last executing test programs:

5m17.369395146s ago: executing program 1 (id=464):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = getpid()
r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x12, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x42)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x3ffd, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x8010)
close(r5)

5m17.142460389s ago: executing program 1 (id=468):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x15, 0xfffffff7, 0x1, 0x7007, 0x20004, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x76, '\x00', 0x0, r2, 0x2, 0x5}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYBLOB="3e0002"], 0x9a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @alu={0x4, 0x1, 0x8, 0x2, 0x8, 0xfffffffffffffff4, 0x1}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x8}, @exit, @generic={0x71, 0x6, 0x8, 0x1, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x433}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x6, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r4, r5, r8], &(0x7f00000008c0)=[{0x0, 0x3, 0x2, 0x551fe019d1c2931c}, {0x0, 0x2, 0x3, 0xb}], 0x10, 0xff}, 0x94)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x2b, 0xb, 0x20000000, 0xfffffffc, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xe8, 0x0, 0x0, @binary}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2008010)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10)

5m17.022375477s ago: executing program 1 (id=471):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x54, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x0, <r6=>0x0}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x24, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x73}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_idx={0x18, 0x12, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xd, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x44, '\x00', r4, @fallback=0x33, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x4, 0x1, 0x3}, 0x10, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000580)=r4)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r7, r8, 0x6, 0x0, @void}, 0x10)
r10 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000640)=r7, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x34}}, 0x4000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x8202, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x1e)
sendmsg$IPSET_CMD_RENAME(r12, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}}, 0x44)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x6044028)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, 0x3, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000003, 0xfffff000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x10000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x240000d1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x2, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x40, 0x1, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x40}}, 0x800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r2, <r15=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r0}, 0x20)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1a, 0x14, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x295, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @jmp={0x5, 0x1, 0x1, 0x9, 0x8, 0x10, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}]}, &(0x7f0000000e40)='syzkaller\x00', 0x8000, 0x13, &(0x7f0000000e80)=""/19, 0x41000, 0x11, '\x00', r4, @tracing=0x17, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x0, 0x0, 0xffff, 0x2}, 0x10, r6, r7, 0x2, &(0x7f0000000f00)=[r3, r3, r1], &(0x7f0000000f40)=[{0x0, 0x4, 0x5, 0xc}, {0x1, 0x2, 0x2, 0xb}], 0x10, 0x10001}, 0x94)
sendmsg$IPSET_CMD_GET_BYNAME(r11, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x5c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@fallback=r14, r16, 0xd, 0x2008, 0x0, @value=r9}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@fallback=r13, 0x12, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0], &(0x7f0000001240)=[0x0], &(0x7f0000001280)=[0x0]}, 0x40)

5m16.893125929s ago: executing program 1 (id=473):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002140)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000080)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f00000003c0)}, 0x10)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00038008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000c824ebf425bd7000ffdbdf2508003c0000001c55d28c00000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x10)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000001000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff030}, {0x6, 0x0, 0x0, 0x3}]})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)

5m15.882133344s ago: executing program 1 (id=479):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x80}, 0x0, 0x0, 0x5, 0x2, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)
socket$kcm(0x11, 0x2, 0x300)

