last executing test programs:

3m22.475374523s ago: executing program 0 (id=1907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000004580)={0x0, 0x0, &(0x7f0000004540)={&(0x7f00000044c0)={0x18, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x0)

3m22.475154158s ago: executing program 0 (id=1908):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x0, 0x4, 0xff}, 0x50)

3m22.414923833s ago: executing program 0 (id=1910):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

3m22.414759501s ago: executing program 0 (id=1911):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)

3m22.414601449s ago: executing program 0 (id=1912):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x3368, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000001880)=[{0x8, 0xc, 0x5, 0x1}, {0x0, 0x8, 0x5, 0xc0ddbc6}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef)

3m22.245015127s ago: executing program 0 (id=1915):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000040)

3m7.225343654s ago: executing program 32 (id=1915):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000040)

2m39.563513944s ago: executing program 1 (id=2466):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r0, &(0x7f00000002c0), 0x0}, 0x20)

2m39.563230662s ago: executing program 1 (id=2468):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2fa}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x82, 0xc, "3a047e2aae56e4b9eab8"}]}}}], 0x48}, 0x0)

2m39.494823765s ago: executing program 2 (id=2470):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m39.494483324s ago: executing program 1 (id=2472):
socket$kcm(0xf, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0xf, 0x3, 0x2, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef)

2m39.432301982s ago: executing program 2 (id=2474):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0019"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

2m39.432003153s ago: executing program 1 (id=2475):
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tr\nm'], 0xa)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = gettid()
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x8, 0x80, 0x43, 0x0, 0x3, 0xa0230, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0xc67}, 0x10a907, 0xfffffffffffff010, 0x3, 0x3, 0xfffffffffffffc00, 0x401, 0x7, 0x0, 0x3, 0x0, 0xc}, r3, 0xb, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

2m39.431514789s ago: executing program 2 (id=2477):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m39.361858036s ago: executing program 2 (id=2479):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc7, &(0x7f0000000380)=""/199, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94)

2m39.36160686s ago: executing program 1 (id=2481):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x2}, {0xfff3, 0xfff2}, {0x19e615b682d46f0b, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x40)

2m39.304151067s ago: executing program 2 (id=2482):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000000000011800"], 0x28}, 0x20008000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b", 0x7}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x111211, 0x0, 0x100, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x1bffffffffffffc}, 0x0, 0x8001, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
openat$ppp(0xffffffffffffff9c, 0x0, 0x18101, 0x0)
syz_clone(0x4002000, &(0x7f0000000b00)="ce688e8aa0542bbbe7ebd3d4c7e0df8fda3a74bf89b0e5ff84a808", 0x1b, &(0x7f0000000c40), &(0x7f0000000c80), 0x0)

2m39.114662918s ago: executing program 2 (id=2483):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572001000018009"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m39.05798883s ago: executing program 33 (id=2483):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572001000018009"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m39.012947458s ago: executing program 1 (id=2485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m38.989238732s ago: executing program 34 (id=2485):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m22.934175066s ago: executing program 5 (id=2672):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x300}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

2m22.339600374s ago: executing program 5 (id=2681):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)

2m22.320598098s ago: executing program 5 (id=2684):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

2m21.269050033s ago: executing program 5 (id=2691):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x28, 0x6, 0x28, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x2, 0x48b81, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0xb}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

2m21.069521699s ago: executing program 5 (id=2694):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

2m21.069190036s ago: executing program 5 (id=2695):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20040883)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0x0, 0x0, 0x7400}, 0x4008054)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x74280, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r7, 0x25, 0x4, @void}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x214, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfe, {}, [{0x200, 0x1, [@m_pedit={0x58, 0x1d, 0x0, 0x0, {{0xa}, {0x4}, {0x2c, 0x6, "e2f2d131d798d748b5763961c6aa9f15b9ab89dabd72c89791d36a419f2565a23a465b0f2a285f74"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xd8, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0xa2, 0x6, "7f702bbbe75af8a7a21d72155e178527d744728f3a51ecac9edafdf6b9e4ab2121078966c68973f0edfb5d03cc85a35f8b211186b78f60451e21683cd8d628cd941a53852f71bdea42d93e14f05498c76fcc1b91ddfadd634cfc81ac6e204c0bae3f731c3a17808720b4a3064911a1554c2f5ee1aae3d0b6c29ce48bdf67ed1101d4fb09bc0843e127ede075d86f4fbab0802f6934bd2c97b901ac75dfcd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xcc, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc1, 0x3, 0x6, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x68f, 0x10000004}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x189e, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x214c, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x0, 0x6, 0xe, 0xfffffffd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b4c, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc4e, 0x1}}]}, {0x33, 0x6, "16e01e959c7038b4f8c5f4443f07b84ca88828152794a6496187a1d92e18c1b37eaf7cf302e26c6be7efca68ff9e5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0)
sendmsg$sock(r0, 0x0, 0x20008890)

2m6.030045152s ago: executing program 35 (id=2695):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x20040883)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0x0, 0x0, 0x7400}, 0x4008054)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x74280, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r7, 0x25, 0x4, @void}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x214, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfe, {}, [{0x200, 0x1, [@m_pedit={0x58, 0x1d, 0x0, 0x0, {{0xa}, {0x4}, {0x2c, 0x6, "e2f2d131d798d748b5763961c6aa9f15b9ab89dabd72c89791d36a419f2565a23a465b0f2a285f74"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0xd8, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0xa2, 0x6, "7f702bbbe75af8a7a21d72155e178527d744728f3a51ecac9edafdf6b9e4ab2121078966c68973f0edfb5d03cc85a35f8b211186b78f60451e21683cd8d628cd941a53852f71bdea42d93e14f05498c76fcc1b91ddfadd634cfc81ac6e204c0bae3f731c3a17808720b4a3064911a1554c2f5ee1aae3d0b6c29ce48bdf67ed1101d4fb09bc0843e127ede075d86f4fbab0802f6934bd2c97b901ac75dfcd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xcc, 0x1f, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc1, 0x3, 0x6, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x68f, 0x10000004}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x189e, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x214c, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfff, 0x0, 0x6, 0xe, 0xfffffffd}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b4c, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc4e, 0x1}}]}, {0x33, 0x6, "16e01e959c7038b4f8c5f4443f07b84ca88828152794a6496187a1d92e18c1b37eaf7cf302e26c6be7efca68ff9e5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20004000}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f661", 0x64}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db7dda907aad81e83049f6", 0x74}], 0x2}, 0x0)
sendmsg$sock(r0, 0x0, 0x20008890)

1m45.002137984s ago: executing program 6 (id=3120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x541b, 0x20000000)

1m44.813577304s ago: executing program 6 (id=3122):
r0 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0xf5ff)

1m44.778355527s ago: executing program 6 (id=3124):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1m44.671593973s ago: executing program 6 (id=3128):
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffed4, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880)

1m44.603699337s ago: executing program 6 (id=3129):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m44.383863805s ago: executing program 6 (id=3136):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0x30f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200", 0x20}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33)

1m29.603573469s ago: executing program 3 (id=3297):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1m29.603425535s ago: executing program 3 (id=3298):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})

1m29.552842984s ago: executing program 3 (id=3300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x24, 0x301, 0x70bd2a, 0x25dfdbfc, {0x1}, [@nested={0xc, 0x131, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @u32=0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8883}, 0x4000)

1m29.433315312s ago: executing program 3 (id=3301):
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x6, 0x0, 0xe5, 0x0, &(0x7f0000000580)="b2f92b58e333810ae827e3be603e330365f77b79b271f55048b392caccaca24447d98e357438a968aef05c690636548e0ca919312956dc8a734b566a6712e0791218918f287ceaafb6cd73f6fae4545dbb56003d37cca985840fbb1dec048e6ae074d453daca9aec8dc3a79b1e8a042620d834d129e55543561537da81bc2f912d9d0ec3a1beef82b9a0381be928ac9327dfc0b3b9123ea0eb9b10e9cd2bb9e4b085b503fa5ddb2434ce29a68eeb638c38114fb130fdd159837f1637becca3469eecfe1a7a110c865ba10ea7ad137bb8c301df58417902633398834c04dd25d52c8bfbe18e", 0x0, 0x2, 0x0, 0x3}, 0x50)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000001780)={'pimreg\x00'})
syz_clone(0x1821480, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={&(0x7f00000000c0), 0x3}, 0x100503, 0x3, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x80, 0x0, 0x0, 0x0, 0xfcb983, 0x82105, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB="100000001914"], 0x10}}, 0x40000)
close(r5)

1m29.23737376s ago: executing program 36 (id=3136):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0x30f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200", 0x20}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33)

1m28.38346588s ago: executing program 3 (id=3308):
syz_clone(0x22a1080, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)

1m28.302302315s ago: executing program 3 (id=3309):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0xffffffffffffffff, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m27.303272192s ago: executing program 7 (id=3316):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4"], 0xfe33)

1m27.213209409s ago: executing program 7 (id=3317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fc"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xb, 0x2, 0x6, 0x42}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000240), 0x0}, 0x20)

1m27.213061224s ago: executing program 7 (id=3318):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)

1m27.103068253s ago: executing program 7 (id=3319):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1m27.043002767s ago: executing program 7 (id=3320):
r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m26.90357217s ago: executing program 7 (id=3321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000900), 0x5, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="63e61d82", 0x0}, 0x20)

1m13.12061798s ago: executing program 37 (id=3309):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0xffffffffffffffff, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m11.752691317s ago: executing program 38 (id=3321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000900), 0x5, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="63e61d82", 0x0}, 0x20)

5.283323604s ago: executing program 9 (id=4460):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x90)

5.28296215s ago: executing program 9 (id=4462):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)

5.22973708s ago: executing program 9 (id=4463):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)

5.229458933s ago: executing program 9 (id=4464):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1c, 0x4}, 0x20)

5.180494892s ago: executing program 9 (id=4465):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

4.002142919s ago: executing program 9 (id=4487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2000004}, 0x10)

1.442544192s ago: executing program 8 (id=4517):
socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.331817828s ago: executing program 8 (id=4519):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x4044800}, 0x20054804)

1.271760042s ago: executing program 4 (id=4520):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x4)

1.212092588s ago: executing program 4 (id=4521):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0)
close(r1)

1.132010007s ago: executing program 8 (id=4522):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x18)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000002100000000050000000000000095c333d4c0a3ecdd69086b8e4c36439a8808b90ea579cdf8bd475a470064827701f4169ebebecb5bba94f06f020fb64e5594a86f5f00000000000008c7533dc98a94008d7d2a7d2c23bc3f4cc1992aebd29fd21e95b3c7c49de340c24cb6ba1a33740825c424ecd87a3b02ae7840be900964b6948074a8f2ed867fd6601b0ca02215f4c2a5157135575fa1903abe92246853cb7cb868a3b2524a92bfa8aaeaf3ff3f08fb97ec0c126bfea903ef567bdf48aecb23342c8102732b7257f65b1f7d82adec836fd77d2f5c6e6c18ae428531d9e4d906b0a19827bffab9ced1e24e8f063d44fb76dd59e75486"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000a80)='contention_end\x00', r3, 0x0, 0x1}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20)

1.081440914s ago: executing program 4 (id=4523):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000200)=r0, 0x21)

991.900114ms ago: executing program 4 (id=4524):
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2b, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
recvmsg$can_bcm(r0, 0x0, 0x2020)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000a14010028bd334d63abdf"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

927.052994ms ago: executing program 8 (id=4525):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

926.764703ms ago: executing program 8 (id=4526):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014008041000020400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

841.719293ms ago: executing program 8 (id=4527):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, &(0x7f0000000180))
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xd)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000)

504.072µs ago: executing program 4 (id=4528):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x5, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20)

0s ago: executing program 4 (id=4529):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000200)}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)

kernel console output (not intermixed with test programs):

