11=ffffffff854f9f00
R12=dffffc0000000000 R13=ffffffff99b028c7 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f9f7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c09c3 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fecddfa7498 00007fecddfa7470 XMM03=00007fecddfa74a8 00007fecddfa74a0
XMM04=00007fecdeb0d100 00007fecddfa7460 XMM05=00007fecddfa7478 00007fecddfa74c0
XMM06=00007fecddfa74b8 00007fecddfa74b0 XMM07=00007fecddfa74a8 00007fecddfa74a0
XMM08=0000000000000000 00007fecdde12ee7 XMM09=0000000000000000 00007fecdde12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