bute type 1 has an invalid length.
[  146.533485][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1409'.
[  147.097523][ T9225] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1420'.
[  147.606323][ T9247] openvswitch: netlink: Message has 1 unknown bytes.
[  147.609714][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.881248][ T9254] erspan0 speed is unknown, defaulting to 1000
[  147.886126][ T9254] erspan0 speed is unknown, defaulting to 1000
[  147.890900][ T9254] erspan0 speed is unknown, defaulting to 1000
[  148.001946][   T24] erspan0 speed is unknown, defaulting to 1000
[  148.005700][ T9254] infiniband syz2: set active
[  148.007519][ T9254] infiniband syz2: added erspan0
[  148.010797][ T9264] netlink: 'syz.0.1438': attribute type 21 has an invalid length.
[  148.013511][ T9264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1438'.
[  148.016476][ T9264] netlink: 'syz.0.1438': attribute type 1 has an invalid length.
[  148.066232][ T9254] RDS/IB: syz2: added
[  148.069865][ T9271] netlink: 'syz.2.1440': attribute type 1 has an invalid length.
[  148.074302][ T9254] smc: adding ib device syz2 with port count 1
[  148.076539][ T9254] smc:    ib device syz2 port 1 has pnetid 
[  148.080231][ T5310] erspan0 speed is unknown, defaulting to 1000
[  148.084824][ T9254] erspan0 speed is unknown, defaulting to 1000
[  148.253243][ T9254] erspan0 speed is unknown, defaulting to 1000
[  148.367649][ T9254] erspan0 speed is unknown, defaulting to 1000
[  148.663611][ T9311] netlink: 'syz.2.1458': attribute type 1 has an invalid length.
[  148.706569][ T9318] netlink: 'syz.2.1460': attribute type 10 has an invalid length.
[  148.727305][ T9318] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  148.955935][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'.
[  149.051658][ T9331] netlink: 'syz.0.1465': attribute type 8 has an invalid length.
[  149.195850][ T9350] netlink: 'syz.0.1474': attribute type 39 has an invalid length.
[  150.280993][ T9368] syz.0.1482: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  150.283455][ T9372] netlink: 'syz.1.1483': attribute type 21 has an invalid length.
[  150.287731][ T9368] CPU: 1 UID: 0 PID: 9368 Comm: syz.0.1482 Not tainted syzkaller #0 PREEMPT(full) 
[  150.287744][ T9368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.287748][ T9368] Call Trace:
[  150.287752][ T9368]  <TASK>
[  150.287756][ T9368]  dump_stack_lvl+0x189/0x250
[  150.287770][ T9368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.287778][ T9368]  ? __pfx__printk+0x10/0x10
[  150.287789][ T9368]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.287797][ T9368]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  150.287806][ T9368]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  150.287815][ T9368]  warn_alloc+0x214/0x310
[  150.287826][ T9368]  ? stack_depot_save_flags+0x40/0x860
[  150.287836][ T9368]  ? __pfx_warn_alloc+0x10/0x10
[  150.287846][ T9368]  ? kasan_save_track+0x4f/0x80
[  150.287872][ T9368]  ? xskq_create+0x56/0x170
[  150.287882][ T9368]  ? xsk_init_queue+0xb0/0x110
[  150.287889][ T9368]  ? xsk_setsockopt+0x57b/0x8d0
[  150.287896][ T9368]  ? do_sock_setsockopt+0x17c/0x1b0
[  150.287903][ T9368]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  150.287908][ T9368]  ? do_syscall_64+0xfa/0x3b0
[  150.287918][ T9368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.287929][ T9368]  __vmalloc_node_range_noprof+0x125/0x12f0
[  150.287951][ T9368]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  150.287964][ T9368]  ? __kasan_kmalloc+0x93/0xb0
[  150.287997][ T9368]  vmalloc_user_noprof+0xad/0xf0
[  150.288007][ T9368]  ? xskq_create+0xbf/0x170
[  150.288017][ T9368]  xskq_create+0xbf/0x170
[  150.288027][ T9368]  xsk_init_queue+0xb0/0x110
[  150.288037][ T9368]  xsk_setsockopt+0x57b/0x8d0
[  150.288047][ T9368]  ? __pfx_xsk_setsockopt+0x10/0x10
[  150.288056][ T9368]  ? __pfx_aa_sk_perm+0x10/0x10
[  150.288068][ T9368]  ? __fget_files+0x2a/0x420
[  150.288074][ T9368]  ? aa_sock_opt_perm+0xff/0x1b0
[  150.288082][ T9368]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  150.288090][ T9368]  ? __pfx_xsk_setsockopt+0x10/0x10
[  150.288098][ T9368]  do_sock_setsockopt+0x17c/0x1b0
[  150.288106][ T9368]  __x64_sys_setsockopt+0x13f/0x1b0
[  150.288115][ T9368]  do_syscall_64+0xfa/0x3b0
[  150.288124][ T9368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.288130][ T9368]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  150.288138][ T9368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.288145][ T9368] RIP: 0033:0x7f677218ebe9
[  150.288152][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.288158][ T9368] RSP: 002b:00007f67730d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  150.288166][ T9368] RAX: ffffffffffffffda RBX: 00007f67723c6090 RCX: 00007f677218ebe9
[  150.288171][ T9368] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  150.288175][ T9368] RBP: 00007f6772211e19 R08: 0000000000000004 R09: 0000000000000000
[  150.288179][ T9368] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  150.288183][ T9368] R13: 00007f67723c6128 R14: 00007f67723c6090 R15: 00007ffd686b66b8
[  150.288194][ T9368]  </TASK>
[  150.288277][ T9368] Mem-Info:
[  150.290556][ T9372] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.294025][ T9368] active_anon:5838 inactive_anon:0 isolated_anon:0
[  150.294025][ T9368]  active_file:1318 inactive_file:38261 isolated_file:0
[  150.294025][ T9368]  unevictable:1768 dirty:68 writeback:0
[  150.294025][ T9368]  slab_reclaimable:9621 slab_unreclaimable:54546
[  150.294025][ T9368]  mapped:18045 shmem:2448 pagetables:1028
[  150.294025][ T9368]  sec_pagetables:0 bounce:0
[  150.294025][ T9368]  kernel_misc_reclaimable:0
[  150.294025][ T9368]  free:297001 free_pcp:16999 free_cma:0
[  150.299554][ T9372] IPv6: Can't replace route, no match found
[  150.301293][ T9368] Node 0 active_anon:11440kB inactive_anon:0kB active_file:4116kB inactive_file:135744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36208kB dirty:188kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4924kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.433732][ T9368] Node 1 active_anon:11912kB inactive_anon:0kB active_file:1156kB inactive_file:17300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35972kB dirty:84kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6400kB pagetables:1852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  150.444955][ T9368] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  150.454519][ T9368] lowmem_reserve[]: 0 811 811 811 811
[  150.456526][ T9368] Node 0 DMA32 free:300352kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11304kB inactive_anon:0kB active_file:4116kB inactive_file:135744kB unevictable:3536kB writepending:188kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:35064kB local_pcp:17108kB free_cma:0kB
[  150.469197][ T9368] lowmem_reserve[]: 0 0 0 0 0
[  150.471061][ T9368] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  150.480917][ T9368] lowmem_reserve[]: 0 0 854 854 854
[  150.482962][ T9368] Node 1 Normal free:413096kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11912kB inactive_anon:0kB active_file:1156kB inactive_file:17300kB unevictable:3536kB writepending:84kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34200kB local_pcp:16840kB free_cma:0kB
[  150.495856][ T9368] lowmem_reserve[]: 0 0 0 0 0
[  150.497887][ T9368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  150.503779][ T9368] Node 0 DMA32: 135*4kB (M) 85*8kB (UME) 77*16kB (ME) 268*32kB (UM) 243*64kB (UME) 157*128kB (UME) 97*256kB (UM) 39*512kB (UM) 22*1024kB (UME) 5*2048kB (UM) 43*4096kB (UM) = 300372kB
[  150.514406][ T9368] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  150.522659][ T9368] Node 1 Normal: 840*4kB (UM) 191*8kB (UME) 87*16kB (UME) 43*32kB (UME) 27*64kB (UME) 32*128kB (UME) 31*256kB (UME) 27*512kB (UME) 11*1024kB (UME) 5*2048kB (UME) 87*4096kB (UM) = 413096kB
[  150.529572][ T9368] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.532927][ T9368] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  150.536481][ T9368] 42027 total pagecache pages
[  150.538198][ T9368] 0 pages in swap cache
[  150.543493][ T9368] Free swap  = 124996kB
[  150.545011][ T9368] Total swap = 124996kB
[  150.546568][ T9368] 786301 pages RAM
[  150.548109][ T9368] 0 pages HighMem/MovableOnly
[  150.551235][ T9368] 241330 pages reserved
[  150.553307][ T9368] 0 pages cma reserved
[  150.653045][ T9390] netlink: 'syz.2.1492': attribute type 11 has an invalid length.
[  150.791522][ T9398] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  151.167125][ T9425] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  151.302802][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1512'.
[  151.420631][ T9463] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1519'.
[  152.134236][ T9508] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1539'.
[  152.240331][ T9510] netlink: 'syz.0.1540': attribute type 1 has an invalid length.
[  152.242838][ T9510] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1540'.
[  152.650643][ T9523] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1546'.
[  152.939638][ T9531] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1550'.
[  152.949530][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1550'.
[  153.264799][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'.
[  153.285204][ T9549] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1558'.
[  154.496872][ T9577] tmpfs: Bad value for 'gid'
[  154.499149][ T9577] tmpfs: Bad value for 'gid'
[  154.806993][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1579'.
[  154.811327][ T9598] unsupported nlmsg_type 40
[  154.819664][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'.
[  154.823650][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'.
[  155.063425][ T9622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.174216][ T9628] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.177542][ T9628] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.300479][ T9640] syzkaller0: entered promiscuous mode
[  155.302604][ T9640] syzkaller0: entered allmulticast mode
[  155.905311][   T55] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  156.462121][ T9703] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1628'.
[  156.670201][ T9709] netlink: 'syz.0.1630': attribute type 6 has an invalid length.
[  156.674360][ T9709] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1630'.
[  156.697340][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'.
[  156.700948][ T9711] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  156.865965][ T9727] netlink: 'syz.2.1639': attribute type 13 has an invalid length.
[  156.902648][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1641'.
[  157.713549][ T9761] netlink: 'syz.2.1655': attribute type 10 has an invalid length.
[  157.732192][ T9761] team0: Port device syz_tun added
[  157.894637][ T9768] netlink: 'syz.2.1657': attribute type 29 has an invalid length.
[  157.902858][ T9768] netlink: 'syz.2.1657': attribute type 29 has an invalid length.
[  157.919950][ T9768] netlink: 'syz.2.1657': attribute type 29 has an invalid length.
[  157.932082][ T9768] netlink: 'syz.2.1657': attribute type 29 has an invalid length.
[  157.967691][ T9772] tap0: tun_chr_ioctl cmd 1074812118
[  158.108561][ T9778] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1662'.
[  159.007986][   T55] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  159.160033][ T9811] netlink: 'syz.1.1676': attribute type 11 has an invalid length.
[  159.173393][ T9811] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1676'.
[  159.212817][ T9810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.491582][ T9836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.979640][ T5844] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  159.983752][ T5844] Bluetooth: hci1: Injecting HCI hardware error event
[  160.600244][ T9853] netlink: 'syz.2.1695': attribute type 10 has an invalid length.
[  160.603034][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1695'.
[  160.871176][ T9862] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1699'.
[  160.994447][ T9869] delete_channel: no stack
[  161.019364][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  161.024200][   T55] Bluetooth: hci1: hardware error 0x00
[  161.275486][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  161.280121][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  161.582454][ T9900] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1715'.
[  161.910542][ T9920] netlink: 'syz.2.1723': attribute type 16 has an invalid length.
[  161.917066][ T9920] netlink: 'syz.2.1723': attribute type 3 has an invalid length.
[  161.925220][ T9920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1723'.
[  161.985679][ T5844] Bluetooth: hci0: unexpected event 0x31 length: 82 > 6
[  162.906254][ T9953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1739'.
[  162.916632][ T9953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1739'.
[  163.126007][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  163.362549][   T33] audit: type=1107 audit(1756943942.048:4): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  163.822886][ T9973] netlink: 'syz.0.1746': attribute type 13 has an invalid length.
[  163.825966][ T9973] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1746'.
[  164.225194][ T9986] delete_channel: no stack
[  164.230233][ T9986] delete_channel: no stack
[  164.919784][T10012] netlink: 'syz.2.1764': attribute type 21 has an invalid length.
[  164.923162][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1764'.
[  164.997285][T10022] openvswitch: netlink: IP tunnel dst address not specified
[  165.021012][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.046528][T10027] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  165.181592][T10039] tap0: tun_chr_ioctl cmd 1074025677
[  165.183465][T10039] tap0: linktype set to 0
[  165.335620][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1781'.
[  165.356381][T10051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1781'.
[  166.182656][T10080] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1793'.
[  167.203458][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'.
[  167.207047][T10131] netlink: 'syz.2.1818': attribute type 2 has an invalid length.
[  167.211216][T10131] netlink: 'syz.2.1818': attribute type 2 has an invalid length.
[  167.213797][T10131] netlink: 'syz.2.1818': attribute type 1 has an invalid length.
[  167.217007][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1818'.
[  167.277321][T10135] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1820'.
[  168.267427][T10151] wg2: entered promiscuous mode
[  168.270989][T10151] wg2: entered allmulticast mode
[  168.841223][T10196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1845'.
[  168.844337][T10196] bridge_slave_0: entered allmulticast mode
[  169.709865][T10226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1858'.
[  169.747971][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1859'.
[  170.772218][T10255] __nla_validate_parse: 1 callbacks suppressed
[  170.772227][T10255] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1870'.
[  171.060111][   T33] audit: type=1107 audit(1756943949.808:5): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  171.464425][T10288] netlink: 'syz.2.1884': attribute type 2 has an invalid length.
[  171.467128][T10288] netlink: 130532 bytes leftover after parsing attributes in process `syz.2.1884'.
[  171.492714][T10292] netlink: 'syz.1.1886': attribute type 2 has an invalid length.
[  171.495437][T10292] netlink: 'syz.1.1886': attribute type 8 has an invalid length.
[  171.498077][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1886'.
[  171.589227][T10302] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1891'.
[  173.336557][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'.
[  177.377687][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'.
[  178.896910][T10477] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1969'.
[  178.902993][T10476] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1969'.
[  178.907853][T10477] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1969'.
[  179.342805][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1976'.
[  179.376533][T10493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1977'.
[  179.452285][T10500] netlink: 'syz.1.1981': attribute type 1 has an invalid length.
[  179.455383][T10500] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1981'.
[  179.557820][T10504] netlink: 'syz.1.1982': attribute type 4 has an invalid length.
[  179.561054][T10504] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.1982'.
[  180.618801][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  183.133544][T10576] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2013'.
[  183.404104][T10587] netlink: 'syz.1.2018': attribute type 1 has an invalid length.
[  185.897007][T10675] siw: device registration error -23
[  187.408862][T10703] netlink: 'syz.1.2064': attribute type 3 has an invalid length.
[  187.412236][T10703] netlink: 'syz.1.2064': attribute type 1 has an invalid length.
[  187.415590][T10703] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2064'.
[  188.111220][T10711] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  188.515973][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.521837][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.524790][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.527899][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.532671][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.560286][T10733] erspan0 speed is unknown, defaulting to 1000
[  188.737293][T10744] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2080'.
[  188.752380][T10733] chnl_net:caif_netlink_parms(): no params data found
[  188.826493][T10733] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.829206][T10733] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.832093][T10733] bridge_slave_0: entered allmulticast mode
[  188.835129][T10733] bridge_slave_0: entered promiscuous mode
[  188.837556][T10749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.842626][T10733] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.844920][T10733] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.847256][T10733] bridge_slave_1: entered allmulticast mode
[  188.850691][T10733] bridge_slave_1: entered promiscuous mode
[  188.878604][T10733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.883405][T10733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.907179][T10751] netlink: 'syz.1.2082': attribute type 10 has an invalid length.
[  188.931588][T10751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2082'.
[  188.961224][T10751] batman_adv: batadv0: Adding interface: hsr_slave_1
[  188.964222][T10751] batman_adv: batadv0: Interface activated: hsr_slave_1
[  188.978772][T10733] team0: Port device team_slave_0 added
[  188.983855][T10733] team0: Port device team_slave_1 added
[  189.012447][T10733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.015437][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.027145][T10733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.033653][T10733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.036586][T10733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.047365][T10733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.099818][T10733] hsr_slave_0: entered promiscuous mode
[  189.102880][T10733] hsr_slave_1: entered promiscuous mode
[  189.110004][T10733] debugfs: 'hsr0' already exists in 'hsr'
[  189.112254][T10733] Cannot create hsr debugfs directory
[  189.321809][T10761] netlink: 'syz.2.2087': attribute type 1 has an invalid length.
[  189.325064][T10761] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2087'.
[  189.362173][T10733] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  189.438225][T10733] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  189.453517][T10733] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  189.468076][T10733] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  189.545732][T10733] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.570816][T10733] 8021q: adding VLAN 0 to HW filter on device team0
[  189.582983][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.585632][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.603212][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.605695][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.616909][T10780] netlink: 'syz.1.2092': attribute type 10 has an invalid length.
[  189.621085][T10780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'.
[  189.624716][T10780] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  189.668204][T10733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.710325][T10784] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2093'.
[  189.803166][T10733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.845018][T10733] veth0_vlan: entered promiscuous mode
[  189.851416][T10733] veth1_vlan: entered promiscuous mode
[  189.866467][T10733] veth0_macvtap: entered promiscuous mode
[  189.871369][T10733] veth1_macvtap: entered promiscuous mode
[  189.883733][T10733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.888062][T10797] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  189.894423][T10733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.918193][ T5869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.925311][ T5869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.939615][ T5869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.942560][ T5869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.956000][T10801] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2100'.
[  190.013172][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.017757][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.040503][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.045155][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.242137][T10823] netlink: 'syz.1.2110': attribute type 14 has an invalid length.
[  190.487820][   T55] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[  190.628808][   T55] Bluetooth: hci0: command tx timeout
[  191.817732][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2136'.
[  191.947786][T10898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.011081][   T33] audit: type=1107 audit(1756943970.758:6): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  192.698710][   T55] Bluetooth: hci0: command tx timeout
[  192.967074][T10923] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  192.970488][T10923] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  193.144893][T10934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'.
[  193.794777][T10956] netlink: 'syz.3.2168': attribute type 21 has an invalid length.
[  193.904706][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.907025][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.517151][T10992] netlink: 'syz.3.2184': attribute type 1 has an invalid length.
[  194.530405][T10992] netlink: 'syz.3.2184': attribute type 2 has an invalid length.
[  194.610897][T10996] veth1_macvtap: left promiscuous mode
[  194.789031][   T55] Bluetooth: hci0: command tx timeout
[  196.858726][   T55] Bluetooth: hci0: command tx timeout
[  197.822735][T11007] netlink: 'syz.3.2189': attribute type 3 has an invalid length.
[  197.836833][T11009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  197.839439][T11009] IPv6: NLM_F_CREATE should be set when creating new route
[  197.842052][T11009] IPv6: NLM_F_CREATE should be set when creating new route
[  197.844525][T11009] IPv6: NLM_F_CREATE should be set when creating new route
[  198.014954][T11023] netlink: 11318 bytes leftover after parsing attributes in process `syz.2.2197'.
[  199.020210][T11054] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2210'.
[  199.830786][T11080] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  199.948348][T11090] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2225'.
[  199.965191][T11084] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2221'.
[  200.480608][T11129] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  200.484197][T11129] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  200.586016][T11137] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2246'.
[  200.804906][T11142] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2248'.
[  200.808973][T11142] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  201.440633][T11169] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  201.443431][T11169] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  201.757151][T11199] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2275'.
[  201.804256][T11204] netlink: 'syz.2.2277': attribute type 3 has an invalid length.
[  201.807629][T11204] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  201.812826][T11204] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2277'.
[  202.236642][T11234] netlink: 'syz.2.2292': attribute type 10 has an invalid length.
[  203.209707][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2299'.
[  203.213821][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2299'.
[  203.553739][T11267] netlink: 824 bytes leftover after parsing attributes in process `syz.2.2306'.
[  203.779181][T11280] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2311'.
[  207.052716][T11297] netlink: 'syz.3.2318': attribute type 29 has an invalid length.
[  207.109707][T11297] netlink: 'syz.3.2318': attribute type 29 has an invalid length.
[  207.137032][T11297] netlink: 'syz.3.2318': attribute type 29 has an invalid length.
[  207.151399][T11297] netlink: 'syz.3.2318': attribute type 29 has an invalid length.
[  208.098750][T11323] netlink: 'syz.3.2329': attribute type 21 has an invalid length.
[  208.102069][T11323] IPv6: NLM_F_CREATE should be specified when creating new route
[  208.167237][T11327] netlink: 'syz.3.2330': attribute type 1 has an invalid length.
[  208.370267][T11339] netlink: 'syz.2.2335': attribute type 33 has an invalid length.
[  208.377533][T11339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2335'.
[  208.382471][T11339] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  209.180175][T11365] netlink: 'syz.3.2345': attribute type 3 has an invalid length.
[  209.385755][T11371] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2348'.
[  209.973971][T11393] netlink: 'syz.3.2358': attribute type 1 has an invalid length.
[  209.976643][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'.
[  209.987502][T11393] netlink: 'syz.3.2358': attribute type 16 has an invalid length.
[  210.066227][T11393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.338281][T11425] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2372'.
[  210.343240][T11424] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2373'.
[  210.512926][T11436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2378'.
[  212.074318][T11499] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2405'.
[  212.108291][T11500] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.2403'.
[  212.125052][T11500] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.2403'.
[  212.139173][T11500] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.2403'.
[  214.290705][T11554] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  214.533291][T11568] __nla_validate_parse: 2 callbacks suppressed
[  214.533307][T11568] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2433'.
[  214.554085][T11561] -1: renamed from syzkaller0
[  215.233996][T11582] validate_nla: 3 callbacks suppressed
[  215.234010][T11582] netlink: 'syz.2.2440': attribute type 3 has an invalid length.
[  215.239921][T11582] netlink: 'syz.2.2440': attribute type 1 has an invalid length.
[  215.242923][T11582] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.2440'.
[  215.840804][   T55] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  215.871091][T11627] can: request_module (can-proto-0) failed.
[  215.969468][T11641] netlink: 'syz.3.2467': attribute type 1 has an invalid length.
[  216.026250][T11649] netlink: 'syz.3.2471': attribute type 10 has an invalid length.
[  216.032458][T11649] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2471'.
[  216.044375][T11651] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  216.081245][T11655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.133921][T11663] netlink: 'syz.3.2478': attribute type 13 has an invalid length.
[  216.136430][T11663] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2478'.
[  216.288272][T11672] team0: Port device syz_tun removed
[  217.268196][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.271793][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.274473][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.277393][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.280623][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.305894][T11689] erspan0 speed is unknown, defaulting to 1000
[  217.459849][T11689] chnl_net:caif_netlink_parms(): no params data found
[  217.501865][T11689] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.504883][T11689] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.507970][T11689] bridge_slave_0: entered allmulticast mode
[  217.511712][T11689] bridge_slave_0: entered promiscuous mode
[  217.515209][T11689] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.517597][T11689] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.520731][T11689] bridge_slave_1: entered allmulticast mode
[  217.523611][T11689] bridge_slave_1: entered promiscuous mode
[  217.544596][T11689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.549618][T11689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.569318][T11689] team0: Port device team_slave_0 added
[  217.573151][T11689] team0: Port device team_slave_1 added
[  217.592835][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.595763][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.606218][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.611285][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.613607][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.622117][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.647235][T11689] hsr_slave_0: entered promiscuous mode
[  217.650210][T11689] hsr_slave_1: entered promiscuous mode
[  217.652360][T11689] debugfs: 'hsr0' already exists in 'hsr'
[  217.654277][T11689] Cannot create hsr debugfs directory
[  217.910325][T11689] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  217.925865][T11689] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  217.936453][T11689] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  217.945753][T11689] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  217.995909][T11689] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.999254][T11689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.002449][T11689] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.006311][T11689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.036887][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.040429][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.043385][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.046741][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.050193][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.087772][T11689] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.099308][T11689] 8021q: adding VLAN 0 to HW filter on device team0
[  218.112723][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.119836][T11708] erspan0 speed is unknown, defaulting to 1000
[  218.124378][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.127309][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.314177][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.390932][T11708] chnl_net:caif_netlink_parms(): no params data found
[  218.395153][T11729] netlink: 'syz.3.2493': attribute type 2 has an invalid length.
[  218.482254][T11708] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.485397][T11708] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.488402][T11708] bridge_slave_0: entered allmulticast mode
[  218.492304][T11708] bridge_slave_0: entered promiscuous mode
[  218.501578][T11708] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.504880][T11708] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.507265][T11708] bridge_slave_1: entered allmulticast mode
[  218.511420][T11708] bridge_slave_1: entered promiscuous mode
[  218.558347][T11689] veth0_vlan: entered promiscuous mode
[  218.562201][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.570750][T11689] veth1_vlan: entered promiscuous mode
[  218.575175][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.607149][T11708] team0: Port device team_slave_0 added
[  218.610795][T11689] veth0_macvtap: entered promiscuous mode
[  218.615742][T11708] team0: Port device team_slave_1 added
[  218.625492][T11689] veth1_macvtap: entered promiscuous mode
[  218.641628][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.650273][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.653077][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.663557][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.675758][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.678095][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.695045][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.703863][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.723570][ T5869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.727600][ T5869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.216816][ T5869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.219765][ T5869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.259262][T11708] hsr_slave_0: entered promiscuous mode
[  219.262305][T11708] hsr_slave_1: entered promiscuous mode
[  219.264710][T11708] debugfs: 'hsr0' already exists in 'hsr'
[  219.266960][T11708] Cannot create hsr debugfs directory
[  219.338935][   T55] Bluetooth: hci1: command tx timeout
[  219.414877][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.420947][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.447062][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.450048][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.477760][T11708] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  219.493723][T11708] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  219.507548][T11708] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  219.534936][T11708] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  219.598404][T11708] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.611271][T11708] 8021q: adding VLAN 0 to HW filter on device team0
[  219.617012][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.619441][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.642383][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.644768][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.713310][T11763] ref_ctr_offset mismatch. inode: 0x1c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20
[  219.852547][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.954789][T11784] TCP: TCP_TX_DELAY enabled
[  219.959877][T11784] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.2508'.
[  219.963667][T11784] openvswitch: netlink: Message has 6 unknown bytes.
[  220.034829][T11708] veth0_vlan: entered promiscuous mode
[  220.050073][T11708] veth1_vlan: entered promiscuous mode
[  220.060224][   T55] Bluetooth: hci2: command tx timeout
[  220.072697][T11708] veth0_macvtap: entered promiscuous mode
[  220.076732][T11708] veth1_macvtap: entered promiscuous mode
[  220.092005][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.092443][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2510'.
[  220.098051][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.110739][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.123765][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.127314][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.135587][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.185073][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.187665][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.215797][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.220116][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.244382][T11799] nft_compat: unsupported protocol 0
[  220.544223][T11818] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2523'.
[  220.547745][T11822] bpf: Bad value for 'gid'
[  220.733772][T11839] netlink: 'syz.4.2529': attribute type 7 has an invalid length.
[  220.819186][T11849] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2531'.
[  220.893315][T11854] netlink: 'syz.3.2534': attribute type 2 has an invalid length.
[  220.895822][T11854] netlink: 'syz.3.2534': attribute type 1 has an invalid length.
[  220.900274][T11854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2534'.
[  220.928182][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2534'.
[  220.933860][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2534'.
[  220.938698][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2534'.
[  221.419497][   T55] Bluetooth: hci1: command tx timeout
[  222.139373][   T55] Bluetooth: hci2: command tx timeout
[  223.304532][T11922] netlink: 'syz.3.2558': attribute type 1 has an invalid length.
[  223.307744][T11922] netlink: 'syz.3.2558': attribute type 4 has an invalid length.
[  223.311362][T11922] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2558'.
[  223.373813][T11926] netlink: 'syz.5.2561': attribute type 10 has an invalid length.
[  223.385110][T11926] team0: Device ipvlan1 failed to register rx_handler
[  223.466994][T11931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2563'.
[  223.504859][   T55] Bluetooth: hci1: command tx timeout
[  224.230144][   T55] Bluetooth: hci2: command tx timeout
[  224.355706][T11957] netlink: 'syz.5.2574': attribute type 10 has an invalid length.
[  225.015324][T11971] __nla_validate_parse: 1 callbacks suppressed
[  225.015334][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2577'.
[  225.028328][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2577'.
[  225.081453][T11977] netlink: 'syz.3.2581': attribute type 10 has an invalid length.
[  225.092260][T11979] netlink: 'syz.4.2582': attribute type 13 has an invalid length.
[  225.094846][T11979] netlink: 'syz.4.2582': attribute type 17 has an invalid length.
[  225.104414][T11979] gretap0: refused to change device tx_queue_len
[  225.106824][T11979] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  225.123009][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2583'.
[  225.143616][T11981] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2583'.
[  225.146631][T11981] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2583'.
[  225.599497][   T55] Bluetooth: hci1: command tx timeout
[  226.301095][   T55] Bluetooth: hci2: command tx timeout
[  228.254945][T12036] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2609'.
[  228.447725][T12053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2614'.
[  229.588545][T12060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'.
[  230.074977][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'.
[  230.496279][T12099] netlink: 'syz.4.2637': attribute type 1 has an invalid length.
[  230.783064][T12117] netlink: 'syz.5.2645': attribute type 10 has an invalid length.
[  230.787254][T12117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.795686][T12117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.812398][T12117] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  231.316733][T12147] C: renamed from team_slave_0 (while UP)
[  231.834965][T12167] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  231.855507][T12167] syzkaller0: entered promiscuous mode
[  231.857971][T12167] syzkaller0: entered allmulticast mode
[  232.896208][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'.
[  233.216038][T12207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2682'.
[  233.251334][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2684'.
[  234.160712][T12220] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2687'.
[  234.287490][T12230] netlink: 'syz.3.2688': attribute type 10 has an invalid length.
[  234.324065][T12231] netlink: 'syz.5.2691': attribute type 21 has an invalid length.
[  234.327227][T12231] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2691'.
[  234.340807][T12230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  234.692847][T12243] netlink: 'syz.3.2696': attribute type 1 has an invalid length.
[  234.719858][T12243] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2696'.
[  234.835871][   T55] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  235.312991][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2701'.
[  235.327865][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2701'.
[  235.411558][T12257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.632974][T12271] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  235.921350][T12281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2716'.
[  235.966559][T12279] option changes via remount are deprecated (pid=12278 comm=syz.4.2714)
[  236.281190][T12289] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  236.295622][T12289] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  236.671080][T12302] netlink: 'syz.4.2725': attribute type 27 has an invalid length.
[  236.673737][T12302] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2725'.
[  236.677520][T12302] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  236.804993][T12308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2728'.
[  236.993018][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'.
[  236.996910][T12314] netlink: 'syz.4.2730': attribute type 2 has an invalid length.
[  237.001794][T12314] netlink: 'syz.4.2730': attribute type 2 has an invalid length.
[  237.004938][T12314] netlink: 'syz.4.2730': attribute type 1 has an invalid length.
[  237.008258][T12314] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2730'.
[  237.069468][T12317] sctp: [Deprecated]: syz.3.2731 (pid 12317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.069468][T12317] Use struct sctp_sack_info instead
[  237.863312][T12342] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  237.866034][T12342] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  238.597978][T12370] netlink: 'syz.3.2756': attribute type 3 has an invalid length.
[  238.608961][T12370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2756'.
[  238.809582][T12381] openvswitch: netlink: Flow actions attr not present in new flow.
[  239.960962][T12399] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2769'.
[  240.127459][T12401] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  240.211635][T12407] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2772'.
[  241.288074][T12446] netlink: 'syz.3.2791': attribute type 13 has an invalid length.
[  241.298789][T12446] netlink: 'syz.3.2791': attribute type 17 has an invalid length.
[  241.596945][T12446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  241.857616][T12461] delete_channel: no stack
[  242.125380][T12469] : renamed from wg2 (while UP)
[  243.032309][T12498] tun0: tun_chr_ioctl cmd 1074812117
[  243.094761][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'.
[  243.178144][T12502] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  243.244720][T12502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  243.757517][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'.
[  244.037739][T12540] netlink: 'syz.4.2833': attribute type 10 has an invalid length.
[  244.180854][T12540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.226827][T12540] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  244.553248][T12563] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2842'.
[  245.179019][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'.
[  246.072707][ T5869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.132470][T12587] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2854'.
[  246.136370][T12587] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2854'.
[  246.206333][ T5869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.284240][ T5869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.380558][ T5869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.577414][ T5869] bridge_slave_1: left allmulticast mode
[  246.582620][ T5869] bridge_slave_1: left promiscuous mode
[  246.585184][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.593043][ T5869] bridge_slave_0: left allmulticast mode
[  246.595144][ T5869] bridge_slave_0: left promiscuous mode
[  246.597335][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.327728][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.342959][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.374878][ T5869] bond0 (unregistering): Released all slaves
[  247.399873][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'.
[  247.404294][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'.
[  247.407939][T12617] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2868'.
[  248.813964][ T5869] hsr_slave_0: left promiscuous mode
[  248.816241][ T5869] hsr_slave_1: left promiscuous mode
[  248.821360][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.823888][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.847601][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.853611][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.989364][ T5869] veth1_macvtap: left promiscuous mode
[  248.991432][ T5869] veth0_macvtap: left promiscuous mode
[  248.993579][ T5869] veth1_vlan: left promiscuous mode
[  248.998202][ T5869] veth0_vlan: left promiscuous mode
[  249.086860][T12670] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2886'.
[  249.780287][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  249.914054][ T5869] team0 (unregistering): Port device team_slave_0 removed
[  250.054318][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.072147][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.076475][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.082576][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.086874][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.623142][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'.
[  250.653142][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'.
[  250.706174][T12681] erspan0 speed is unknown, defaulting to 1000
[  250.763788][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'.
[  250.767088][T12688] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  250.771748][T12688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.882484][T12695] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2895'.
[  251.023275][ T5869] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.129400][ T5869] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.132341][T12712] netlink: 328 bytes leftover after parsing attributes in process `syz.4.2901'.
[  252.083990][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'.
[  252.128615][ T5869] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.150608][ T5844] Bluetooth: hci3: command tx timeout
[  252.245546][T12727] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2903'.
[  252.279441][ T5869] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.293742][T12681] chnl_net:caif_netlink_parms(): no params data found
[  252.543822][T12740] delete_channel: no stack
[  252.570752][T12681] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.573096][T12681] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.575558][T12681] bridge_slave_0: entered allmulticast mode
[  252.582855][T12681] bridge_slave_0: entered promiscuous mode
[  252.606097][T12681] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.622560][T12681] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.624933][T12681] bridge_slave_1: entered allmulticast mode
[  252.628275][T12681] bridge_slave_1: entered promiscuous mode
[  252.734434][ T5869] bridge_slave_1: left allmulticast mode
[  252.736280][ T5869] bridge_slave_1: left promiscuous mode
[  252.738169][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.751097][ T5869] bridge_slave_0: left allmulticast mode
[  252.752898][ T5869] bridge_slave_0: left promiscuous mode
[  252.763637][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.044107][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.052952][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.057744][ T5869] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  253.065659][ T5869] bond0 (unregistering): Released all slaves
[  253.076545][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.514213][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.574402][T12681] team0: Port device team_slave_0 added
[  253.584602][T12681] team0: Port device team_slave_1 added
[  253.657713][T12763] netlink: 'syz.4.2916': attribute type 29 has an invalid length.
[  253.667729][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.676341][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.678182][T12763] netlink: 'syz.4.2916': attribute type 10 has an invalid length.
[  253.692598][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.694186][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.694197][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.694224][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.948709][T12775] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2921'.
[  254.193957][T12763] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.220176][ T5844] Bluetooth: hci3: command tx timeout
[  254.372691][T12763] team0: Port device bond0 added
[  254.425649][T12681] hsr_slave_0: entered promiscuous mode
[  254.429595][T12681] hsr_slave_1: entered promiscuous mode
[  254.848417][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'.
[  254.853044][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2929'.
[  254.891829][ T5869] hsr_slave_0: left promiscuous mode
[  254.898969][ T5869] hsr_slave_1: left promiscuous mode
[  254.901488][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.904389][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.943035][T12804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2931'.
[  254.945365][ T5869] veth1_macvtap: left promiscuous mode
[  254.949773][ T5869] veth0_macvtap: left promiscuous mode
[  254.952078][ T5869] veth1_vlan: left promiscuous mode
[  254.954160][ T5869] veth0_vlan: left promiscuous mode
[  255.343904][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.346758][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.969409][T12814] netlink: 'syz.3.2936': attribute type 4 has an invalid length.
[  256.085915][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  256.109192][ T5869] team0 (unregistering): Port device team_slave_0 removed
[  256.300833][ T5844] Bluetooth: hci3: command tx timeout
[  256.905675][T12681] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  256.920541][T12681] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  257.037094][T12681] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  257.086959][T12681] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  257.435086][T12681] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.472657][T12681] 8021q: adding VLAN 0 to HW filter on device team0
[  257.484084][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.487814][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.521294][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.523677][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.388630][ T5844] Bluetooth: hci3: command tx timeout
[  258.547236][T12860] netlink: 'syz.3.2948': attribute type 49 has an invalid length.
[  258.613317][T12866] netlink: 'syz.3.2950': attribute type 7 has an invalid length.
[  258.626949][ T5869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.712481][ T5869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.740751][T12868] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2951'.
[  258.834506][ T5869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.872037][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.913843][ T5869] batman_adv: batadv0: Removing interface: netdevsim0
[  258.925974][ T5869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.537514][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.546661][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.554400][ T5869] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  259.557511][ T5869] bond0 (unregistering): Released all slaves
[  259.627814][T12681] veth0_vlan: entered promiscuous mode
[  259.660947][T12681] veth1_vlan: entered promiscuous mode
[  259.772758][T12681] veth0_macvtap: entered promiscuous mode
[  259.794797][T12681] veth1_macvtap: entered promiscuous mode
[  259.853939][T12939] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  259.885120][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.892645][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.903755][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.128153][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.142919][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.146553][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.481465][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.489036][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.597838][ T5869] hsr_slave_0: left promiscuous mode
[  260.620912][ T5869] hsr_slave_1: left promiscuous mode
[  260.623910][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.627017][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.635483][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.640303][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.654806][ T5869] veth0_macvtap: left promiscuous mode
[  261.441434][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  261.476583][ T5869] team0 (unregistering): Port device C removed
[  261.815298][T12961] veth0_vlan: entered allmulticast mode
[  261.840742][T12965] veth0_vlan: left promiscuous mode
[  261.844521][T12965] veth0_vlan: entered promiscuous mode
[  261.903556][T12967] netlink: 'syz.3.2979': attribute type 1 has an invalid length.
[  261.905804][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.908996][T12967] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2979'.
[  261.910118][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.167978][T12982] netlink: 'syz.3.2984': attribute type 21 has an invalid length.
[  262.171900][T12982] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2984'.
[  262.328637][T12993] netlink: 'syz.3.2987': attribute type 10 has an invalid length.
[  262.383721][T13000] netlink: 'syz.3.2987': attribute type 10 has an invalid length.
[  262.505067][T13005] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2993'.
[  262.524055][T13000] team0: Device hsr_slave_0 failed to register rx_handler
[  262.765037][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2996'.
[  262.769014][T13016] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2996'.
[  262.774227][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2996'.
[  263.096403][T13043] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3006'.
[  263.197380][T13043] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3006'.
[  263.458676][T13043] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3006'.
[  263.574014][T13069] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3011'.
[  264.629574][T13136] : renamed from vlan0 (while UP)
[  264.821920][T13155] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  265.007517][T13167] syzkaller0: tun_chr_ioctl cmd 2147767506
[  265.162073][T13173] netlink: 'syz.6.3042': attribute type 39 has an invalid length.
[  267.286034][T13261] netlink: 'syz.4.3067': attribute type 10 has an invalid length.
[  267.291750][T13261] veth1_vlan: entered allmulticast mode
[  267.296060][T13261] team0: Device veth1_vlan failed to register rx_handler
[  268.405909][T13324] __nla_validate_parse: 5 callbacks suppressed
[  268.405919][T13324] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3085'.
[  268.527419][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3087'.
[  269.428922][T13358] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3096'.
[  269.740372][T13364] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  269.744667][T13364] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  270.067672][T13385] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3108'.
[  270.314319][T13398] erspan0 speed is unknown, defaulting to 1000
[  270.420538][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'.
[  270.485621][T13408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3118'.
[  270.816652][T13422] C: renamed from team_slave_0 (while UP)
[  270.831453][T13422] netlink: 'syz.6.3124': attribute type 3 has an invalid length.
[  270.842600][T13422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  271.103135][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3135'.
[  271.113664][T13443] netlink: 'syz.4.3134': attribute type 2 has an invalid length.
[  272.354715][T13472] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3150'.
[  272.937117][T13518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.139818][T13535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3174'.
[  273.395389][T13541] syz.4.3176: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  273.410017][T13541] CPU: 1 UID: 0 PID: 13541 Comm: syz.4.3176 Not tainted syzkaller #0 PREEMPT(full) 
[  273.410029][T13541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.410034][T13541] Call Trace:
[  273.410037][T13541]  <TASK>
[  273.410041][T13541]  dump_stack_lvl+0x189/0x250
[  273.410054][T13541]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.410063][T13541]  ? __pfx__printk+0x10/0x10
[  273.410074][T13541]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  273.410082][T13541]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  273.410091][T13541]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  273.410101][T13541]  warn_alloc+0x214/0x310
[  273.410112][T13541]  ? stack_depot_save_flags+0x40/0x860
[  273.410128][T13541]  ? __pfx_warn_alloc+0x10/0x10
[  273.410141][T13541]  ? kasan_save_track+0x4f/0x80
[  273.410154][T13541]  ? xskq_create+0x56/0x170
[  273.410165][T13541]  ? xsk_init_queue+0xb0/0x110
[  273.410176][T13541]  ? xsk_setsockopt+0x57b/0x8d0
[  273.410210][T13541]  ? do_sock_setsockopt+0x17c/0x1b0
[  273.410220][T13541]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  273.410230][T13541]  ? do_syscall_64+0xfa/0x3b0
[  273.410246][T13541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.410263][T13541]  __vmalloc_node_range_noprof+0x125/0x12f0
[  273.410296][T13541]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  273.410314][T13541]  ? __kasan_kmalloc+0x93/0xb0
[  273.410329][T13541]  vmalloc_user_noprof+0xad/0xf0
[  273.410344][T13541]  ? xskq_create+0xbf/0x170
[  273.410359][T13541]  xskq_create+0xbf/0x170
[  273.410374][T13541]  xsk_init_queue+0xb0/0x110
[  273.410389][T13541]  xsk_setsockopt+0x57b/0x8d0
[  273.410404][T13541]  ? __pfx_xsk_setsockopt+0x10/0x10
[  273.410418][T13541]  ? __pfx_aa_sk_perm+0x10/0x10
[  273.410434][T13541]  ? __fget_files+0x2a/0x420
[  273.410441][T13541]  ? aa_sock_opt_perm+0xff/0x1b0
[  273.410451][T13541]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  273.410461][T13541]  ? __pfx_xsk_setsockopt+0x10/0x10
[  273.410472][T13541]  do_sock_setsockopt+0x17c/0x1b0
[  273.410483][T13541]  __x64_sys_setsockopt+0x13f/0x1b0
[  273.410499][T13541]  do_syscall_64+0xfa/0x3b0
[  273.410516][T13541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.410526][T13541]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  273.410539][T13541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.410547][T13541] RIP: 0033:0x7f908218ebe9
[  273.410558][T13541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.410568][T13541] RSP: 002b:00007f90830d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  273.410581][T13541] RAX: ffffffffffffffda RBX: 00007f90823c5fa0 RCX: 00007f908218ebe9
[  273.410590][T13541] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  273.410596][T13541] RBP: 00007f9082211e19 R08: 0000000000000004 R09: 0000000000000000
[  273.410602][T13541] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  273.410607][T13541] R13: 00007f90823c6038 R14: 00007f90823c5fa0 R15: 00007ffe9f9a8268
[  273.410624][T13541]  </TASK>
[  273.410764][T13541] Mem-Info:
[  273.557697][T13541] active_anon:7542 inactive_anon:0 isolated_anon:0
[  273.557697][T13541]  active_file:15649 inactive_file:38317 isolated_file:0
[  273.557697][T13541]  unevictable:1768 dirty:73 writeback:0
[  273.557697][T13541]  slab_reclaimable:10316 slab_unreclaimable:75444
[  273.557697][T13541]  mapped:18041 shmem:2466 pagetables:1255
[  273.557697][T13541]  sec_pagetables:0 bounce:0
[  273.557697][T13541]  kernel_misc_reclaimable:0
[  273.557697][T13541]  free:256573 free_pcp:17843 free_cma:0
[  273.619569][T13541] Node 0 active_anon:14376kB inactive_anon:0kB active_file:44328kB inactive_file:135796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37172kB dirty:268kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5276kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.669461][T13541] Node 1 active_anon:15792kB inactive_anon:0kB active_file:18268kB inactive_file:17472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34992kB dirty:24kB writeback:0kB shmem:4880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7068kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.709686][T13541] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.723296][T13541] lowmem_reserve[]: 0 811 811 811 811
[  273.725482][T13541] Node 0 DMA32 free:250660kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14376kB inactive_anon:0kB active_file:44328kB inactive_file:135796kB unevictable:3536kB writepending:268kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:30276kB local_pcp:14784kB free_cma:0kB
[  273.744865][T13541] lowmem_reserve[]: 0 0 0 0 0
[  273.747004][T13541] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  273.759490][T13541] lowmem_reserve[]: 0 0 854 854 854
[  273.761584][T13541] Node 1 Normal free:300856kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15792kB inactive_anon:0kB active_file:18268kB inactive_file:17472kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42680kB local_pcp:20224kB free_cma:0kB
[  273.798221][T13541] lowmem_reserve[]: 0 0 0 0 0
[  273.804143][T13541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  273.852631][T13541] Node 0 DMA32: 789*4kB (UM) 386*8kB (UME) 630*16kB (UME) 283*32kB (UME) 167*64kB (UME) 121*128kB (UM) 113*256kB (UME) 32*512kB (UME) 14*1024kB (UME) 12*2048kB (UME) 27*4096kB (UM) = 246372kB
[  273.862189][T13541] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  273.871243][T13541] Node 1 Normal: 626*4kB (UME) 766*8kB (UM) 372*16kB (UME) 286*32kB (UME) 86*64kB (UM) 93*128kB (UM) 52*256kB (UME) 33*512kB (UME) 8*1024kB (UM) 6*2048kB (UME) 53*4096kB (M) = 308920kB
[  274.066730][T13541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.077925][T13541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  274.135126][T13541] 56432 total pagecache pages
[  274.139255][T13541] 0 pages in swap cache
[  274.142221][T13541] Free swap  = 124996kB
[  274.145967][T13541] Total swap = 124996kB
[  274.148112][T13541] 786301 pages RAM
[  274.149989][T13541] 0 pages HighMem/MovableOnly
[  274.152072][T13541] 241330 pages reserved
[  274.153861][T13541] 0 pages cma reserved
[  274.513626][T13580] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3190'.
[  274.517440][T13580] team_slave_0: entered allmulticast mode
[  274.524360][T13580] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  274.676669][T13585] netlink: 'syz.4.3192': attribute type 2 has an invalid length.
[  274.680876][T13585] netlink: 'syz.4.3192': attribute type 1 has an invalid length.
[  274.684446][T13585] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3192'.
[  274.704949][T13585] block nbd5: not configured, cannot reconfigure
[  275.890407][ T5704] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.975393][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'.
[  276.025190][ T5704] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.122443][ T5704] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.144125][T13617] netlink: 'syz.3.3204': attribute type 6 has an invalid length.
[  276.146914][T13617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3204'.
[  276.516290][T13635] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3210'.
[  276.624692][ T6325] smc: removing ib device syz2
[  276.737609][ T5704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.744015][ T5704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.749615][ T5704] bond0 (unregistering): Released all slaves
[  276.757521][ T5310] erspan0 speed is unknown, defaulting to 1000
[  276.775288][ T5310] syz2: Port: 1 Link DOWN
[  276.779619][ T2277] erspan0 speed is unknown, defaulting to 1000
[  277.778871][T13675] netlink: 'syz.4.3217': attribute type 10 has an invalid length.
[  277.781835][T13675] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3217'.
[  277.801950][T13675] bridge0: port 3(veth0_vlan) entered blocking state
[  277.805222][T13675] bridge0: port 3(veth0_vlan) entered disabled state
[  277.826206][T13675] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  278.806501][T13705] netlink: 'syz.3.3220': attribute type 280 has an invalid length.
[  281.916881][T13803] netlink: 'syz.3.3240': attribute type 1 has an invalid length.
[  282.372871][T13842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3246'.
[  282.400728][T13842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3246'.
[  283.037676][T13877] siw: device registration error -23
[  283.335992][T13901] C: renamed from team_slave_0 (while UP)
[  283.350377][T13901] netlink: 'syz.4.3258': attribute type 3 has an invalid length.
[  283.437736][T13908] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  283.735498][T13930] netlink: 'syz.4.3266': attribute type 21 has an invalid length.
[  285.346298][T13983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3280'.
[  285.580228][T13999] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3286'.
[  285.811640][T14014] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3292'.
[  286.495637][T14040] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3305'.
[  286.603674][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  286.608869][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  286.612525][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  286.618279][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  286.627334][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  286.629291][T14049] IPv6: Can't replace route, no match found
[  286.750801][T14054] : renamed from pim6reg1
[  286.797725][T14046] chnl_net:caif_netlink_parms(): no params data found
[  286.863692][T14046] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.866564][T14046] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.869934][T14046] bridge_slave_0: entered allmulticast mode
[  286.873458][T14046] bridge_slave_0: entered promiscuous mode
[  286.877625][T14046] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.880582][T14046] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.883905][T14046] bridge_slave_1: entered allmulticast mode
[  286.887397][T14046] bridge_slave_1: entered promiscuous mode
[  286.914590][T14046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.921175][T14046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.949709][T14046] team0: Port device team_slave_0 added
[  286.953566][T14046] team0: Port device team_slave_1 added
[  286.975782][T14046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.978332][T14046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.988808][T14046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.993971][T14046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.996663][T14046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.006387][T14046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.043120][T14046] hsr_slave_0: entered promiscuous mode
[  287.046077][T14046] hsr_slave_1: entered promiscuous mode
[  287.049030][T14046] debugfs: 'hsr0' already exists in 'hsr'
[  287.051227][T14046] Cannot create hsr debugfs directory
[  287.183267][T14046] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  287.188804][T14046] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  287.203460][T14046] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  287.212336][T14046] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  287.260496][T14046] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.263199][T14046] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.265965][T14046] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.268681][T14046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.292809][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.299913][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.347365][T14046] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.365785][T14046] 8021q: adding VLAN 0 to HW filter on device team0
[  287.374964][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.378132][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.397286][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.400194][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.429797][T14046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.433662][T14046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.604395][T14046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.794366][T14046] veth0_vlan: entered promiscuous mode
[  287.816211][T14046] veth1_vlan: entered promiscuous mode
[  287.846264][T14046] veth0_macvtap: entered promiscuous mode
[  287.851708][T14046] veth1_macvtap: entered promiscuous mode
[  287.862837][T14046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.876663][T14046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.893491][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.897352][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.914138][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.917951][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.993475][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.996092][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.014246][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.017407][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.257211][T14096] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.3316'.
[  288.700055][ T5844] Bluetooth: hci1: command tx timeout
[  290.778671][ T5844] Bluetooth: hci1: command tx timeout
[  292.334984][T14126] netlink: 'syz.4.3326': attribute type 1 has an invalid length.
[  292.337747][T14126] netlink: 'syz.4.3326': attribute type 1 has an invalid length.
[  292.575539][T14138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3331'.
[  292.813206][T14144] netlink: 64967 bytes leftover after parsing attributes in process `syz.4.3334'.
[  292.859136][ T5844] Bluetooth: hci1: command tx timeout
[  294.803235][T14168] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3343'.
[  294.806548][T14168] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3343'.
[  294.938829][ T5844] Bluetooth: hci1: command tx timeout
[  295.291576][T14188] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3347'.
[  296.969958][T14248] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3365'.
[  299.181705][T14278] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3374'.
[  300.497491][T14288] netlink: 'syz.4.3379': attribute type 2 has an invalid length.
[  300.597204][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'.
[  300.607919][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'.
[  301.161624][T14301] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3385'.
[  301.165374][T14301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.291541][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'.
[  302.729039][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.733364][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.736997][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.749816][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.755503][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.091993][T14326] chnl_net:caif_netlink_parms(): no params data found
[  303.803102][T14343] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  303.814647][T14343] netlink: 'syz.4.3401': attribute type 17 has an invalid length.
[  303.833541][T14326] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.836542][T14326] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.846733][T14326] bridge_slave_0: entered allmulticast mode
[  303.849710][T14326] bridge_slave_0: entered promiscuous mode
[  303.858289][T14326] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.866954][T14326] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.869650][T14326] bridge_slave_1: entered allmulticast mode
[  303.879795][T14326] bridge_slave_1: entered promiscuous mode
[  303.923285][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.927801][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.932553][   T33] audit: type=1107 audit(1756944082.678:7): pid=14344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  304.032429][T14326] team0: Port device team_slave_0 added
[  304.035891][T14326] team0: Port device team_slave_1 added
[  304.063265][T14349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3404'.
[  304.067158][T14349] openvswitch: netlink: Missing key (keys=40, expected=100)
[  304.093945][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.096959][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.112043][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.113600][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.118066][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.122090][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.123633][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.137392][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.139031][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.142716][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.147925][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.201802][T14326] hsr_slave_0: entered promiscuous mode
[  304.204809][T14326] hsr_slave_1: entered promiscuous mode
[  304.207451][T14326] debugfs: 'hsr0' already exists in 'hsr'
[  304.215476][T14326] Cannot create hsr debugfs directory
[  304.463239][T14326] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  304.468102][T14326] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  304.473135][T14326] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  304.487174][T14326] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  304.494055][T14350] chnl_net:caif_netlink_parms(): no params data found
[  304.600526][T14350] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.603048][T14350] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.605547][T14350] bridge_slave_0: entered allmulticast mode
[  304.611297][T14350] bridge_slave_0: entered promiscuous mode
[  304.621945][T14350] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.625677][T14350] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.633105][T14350] bridge_slave_1: entered allmulticast mode
[  304.637342][T14350] bridge_slave_1: entered promiscuous mode
[  304.672012][T14350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.681104][T14350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.734044][T14350] team0: Port device team_slave_0 added
[  304.739806][T14350] team0: Port device team_slave_1 added
[  304.781641][ T5844] Bluetooth: hci3: command tx timeout
[  304.790899][T14350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.793955][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.807306][T14350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.823435][T14350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.826462][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.837896][T14350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.920080][T14350] hsr_slave_0: entered promiscuous mode
[  304.922502][T14350] hsr_slave_1: entered promiscuous mode
[  304.925196][T14350] debugfs: 'hsr0' already exists in 'hsr'
[  304.927773][T14350] Cannot create hsr debugfs directory
[  304.976620][T14326] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.039276][T14326] 8021q: adding VLAN 0 to HW filter on device team0
[  305.060083][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.063036][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.069648][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.072672][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.211919][T14350] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  305.220108][T14350] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  305.228187][T14350] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  305.304494][T14350] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  305.425682][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.490119][T14350] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.511680][T14350] 8021q: adding VLAN 0 to HW filter on device team0
[  305.524786][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.527567][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.543943][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.546799][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.678937][T14326] veth0_vlan: entered promiscuous mode
[  305.691901][T14326] veth1_vlan: entered promiscuous mode
[  305.732195][T14350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.736209][T14326] veth0_macvtap: entered promiscuous mode
[  305.749059][T14326] veth1_macvtap: entered promiscuous mode
[  305.786474][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.802059][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.834252][ T8022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.841600][ T8022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.845320][ T8022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.850937][ T8022] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.983776][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.986677][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.021334][T14350] veth0_vlan: entered promiscuous mode
[  306.027307][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.032532][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.037253][T14350] veth1_vlan: entered promiscuous mode
[  306.092551][T14350] veth0_macvtap: entered promiscuous mode
[  306.108036][T14350] veth1_macvtap: entered promiscuous mode
[  306.126963][T14350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.145216][T14350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.177811][ T5869] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.187069][ T5869] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.191631][ T5869] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.195283][ T5869] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.219307][ T5844] Bluetooth: hci0: command tx timeout
[  306.274588][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.277979][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.321319][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.324658][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.859435][ T5844] Bluetooth: hci3: command tx timeout
[  307.311053][T14478] netlink: 204 bytes leftover after parsing attributes in process `syz.8.3419'.
[  308.331210][ T5844] Bluetooth: hci0: command tx timeout
[  308.459264][ T5844] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  308.940938][ T5844] Bluetooth: hci3: command tx timeout
[  309.275512][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3447'.
[  310.379330][ T5844] Bluetooth: hci0: command tx timeout
[  311.021876][ T5844] Bluetooth: hci3: command tx timeout
[  311.350505][T14612] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3474'.
[  311.475235][T14620] netlink: 'syz.4.3478': attribute type 3 has an invalid length.
[  311.483764][T14620] netlink: 199752 bytes leftover after parsing attributes in process `syz.4.3478'.
[  311.612210][T14627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  311.615825][T14627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  312.017682][T14637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3486'.
[  312.304214][T14641] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3488'.
[  312.308996][T14641] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3488'.
[  312.330062][T14643] netlink: 'syz.4.3489': attribute type 21 has an invalid length.
[  312.344009][T14643] netlink: 'syz.4.3489': attribute type 1 has an invalid length.
[  312.347342][T14643] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3489'.
[  312.463801][ T5844] Bluetooth: hci0: command tx timeout
[  312.507840][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3492'.
[  312.543679][T14648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3492'.
[  313.107500][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3503'.
[  313.145295][T14681] netlink: 'syz.9.3503': attribute type 1 has an invalid length.
[  313.152589][T14683] netlink: 'syz.8.3505': attribute type 2 has an invalid length.
[  313.155152][T14681] netlink: 105116 bytes leftover after parsing attributes in process `syz.9.3503'.
[  313.157072][T14683] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3505'.
[  313.166435][T14683] nbd: must specify a device to reconfigure
[  313.655948][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3513'.
[  313.956133][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3520'.
[  315.386829][T14791] netlink: 'syz.8.3550': attribute type 10 has an invalid length.
[  315.398331][T14791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.402837][T14791] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  315.448352][T14791] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3550'.
[  315.456636][T14791] netlink: 'syz.8.3550': attribute type 10 has an invalid length.
[  315.464610][T14791] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3550'.
[  315.468799][T14791] batadv0: entered promiscuous mode
[  315.471249][T14791] batadv0: entered allmulticast mode
[  315.487979][T14791] bond0: (slave batadv0): Releasing backup interface
[  315.502611][T14791] bridge0: port 3(batadv0) entered blocking state
[  315.505623][T14791] bridge0: port 3(batadv0) entered disabled state
[  315.593900][T14791] syz.8.3550 (14791) used greatest stack depth: 18408 bytes left
[  316.076771][ T8022] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  316.080340][ T8022] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  316.745094][T14830] sit0: entered allmulticast mode
[  316.805286][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.808135][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  316.853267][T14833] sit0: entered promiscuous mode
[  318.643163][T14896] syzkaller0: entered promiscuous mode
[  318.645322][T14896] syzkaller0: entered allmulticast mode
[  319.226508][T14910] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3598'.
[  319.293748][   T33] audit: type=1107 audit(1756944098.038:8): pid=14911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  319.304810][T14913] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3597'.
[  319.328230][T14913] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3597'.
[  320.219229][T14932] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode
[  320.222106][T14932] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  320.869894][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3610'.
[  320.903888][T14941] netlink: 'syz.8.3612': attribute type 1 has an invalid length.
[  320.907438][T14941] netlink: 'syz.8.3612': attribute type 2 has an invalid length.
[  320.918618][T14941] netlink: 12374 bytes leftover after parsing attributes in process `syz.8.3612'.
[  321.930772][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3625'.
[  321.993553][T14972] veth0_vlan: entered allmulticast mode
[  322.243087][T14984] veth0_vlan: left promiscuous mode
[  322.245678][T14984] veth0_vlan: entered promiscuous mode
[  322.802433][T14993] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3635'.
[  323.751563][T15017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.752064][T15023] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.3650'.
[  323.762067][T15023] netlink: zone id is out of range
[  323.765132][T15023] netlink: get zone limit has 8 unknown bytes
[  324.556543][T15052] netlink: 'syz.8.3658': attribute type 21 has an invalid length.
[  324.597562][T15054] netlink: 'syz.9.3662': attribute type 1 has an invalid length.
[  324.830540][T15056] _Z`Ԁ@S!!: entered promiscuous mode
[  324.941076][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3665'.
[  324.948608][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3665'.
[  325.482414][T15088] netlink: 948 bytes leftover after parsing attributes in process `syz.8.3677'.
[  325.680569][T15108] netlink: 356 bytes leftover after parsing attributes in process `syz.8.3687'.
[  325.683654][T15108] netlink: 356 bytes leftover after parsing attributes in process `syz.8.3687'.
[  325.893243][T15121] netlink: 'syz.9.3692': attribute type 9 has an invalid length.
[  325.896745][T15121] netlink: 204732 bytes leftover after parsing attributes in process `syz.9.3692'.
[  326.603193][T15140] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.606844][T15140] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  326.751807][T15154] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.3706'.
[  327.289600][T15185] openvswitch: netlink: Message has 4 unknown bytes.
[  327.289621][T15186] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3721'.
[  327.346800][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3722'.
[  327.351611][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3722'.
[  329.132366][T15269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.556672][T15289] netlink: 'syz.9.3766': attribute type 210 has an invalid length.
[  329.785084][T15298] netlink: 'syz.9.3770': attribute type 5 has an invalid length.
[  330.105352][T15310] netlink: 'syz.9.3775': attribute type 10 has an invalid length.
[  330.110809][T15310] __nla_validate_parse: 3 callbacks suppressed
[  330.110818][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3775'.
[  330.118901][T15310] vcan0: entered promiscuous mode
[  330.121170][T15310] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  330.346394][T15317] netlink: 'syz.4.3778': attribute type 41 has an invalid length.
[  330.851475][T15354] netlink: 42496 bytes leftover after parsing attributes in process `syz.8.3794'.
[  331.235383][   T33] audit: type=1107 audit(1756944109.978:9): pid=15389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lJ$'
[  331.391713][T15400] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3814'.
[  331.606964][T15417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.684932][T15452] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.3833'.
[  332.698758][T15449] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.3833'.
[  332.708991][T15449] netlink: 4083 bytes leftover after parsing attributes in process `syz.8.3833'.
[  332.972501][T15462] netlink: 'syz.4.3837': attribute type 2 has an invalid length.
[  332.975562][T15462] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3837'.
[  333.215189][T15479] netlink: 'syz.8.3844': attribute type 10 has an invalid length.
[  333.218228][T15479] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3844'.
[  333.223062][T15479] ipvlan1: entered promiscuous mode
[  333.225414][T15479] ipvlan1: entered allmulticast mode
[  333.227735][T15479] veth0_vlan: entered allmulticast mode
[  333.231711][T15479] bridge0: port 4(ipvlan1) entered blocking state
[  333.234423][T15479] bridge0: port 4(ipvlan1) entered disabled state
[  333.240184][T15479] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  333.280236][T15476] delete_channel: no stack
[  333.564847][T15495] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3852'.
[  333.636385][T15499] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  334.111907][T15481] delete_channel: no stack
[  334.483580][T15523] netlink: 'syz.9.3865': attribute type 237 has an invalid length.
[  335.356702][T15568] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3886'.
[  335.720463][T15590] openvswitch: netlink: IP tunnel dst address not specified
[  335.848602][T15603] netlink: 'syz.8.3903': attribute type 21 has an invalid length.
[  335.857662][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.866979][T15601] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.887634][T15601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.898890][T15601] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.029412][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'.
[  337.038806][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3913'.
[  337.091955][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3916'.
[  337.183836][T15642] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3921'.
[  337.187746][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3921'.
[  337.194590][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3921'.
[  337.198834][T15642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3921'.
[  338.494776][T15690] netlink: 'syz.8.3942': attribute type 4 has an invalid length.
[  338.498618][T15690] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3942'.
[  339.157347][T15721] netlink: 'syz.4.3954': attribute type 10 has an invalid length.
[  339.239174][T15721] veth1_macvtap: left promiscuous mode
[  340.904808][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3964'.
[  341.236418][T15760] sctp: [Deprecated]: syz.4.3970 (pid 15760) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.236418][T15760] Use struct sctp_sack_info instead
[  341.627162][T15802] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  341.644323][T15810] netlink: 'syz.4.3995': attribute type 2 has an invalid length.
[  341.644336][T15810] netlink: 'syz.4.3995': attribute type 8 has an invalid length.
[  341.644342][T15810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3995'.
[  343.503847][T15853] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4014'.
[  343.512521][T15853] netlink: 'syz.4.4014': attribute type 1 has an invalid length.
[  343.796023][T15872] openvswitch: netlink: IP tunnel dst address not specified
[  343.856393][T15878] 0: renamed from bond_slave_1 (while UP)
[  343.884500][T15880] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4027'.
[  343.888321][T15880] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4027'.
[  343.899645][T15877] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4025'.
[  343.904383][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4025'.
[  343.927391][T15877] : renamed from hsr0 (while UP)
[  343.961404][T15886] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4030'.
[  343.965865][T15886] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4030'.
[  344.295635][T15928] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4049'.
[  344.303782][T15933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.367474][T15935] netlink: 'syz.4.4052': attribute type 4 has an invalid length.
[  344.471768][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  345.239217][T16001] bpf: Bad value for 'mode'
[  345.340503][T16005] openvswitch: netlink: IP tunnel dst address not specified
[  345.622855][T16017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  345.626393][T16017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  346.467410][T16055] netlink: 'syz.8.4105': attribute type 1 has an invalid length.
[  346.471850][T16055] __nla_validate_parse: 3 callbacks suppressed
[  346.471861][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4105'.
[  346.478223][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4105'.
[  346.767200][T16062] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.4108'.
[  346.995396][T16068] netlink: 'syz.4.4109': attribute type 10 has an invalid length.
[  346.998021][T16068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4109'.
[  347.014102][T16068] batadv0: entered promiscuous mode
[  347.015924][T16068] batadv0: entered allmulticast mode
[  347.031224][T16068] bond0: (slave batadv0): Releasing backup interface
[  347.044496][T16068] bridge0: port 3(batadv0) entered blocking state
[  347.047221][T16068] bridge0: port 3(batadv0) entered disabled state
[  347.172930][ T8022] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  347.176754][ T8022] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  347.720883][T16085] syz.9.4115: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  347.733873][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.9.4115 Not tainted syzkaller #0 PREEMPT(full) 
[  347.733887][T16085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  347.733892][T16085] Call Trace:
[  347.733895][T16085]  <TASK>
[  347.733899][T16085]  dump_stack_lvl+0x189/0x250
[  347.733913][T16085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  347.733923][T16085]  ? __pfx__printk+0x10/0x10
[  347.733933][T16085]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  347.733942][T16085]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  347.733952][T16085]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  347.733962][T16085]  warn_alloc+0x214/0x310
[  347.733973][T16085]  ? stack_depot_save_flags+0x40/0x860
[  347.733984][T16085]  ? __pfx_warn_alloc+0x10/0x10
[  347.733994][T16085]  ? kasan_save_track+0x4f/0x80
[  347.734003][T16085]  ? xskq_create+0x56/0x170
[  347.734012][T16085]  ? xsk_init_queue+0xb0/0x110
[  347.734020][T16085]  ? xsk_setsockopt+0x57b/0x8d0
[  347.734027][T16085]  ? do_sock_setsockopt+0x17c/0x1b0
[  347.734034][T16085]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  347.734039][T16085]  ? do_syscall_64+0xfa/0x3b0
[  347.734048][T16085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.734057][T16085]  __vmalloc_node_range_noprof+0x125/0x12f0
[  347.734078][T16085]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  347.734090][T16085]  ? __kasan_kmalloc+0x93/0xb0
[  347.734119][T16085]  vmalloc_user_noprof+0xad/0xf0
[  347.734131][T16085]  ? xskq_create+0xbf/0x170
[  347.734139][T16085]  xskq_create+0xbf/0x170
[  347.734149][T16085]  xsk_init_queue+0xb0/0x110
[  347.734159][T16085]  xsk_setsockopt+0x57b/0x8d0
[  347.734168][T16085]  ? __pfx_xsk_setsockopt+0x10/0x10
[  347.734176][T16085]  ? __pfx_aa_sk_perm+0x10/0x10
[  347.734187][T16085]  ? __fget_files+0x2a/0x420
[  347.734194][T16085]  ? aa_sock_opt_perm+0xff/0x1b0
[  347.734202][T16085]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  347.734209][T16085]  ? __pfx_xsk_setsockopt+0x10/0x10
[  347.734218][T16085]  do_sock_setsockopt+0x17c/0x1b0
[  347.734227][T16085]  __x64_sys_setsockopt+0x13f/0x1b0
[  347.734235][T16085]  do_syscall_64+0xfa/0x3b0
[  347.734243][T16085]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.734251][T16085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.734257][T16085]  ? exc_page_fault+0x9f/0xf0
[  347.734266][T16085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.734278][T16085] RIP: 0033:0x7fae49d8ebe9
[  347.734286][T16085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  347.734292][T16085] RSP: 002b:00007fae4ab3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  347.734300][T16085] RAX: ffffffffffffffda RBX: 00007fae49fc6180 RCX: 00007fae49d8ebe9
[  347.734305][T16085] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  347.734309][T16085] RBP: 00007fae49e11e19 R08: 0000000000000004 R09: 0000000000000000
[  347.734314][T16085] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  347.734319][T16085] R13: 00007fae49fc6218 R14: 00007fae49fc6180 R15: 00007ffefce12c88
[  347.734331][T16085]  </TASK>
[  347.734335][T16085] Mem-Info:
[  347.944510][T16085] active_anon:10907 inactive_anon:0 isolated_anon:0
[  347.944510][T16085]  active_file:15649 inactive_file:38355 isolated_file:0
[  347.944510][T16085]  unevictable:1768 dirty:50 writeback:0
[  347.944510][T16085]  slab_reclaimable:11174 slab_unreclaimable:78621
[  347.944510][T16085]  mapped:19061 shmem:2451 pagetables:1482
[  347.944510][T16085]  sec_pagetables:0 bounce:0
[  347.944510][T16085]  kernel_misc_reclaimable:0
[  347.944510][T16085]  free:245939 free_pcp:19502 free_cma:0
[  347.963246][T16085] Node 0 active_anon:21840kB inactive_anon:0kB active_file:44324kB inactive_file:135868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:188kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5856kB pagetables:3196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  347.989406][T16085] Node 1 active_anon:21788kB inactive_anon:0kB active_file:18272kB inactive_file:17552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51556kB dirty:12kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8068kB pagetables:2664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  348.003186][T16085] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  348.015548][T16085] lowmem_reserve[]: 0 811 811 811 811
[  348.046020][T16085] Node 0 DMA32 free:238716kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21840kB inactive_anon:0kB active_file:44324kB inactive_file:135868kB unevictable:3536kB writepending:188kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:45508kB local_pcp:15376kB free_cma:0kB
[  348.077908][T16085] lowmem_reserve[]: 0 0 0 0 0
[  348.081596][T16085] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  348.094493][T16085] lowmem_reserve[]: 0 0 854 854 854
[  348.096668][T16085] Node 1 Normal free:270516kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21788kB inactive_anon:0kB active_file:18272kB inactive_file:17552kB unevictable:3536kB writepending:12kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34388kB local_pcp:15720kB free_cma:0kB
[  348.110932][T16085] lowmem_reserve[]: 0 0 0 0 0
[  348.122945][T16085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  348.132548][T16085] Node 0 DMA32: 993*4kB (UE) 1029*8kB (UE) 667*16kB (UM) 294*32kB (UME) 94*64kB (UME) 92*128kB (UM) 87*256kB (UM) 36*512kB (UME) 16*1024kB (UM) 6*2048kB (UME) 29*4096kB (UM) = 238236kB
[  348.158253][T16085] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  348.165806][T16085] Node 1 Normal: 1*4kB (E) 390*8kB (UME) 484*16kB (UME) 115*32kB (ME) 119*64kB (UM) 98*128kB (UME) 21*256kB (UM) 18*512kB (UME) 8*1024kB (UM) 6*2048kB (UM) 49*4096kB (UM) = 270484kB
[  348.174050][T16085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  348.178048][T16085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  348.202407][T16085] 56455 total pagecache pages
[  348.204492][T16085] 0 pages in swap cache
[  348.206361][T16085] Free swap  = 124996kB
[  348.208200][T16085] Total swap = 124996kB
[  348.211937][T16085] 786301 pages RAM
[  348.213715][T16085] 0 pages HighMem/MovableOnly
[  348.215774][T16085] 241330 pages reserved
[  348.217670][T16085] 0 pages cma reserved
[  348.461207][T16106] netlink: 'syz.8.4122': attribute type 39 has an invalid length.
[  348.691203][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4125'.
[  348.762940][T16112] netlink: 'syz.4.4125': attribute type 1 has an invalid length.
[  348.766651][T16112] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4125'.
[  349.486139][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4136'.
[  349.561517][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4137'.
[  349.641023][T16144] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.4140'.
[  349.933914][T16150] netlink: 'syz.4.4143': attribute type 11 has an invalid length.
[  349.937319][T16150] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.4143'.
[  349.971444][T16148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.635381][T16170] tap0: tun_chr_ioctl cmd 1074025677
[  350.637928][T16170] tap0: linktype set to 6
[  350.849847][T16177] netlink: 'syz.8.4153': attribute type 1 has an invalid length.
[  351.084317][T16207] netlink: 'syz.9.4166': attribute type 23 has an invalid length.
[  351.215884][T16215] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  352.146692][T16231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.195536][T16228] __nla_validate_parse: 2 callbacks suppressed
[  352.195591][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4177'.
[  352.632447][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4184'.
[  353.346184][T16275] netlink: 'syz.4.4198': attribute type 2 has an invalid length.
[  353.350483][T16275] netlink: 'syz.4.4198': attribute type 8 has an invalid length.
[  353.353305][T16275] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4198'.
[  353.530145][T16285] netlink: 'syz.4.4203': attribute type 10 has an invalid length.
[  353.543449][T16285] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  354.016289][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4215'.
[  354.187091][T16324] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4222'.
[  354.208716][T16324] caif0: entered promiscuous mode
[  354.210918][T16324] caif0: entered allmulticast mode
[  354.219128][T16324] netlink: 10 bytes leftover after parsing attributes in process `syz.9.4222'.
[  354.412165][T16346] netlink: 'syz.9.4233': attribute type 39 has an invalid length.
[  355.999835][T16386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4250'.
[  356.016807][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4249'.
[  356.194045][T16393] netlink: 'syz.9.4253': attribute type 1 has an invalid length.
[  356.301021][T16401] netlink: 948 bytes leftover after parsing attributes in process `syz.4.4257'.
[  356.902578][T16414] netlink: 'syz.9.4262': attribute type 2 has an invalid length.
[  356.905444][T16414] netlink: 137592 bytes leftover after parsing attributes in process `syz.9.4262'.
[  357.240883][T16425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4267'.
[  357.244732][T16425] tc_dump_action: action bad kind
[  357.362190][T16434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.366366][T16435] netlink: 'syz.8.4272': attribute type 21 has an invalid length.
[  357.371997][T16435] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4272'.
[  357.375739][T16435] netlink: 'syz.8.4272': attribute type 6 has an invalid length.
[  357.379287][T16435] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4272'.
[  357.553423][T16448] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.4278'.
[  358.561293][T16458] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.4282'.
[  358.612847][T16458] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.4282'.
[  358.628207][T16458] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.4282'.
[  358.733747][T16461] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.4283'.
[  358.770756][T16463] syzkaller0: entered promiscuous mode
[  358.773175][T16463] syzkaller0: entered allmulticast mode
[  359.135731][T16472] netlink: 'syz.9.4288': attribute type 16 has an invalid length.
[  359.140475][T16472] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4288'.
[  359.187599][T16476] netlink: 'syz.9.4290': attribute type 1 has an invalid length.
[  359.362575][T16480] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4292'.
[  360.726142][T16519] syzkaller0: entered promiscuous mode
[  360.728123][T16519] syzkaller0: entered allmulticast mode
[  360.907347][T16525] netlink: 'syz.4.4311': attribute type 1 has an invalid length.
[  360.912783][T16526] netlink: 'syz.8.4310': attribute type 6 has an invalid length.
[  362.365154][T16569] __nla_validate_parse: 4 callbacks suppressed
[  362.365164][T16569] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4331'.
[  362.376595][T16568] netlink: 'syz.9.4330': attribute type 7 has an invalid length.
[  362.521850][T16576] netlink: 'syz.8.4332': attribute type 40 has an invalid length.
[  362.579371][   T55] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  362.757879][T16576] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.133426][T16599] netlink: 'syz.9.4344': attribute type 21 has an invalid length.
[  363.136595][T16599] IPv6: NLM_F_CREATE should be specified when creating new route
[  363.350785][T16605] netlink: 182 bytes leftover after parsing attributes in process `syz.4.4346'.
[  363.356919][T16604] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4346'.
[  363.370449][T16604] netlink: 'syz.4.4346': attribute type 10 has an invalid length.
[  363.374706][T16604] veth0_vlan: left allmulticast mode
[  363.427416][T16604] veth0_vlan: left promiscuous mode
[  363.436212][T16604] veth0_vlan: entered promiscuous mode
[  363.458397][T16604] team0: Device veth0_vlan failed to register rx_handler
[  363.513482][T16612] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4346'.
[  363.981763][T16627] netlink: 'syz.9.4355': attribute type 29 has an invalid length.
[  364.631392][T16583] Bluetooth: hci2: command 0x0406 tx timeout
[  364.685231][T16638] netlink: 'syz.9.4355': attribute type 10 has an invalid length.
[  364.692259][T16638] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.696550][T16638] team0: Port device bond0 added
[  364.815785][T16647] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.4362'.
[  365.000728][T16661] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4368'.
[  365.293242][T16684] netlink: 'syz.9.4379': attribute type 1 has an invalid length.
[  365.296557][T16684] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4379'.
[  365.785687][T16707] netlink: 'syz.9.4390': attribute type 21 has an invalid length.
[  366.104715][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4395'.
[  367.294535][T16774] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4416'.
[  368.059585][T16813] : renamed from wg2 (while UP)
[  368.562165][T16817] netlink: 'syz.9.4436': attribute type 11 has an invalid length.
[  368.565577][T16817] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4436'.
[  368.610609][T16817] mac80211_hwsim hwsim30 .3c: renamed from wlan1 (while UP)
[  368.666111][T16823] tap0: tun_chr_ioctl cmd 1074025677
[  368.670031][T16823] tap0: linktype set to 0
[  369.053658][T16840] netlink: 11562 bytes leftover after parsing attributes in process `syz.9.4446'.
[  369.747204][T16858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.972306][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4457'.
[  369.976176][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4457'.
[  370.588013][T16885] netlink: 'syz.4.4466': attribute type 1 has an invalid length.
[  370.593923][T16885] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4466'.
[  370.784726][T16892] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4469'.
[  371.385685][T16921] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4483'.
[  371.460295][T16925] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  371.526850][T16930] netlink: 'syz.8.4489': attribute type 4 has an invalid length.
[  371.532674][T16930] netlink: 209028 bytes leftover after parsing attributes in process `syz.8.4489'.
[  371.631846][T16935] netlink: 'syz.4.4491': attribute type 21 has an invalid length.
[  371.634582][T16935] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4491'.
[  372.441214][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4501'.
[  374.678335][T17014] netlink: 'syz.8.4527': attribute type 10 has an invalid length.
[  375.457324][T17014] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  375.614060][    C0] ==================================================================
[  375.617102][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  375.620277][    C0] Write of size 8 at addr ffff8880260fe8b0 by task syz.8.4531/17022
[  375.624116][    C0] 
[  375.625036][    C0] CPU: 0 UID: 0 PID: 17022 Comm: syz.8.4531 Not tainted syzkaller #0 PREEMPT(full) 
[  375.625048][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  375.625054][    C0] Call Trace:
[  375.625059][    C0]  <IRQ>
[  375.625063][    C0]  dump_stack_lvl+0x189/0x250
[  375.625078][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  375.625090][    C0]  ? rcu_is_watching+0x15/0xb0
[  375.625098][    C0]  ? __kasan_check_byte+0x12/0x40
[  375.625110][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.625120][    C0]  ? rcu_is_watching+0x15/0xb0
[  375.625128][    C0]  ? lock_release+0x4b/0x3e0
[  375.625141][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  375.625152][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  375.625162][    C0]  print_report+0xca/0x240
[  375.625171][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  375.625184][    C0]  kasan_report+0x118/0x150
[  375.625196][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  375.625210][    C0]  __xfrm_state_delete+0x696/0xca0
[  375.625225][    C0]  xfrm_timer_handler+0x18f/0xa00
[  375.625240][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  375.625251][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  375.625263][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.625274][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  375.625284][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  375.625296][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  375.625308][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  375.625320][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  375.625333][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  375.625341][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  375.625352][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  375.625362][    C0]  handle_softirqs+0x286/0x870
[  375.625371][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  375.625381][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  375.625390][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  375.625402][    C0]  __irq_exit_rcu+0xca/0x1f0
[  375.625409][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  375.625420][    C0]  irq_exit_rcu+0x9/0x30
[  375.625427][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  375.625439][    C0]  </IRQ>
[  375.625442][    C0]  <TASK>
[  375.625445][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  375.625455][    C0] RIP: 0010:x2apic_send_IPI+0x73/0xe0
[  375.625467][    C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7
[  375.625475][    C0] RSP: 0018:ffffc90007ec73f0 EFLAGS: 00000206
[  375.625484][    C0] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830
[  375.625490][    C0] RDX: 0000000000000001 RSI: 00000000000000fb RDI: 0000000000000001
[  375.625496][    C0] RBP: ffffc90007ec75a0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  375.625502][    C0] R10: dffffc0000000000 R11: ffffffff81705100 R12: dffffc0000000000
[  375.625509][    C0] R13: dffffc0000000000 R14: ffff8881366201b0 R15: ffffffff8dbded18
[  375.625516][    C0]  ? __pfx_native_send_call_func_single_ipi+0x10/0x10
[  375.625532][    C0]  smp_call_function_many_cond+0xabb/0x12d0
[  375.625543][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  375.625558][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  375.625566][    C0]  ? perf_event_text_poke+0x13d/0x190
[  375.625580][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  375.625589][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  375.625600][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  375.625611][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  375.625620][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[  375.625634][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  375.625647][    C0]  ? arch_static_call_transform+0x2d/0xc0
[  375.625656][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  375.625667][    C0]  __static_call_transform+0x4eb/0x750
[  375.625676][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  375.625685][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  375.625717][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  375.625728][    C0]  ? __static_call_validate+0x148/0x240
[  375.625736][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  375.625747][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  375.625755][    C0]  arch_static_call_transform+0x98/0xc0
[  375.625765][    C0]  __static_call_update+0xe4/0x5d0
[  375.625776][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  375.625786][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  375.625795][    C0]  ? __pfx___static_call_update+0x10/0x10
[  375.625806][    C0]  ? rcu_is_watching+0x15/0xb0
[  375.625814][    C0]  ? trace_kmalloc+0x1f/0xd0
[  375.625825][    C0]  ? tracepoint_add_func+0x515/0xa10
[  375.625838][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  375.625848][    C0]  tracepoint_add_func+0x91e/0xa10
[  375.625862][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  375.625872][    C0]  tracepoint_probe_register+0x5d/0x90
[  375.625883][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  375.625894][    C0]  perf_trace_event_init+0x4e1/0x9d0
[  375.625904][    C0]  perf_trace_init+0x23d/0x2d0
[  375.625913][    C0]  perf_tp_event_init+0x8d/0x120
[  375.625922][    C0]  perf_try_init_event+0x17f/0x870
[  375.625932][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  375.625942][    C0]  perf_event_alloc+0x133e/0x2be0
[  375.625951][    C0]  ? __lock_acquire+0xab9/0xd20
[  375.625963][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  375.625976][    C0]  ? __pfx_perf_event_alloc+0x10/0x10
[  375.625987][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  375.625996][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  375.626004][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  375.626014][    C0]  __se_sys_perf_event_open+0x772/0x1d70
[  375.626025][    C0]  ? __might_sleep+0x51/0x100
[  375.626035][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  375.626044][    C0]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  375.626060][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  375.626072][    C0]  ? rcu_is_watching+0x15/0xb0
[  375.626082][    C0]  ? do_syscall_64+0xbe/0x3b0
[  375.626093][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  375.626103][    C0]  do_syscall_64+0xfa/0x3b0
[  375.626114][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.626125][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.626133][    C0]  ? exc_page_fault+0x9f/0xf0
[  375.626144][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.626152][    C0] RIP: 0033:0x7f8b1418ebe9
[  375.626160][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.626167][    C0] RSP: 002b:00007f8b1506e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  375.626177][    C0] RAX: ffffffffffffffda RBX: 00007f8b143c5fa0 RCX: 00007f8b1418ebe9
[  375.626183][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  375.626189][    C0] RBP: 00007f8b14211e19 R08: 0000000000000009 R09: 0000000000000000
[  375.626194][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  375.626200][    C0] R13: 00007f8b143c6038 R14: 00007f8b143c5fa0 R15: 00007ffc6d292bc8
[  375.626210][    C0]  </TASK>
[  375.626213][    C0] 
[  375.913296][    C0] Allocated by task 15370:
[  375.915245][    C0]  kasan_save_track+0x3e/0x80
[  375.917310][    C0]  __kasan_slab_alloc+0x6c/0x80
[  375.919425][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  375.921829][    C0]  xfrm_state_alloc+0x24/0x2f0
[  375.923930][    C0]  __find_acq_core+0x8a7/0x1c00
[  375.926014][    C0]  xfrm_find_acq+0x78/0xa0
[  375.927965][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  375.930153][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  375.932327][    C0]  netlink_rcv_skb+0x208/0x470
[  375.934432][    C0]  xfrm_netlink_rcv+0x79/0x90
[  375.936478][    C0]  netlink_unicast+0x82f/0x9e0
[  375.938560][    C0]  netlink_sendmsg+0x805/0xb30
[  375.940658][    C0]  __sock_sendmsg+0x21c/0x270
[  375.942715][    C0]  ____sys_sendmsg+0x505/0x830
[  375.944795][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  375.946831][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  375.948969][    C0]  do_syscall_64+0xfa/0x3b0
[  375.950956][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.953487][    C0] 
[  375.954545][    C0] Freed by task 5310:
[  375.956274][    C0]  kasan_save_track+0x3e/0x80
[  375.958334][    C0]  kasan_save_free_info+0x46/0x50
[  375.960506][    C0]  __kasan_slab_free+0x5b/0x80
[  375.962625][    C0]  kmem_cache_free+0x18f/0x400
[  375.964718][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  375.966966][    C0]  process_scheduled_works+0xae1/0x17b0
[  375.969336][    C0]  worker_thread+0x8a0/0xda0
[  375.971362][    C0]  kthread+0x711/0x8a0
[  375.973258][    C0]  ret_from_fork+0x3fc/0x770
[  375.975256][    C0]  ret_from_fork_asm+0x1a/0x30
[  375.977334][    C0] 
[  375.978390][    C0] The buggy address belongs to the object at ffff8880260fe880
[  375.978390][    C0]  which belongs to the cache xfrm_state of size 928
[  375.984298][    C0] The buggy address is located 48 bytes inside of
[  375.984298][    C0]  freed 928-byte region [ffff8880260fe880, ffff8880260fec20)
[  375.990093][    C0] 
[  375.991168][    C0] The buggy address belongs to the physical page:
[  375.993951][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880260fe400 pfn:0x260fc
[  375.998114][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  376.001586][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  376.004709][    C0] page_type: f5(slab)
[  376.006366][    C0] raw: 00fff00000000040 ffff88801af96500 dead000000000122 0000000000000000
[  376.009964][    C0] raw: ffff8880260fe400 00000000800e0007 00000000f5000000 0000000000000000
[  376.013568][    C0] head: 00fff00000000040 ffff88801af96500 dead000000000122 0000000000000000
[  376.017171][    C0] head: ffff8880260fe400 00000000800e0007 00000000f5000000 0000000000000000
[  376.020889][    C0] head: 00fff00000000002 ffffea0000983f01 00000000ffffffff 00000000ffffffff
[  376.024581][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  376.028187][    C0] page dumped because: kasan: bad access detected
[  376.030875][    C0] page_owner tracks the page as allocated
[  376.033221][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6100, tgid 6099 (syz.2.80), ts 62883011122, free_ts 60400513387
[  376.041087][    C0]  post_alloc_hook+0x240/0x2a0
[  376.043125][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  376.045526][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  376.048099][    C0]  alloc_pages_mpol+0x232/0x4a0
[  376.050224][    C0]  allocate_slab+0x8a/0x370
[  376.052359][    C0]  ___slab_alloc+0xbeb/0x1410
[  376.054413][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  376.056880][    C0]  xfrm_state_alloc+0x24/0x2f0
[  376.058963][    C0]  pfkey_add+0x6e4/0x2e00
[  376.060832][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  376.062839][    C0]  __sock_sendmsg+0x21c/0x270
[  376.064876][    C0]  ____sys_sendmsg+0x505/0x830
[  376.066940][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  376.068936][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  376.071080][    C0]  do_syscall_64+0xfa/0x3b0
[  376.073037][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.075587][    C0] page last free pid 2277 tgid 2277 stack trace:
[  376.077667][    C0]  __free_frozen_pages+0xbc4/0xd30
[  376.079745][    C0]  __slab_free+0x303/0x3c0
[  376.081458][    C0]  qlist_free_all+0x97/0x140
[  376.083186][    C0]  kasan_quarantine_reduce+0x148/0x160
[  376.085252][    C0]  __kasan_kmalloc+0x22/0xb0
[  376.086806][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  376.088527][    C0]  nsim_fib_event_work+0x1174/0x3180
[  376.090548][    C0]  process_scheduled_works+0xae1/0x17b0
[  376.092820][    C0]  worker_thread+0x8a0/0xda0
[  376.094721][    C0]  kthread+0x711/0x8a0
[  376.096340][    C0]  ret_from_fork+0x3fc/0x770
[  376.098230][    C0]  ret_from_fork_asm+0x1a/0x30
[  376.099848][    C0] 
[  376.100666][    C0] Memory state around the buggy address:
[  376.102730][    C0]  ffff8880260fe780: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  376.105381][    C0]  ffff8880260fe800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  376.108000][    C0] >ffff8880260fe880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  376.110894][    C0]                                      ^
[  376.112762][    C0]  ffff8880260fe900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  376.115432][    C0]  ffff8880260fe980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  376.118067][    C0] ==================================================================
[  376.120965][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  376.123399][    C0] CPU: 0 UID: 0 PID: 17022 Comm: syz.8.4531 Not tainted syzkaller #0 PREEMPT(full) 
[  376.126513][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.130130][    C0] Call Trace:
[  376.131532][    C0]  <IRQ>
[  376.132735][    C0]  dump_stack_lvl+0x99/0x250
[  376.134629][    C0]  ? __asan_memcpy+0x40/0x70
[  376.136532][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.138649][    C0]  ? __pfx__printk+0x10/0x10
[  376.140558][    C0]  vpanic+0x281/0x750
[  376.142190][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  376.143932][    C0]  ? __pfx_vpanic+0x10/0x10
[  376.145822][    C0]  ? irqentry_exit+0x74/0x90
[  376.147721][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.149669][    C0]  panic+0xb9/0xc0
[  376.151239][    C0]  ? __pfx_panic+0x10/0x10
[  376.153069][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  376.155306][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.157898][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  376.160080][    C0]  check_panic_on_warn+0x89/0xb0
[  376.162111][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  376.164258][    C0]  end_report+0x78/0x160
[  376.166018][    C0]  kasan_report+0x129/0x150
[  376.167872][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  376.170085][    C0]  __xfrm_state_delete+0x696/0xca0
[  376.171857][    C0]  xfrm_timer_handler+0x18f/0xa00
[  376.173508][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  376.175425][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  376.177361][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.179080][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  376.181019][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  376.183142][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  376.185076][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  376.186893][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  376.188628][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  376.190571][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  376.192489][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  376.194195][    C0]  handle_softirqs+0x286/0x870
[  376.195779][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  376.197352][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  376.199103][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  376.200822][    C0]  __irq_exit_rcu+0xca/0x1f0
[  376.202349][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  376.204079][    C0]  irq_exit_rcu+0x9/0x30
[  376.205490][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  376.207340][    C0]  </IRQ>
[  376.208333][    C0]  <TASK>
[  376.209359][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  376.211423][    C0] RIP: 0010:x2apic_send_IPI+0x73/0xe0
[  376.213234][    C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7
[  376.219557][    C0] RSP: 0018:ffffc90007ec73f0 EFLAGS: 00000206
[  376.221880][    C0] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830
[  376.224537][    C0] RDX: 0000000000000001 RSI: 00000000000000fb RDI: 0000000000000001
[  376.227139][    C0] RBP: ffffc90007ec75a0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006
[  376.229759][    C0] R10: dffffc0000000000 R11: ffffffff81705100 R12: dffffc0000000000
[  376.232373][    C0] R13: dffffc0000000000 R14: ffff8881366201b0 R15: ffffffff8dbded18
[  376.235006][    C0]  ? __pfx_native_send_call_func_single_ipi+0x10/0x10
[  376.237221][    C0]  smp_call_function_many_cond+0xabb/0x12d0
[  376.239179][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  376.240866][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  376.242942][    C0]  ? perf_event_text_poke+0x13d/0x190
[  376.244754][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  376.246617][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[  376.248491][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  376.250178][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  376.251889][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[  376.253811][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  376.255868][    C0]  ? arch_static_call_transform+0x2d/0xc0
[  376.257739][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  376.259613][    C0]  __static_call_transform+0x4eb/0x750
[  376.261437][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  376.263378][    C0]  ? __pfx___static_call_transform+0x10/0x10
[  376.265389][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  376.267328][    C0]  ? __static_call_validate+0x148/0x240
[  376.269150][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  376.271368][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  376.273260][    C0]  arch_static_call_transform+0x98/0xc0
[  376.275082][    C0]  __static_call_update+0xe4/0x5d0
[  376.276785][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  376.278987][    C0]  ? __SCT__tp_func_cpu_frequency+0x8/0x8
[  376.280824][    C0]  ? __pfx___static_call_update+0x10/0x10
[  376.282705][    C0]  ? rcu_is_watching+0x15/0xb0
[  376.284297][    C0]  ? trace_kmalloc+0x1f/0xd0
[  376.285857][    C0]  ? tracepoint_add_func+0x515/0xa10
[  376.287637][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  376.289819][    C0]  tracepoint_add_func+0x91e/0xa10
[  376.291935][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  376.294752][    C0]  tracepoint_probe_register+0x5d/0x90
[  376.296609][    C0]  ? __pfx_perf_trace_cpu_frequency_limits+0x10/0x10
[  376.298803][    C0]  perf_trace_event_init+0x4e1/0x9d0
[  376.300538][    C0]  perf_trace_init+0x23d/0x2d0
[  376.302175][    C0]  perf_tp_event_init+0x8d/0x120
[  376.303832][    C0]  perf_try_init_event+0x17f/0x870
[  376.306057][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  376.307970][    C0]  perf_event_alloc+0x133e/0x2be0
[  376.309868][    C0]  ? __lock_acquire+0xab9/0xd20
[  376.311729][    C0]  ? perf_event_alloc+0xf61/0x2be0
[  376.313471][    C0]  ? __pfx_perf_event_alloc+0x10/0x10
[  376.315343][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  376.317200][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  376.319061][    C0]  ? find_lively_task_by_vpid+0x19/0x290
[  376.320902][    C0]  __se_sys_perf_event_open+0x772/0x1d70
[  376.322754][    C0]  ? __might_sleep+0x51/0x100
[  376.324333][    C0]  ? __pfx___se_sys_perf_event_open+0x10/0x10
[  376.326360][    C0]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  376.328861][    C0]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  376.331309][    C0]  ? rcu_is_watching+0x15/0xb0
[  376.332973][    C0]  ? do_syscall_64+0xbe/0x3b0
[  376.334596][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  376.336483][    C0]  do_syscall_64+0xfa/0x3b0
[  376.337982][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.339750][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.341775][    C0]  ? exc_page_fault+0x9f/0xf0
[  376.343328][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.345279][    C0] RIP: 0033:0x7f8b1418ebe9
[  376.346799][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.353106][    C0] RSP: 002b:00007f8b1506e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  376.355874][    C0] RAX: ffffffffffffffda RBX: 00007f8b143c5fa0 RCX: 00007f8b1418ebe9
[  376.358460][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100
[  376.361060][    C0] RBP: 00007f8b14211e19 R08: 0000000000000009 R09: 0000000000000000
[  376.363702][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  376.366482][    C0] R13: 00007f8b143c6038 R14: 00007f8b143c5fa0 R15: 00007ffc6d292bc8
[  376.369087][    C0]  </TASK>
[  376.370812][    C0] Kernel Offset: disabled
[  376.372243][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:02:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff88801ed20237 R9 =1ffff11003da4046 R10=dffffc0000000000 R11=ffffffff854efb70
R12=dffffc0000000000 R13=ffffffff99af9905 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efbec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8b1506e6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2400f9 CR3=0000000028484000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000082 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f8b14397478 00007f8b143974c0
XMM06=00007f8b143974b8 00007f8b143974b0 XMM07=00007f8b143974a8 00007f8b143974a0
XMM08=0000000000000000 00007f8b14212ee7 XMM09=0000000000000000 00007f8b14212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11023671948 RBX=ffff88811b38ca40 RCX=0000000000080000 RDX=ffffc90028bb5000
RSI=0000000000054434 RDI=ffff88811b38c7c0 RBP=ffffc90008016ac8 RSP=ffffc90008016840
R8 =ffffc90008016a0f R9 =0000000000000000 R10=ffffc90008016a00 R11=fffff52001002d42
R12=ffff88811b38c4c0 R13=ffffc900080168c8 R14=ffff888136632a08 R15=dffffc0000000000
RIP=ffffffff81ef5d98 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f90830d76c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c252e8d CR3=0000000028182000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fae49e12e53
XMM06=0000000000000000 00007fae49e12e4d XMM07=0000000000000000 00007fae49e12e61
XMM08=0000000000000000 00007fae49e12ee7 XMM09=0000000000000000 00007fae49e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