5m13.809685119s ago: executing program 1 (id=488):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x218042, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000ac0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc052, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ff0000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000003000000000000b204058e5694500000d0f78bef"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x0)
close(r8)
perf_event_open(&(0x7f0000000b40)={0x2, 0x75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104301, 0x8, 0x6, 0x0, 0x10000000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r6, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r10 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x41, &(0x7f0000000fc0)=[{&(0x7f0000000040)="c018030031000b12d26578e0ca6f0479df062836c488f5af725a80648c2594f90324fc60100c1140022006000535", 0x2e}, {&(0x7f0000000e00)="c29e49475f8017d53e946beb324fc3244506bb8ea5a703f0c2b264d6be8808868530405ce69cf59795d1d61c6303cd088eab29c2d70fabe391be5360dbe37c84c805ab8273b20b478154ecc16b3def51c37172675900328e4e865799c7848e8f4c5c39f8c686444bc8f5ee433563e37718f17c6aec6eeea65c81ae2c82c4c9a190ea625235dd71faeafbee0409de8aec03f0c9af51b418daa781999c1f358bcc3e7e07d3cea483026f973f7b2b43520983210f2855fc189c62d8e9553bae3b2d8f7ef5e1590b76ed94048bce1df8dac1e2131878ded7"}, {&(0x7f00000008c0)="3a4b524b28f381795eb0b485219f0cd405aa129971be4a6904a3ae366725f21f0786bb17ddca7d34d4c0d7be7226f4763add0d543f81b8929bbb0680ee3a9544b0f7"}, {&(0x7f0000000c80)="7a25c881ae555b81b1d6d471308fbbf7a85ba34e31afb0751703951103d9c2d54530ca63eb3830ae8a145dd3c9f391abaac4f74dea9ae6ad5ece5ba5c48cc576f8874b2c92224ff71834296ad2cb5b977cb9c4cb03b4f83df695f98f4d9c8d877676e1d8cef3509308478b96be198dee1108714815cbbf5b3f8b7b650690217ee2c7eacf310cca7f166b9d75656c3902a30f0fdb1525eede485898dab660601a02123bf9866c0189cdc2c0a140"}, {&(0x7f0000000c00)="dc7b89c0759f2d7851b1074a98fc136c0303572e8fea626cfea28784fa4a6579cdb61c75ff4e92706ddb9efce4046337803ea773"}, {&(0x7f0000000f00)="6dbb37a48d718af8539b97fa709996302dc1623bfb54fd964e242329bfff0d6f9d9a83bfdfd5db7a83a23b5093f0b265cce62ab69ee134099afed09268d7265f23a52e2a34dd5b6712c6ae741d913a65af844db3a61b2974a980e85863381ce9aad2a3d517346934c867ba39b00351aa577d9d656ac7b867502e118b9be866b8c5"}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000063620000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000020000005000000a436080008000000f910000007000000848acfff04000000586600000085000000b7000000000000009500"/128, @ANYRES32=r8], &(0x7f0000000200)='syzkaller\x00', 0x4390, 0x0, 0x0, 0x41100, 0x4c, '\x00', r5, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, r11, 0x5, &(0x7f0000000300)=[r4], &(0x7f0000000980)=[{0x2, 0x100003, 0xa, 0xc}, {0x3, 0xb, 0x3, 0x5}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x401}, 0x94)

4m58.792947019s ago: executing program 32 (id=488):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x218042, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000ac0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc052, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000ff0000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000003000000000000b204058e5694500000d0f78bef"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x0)
close(r8)
perf_event_open(&(0x7f0000000b40)={0x2, 0x75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104301, 0x8, 0x6, 0x0, 0x10000000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x5, &(0x7f0000000bc0)=ANY=[@ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r6, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r10 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00), 0x8)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x41, &(0x7f0000000fc0)=[{&(0x7f0000000040)="c018030031000b12d26578e0ca6f0479df062836c488f5af725a80648c2594f90324fc60100c1140022006000535", 0x2e}, {&(0x7f0000000e00)="c29e49475f8017d53e946beb324fc3244506bb8ea5a703f0c2b264d6be8808868530405ce69cf59795d1d61c6303cd088eab29c2d70fabe391be5360dbe37c84c805ab8273b20b478154ecc16b3def51c37172675900328e4e865799c7848e8f4c5c39f8c686444bc8f5ee433563e37718f17c6aec6eeea65c81ae2c82c4c9a190ea625235dd71faeafbee0409de8aec03f0c9af51b418daa781999c1f358bcc3e7e07d3cea483026f973f7b2b43520983210f2855fc189c62d8e9553bae3b2d8f7ef5e1590b76ed94048bce1df8dac1e2131878ded7"}, {&(0x7f00000008c0)="3a4b524b28f381795eb0b485219f0cd405aa129971be4a6904a3ae366725f21f0786bb17ddca7d34d4c0d7be7226f4763add0d543f81b8929bbb0680ee3a9544b0f7"}, {&(0x7f0000000c80)="7a25c881ae555b81b1d6d471308fbbf7a85ba34e31afb0751703951103d9c2d54530ca63eb3830ae8a145dd3c9f391abaac4f74dea9ae6ad5ece5ba5c48cc576f8874b2c92224ff71834296ad2cb5b977cb9c4cb03b4f83df695f98f4d9c8d877676e1d8cef3509308478b96be198dee1108714815cbbf5b3f8b7b650690217ee2c7eacf310cca7f166b9d75656c3902a30f0fdb1525eede485898dab660601a02123bf9866c0189cdc2c0a140"}, {&(0x7f0000000c00)="dc7b89c0759f2d7851b1074a98fc136c0303572e8fea626cfea28784fa4a6579cdb61c75ff4e92706ddb9efce4046337803ea773"}, {&(0x7f0000000f00)="6dbb37a48d718af8539b97fa709996302dc1623bfb54fd964e242329bfff0d6f9d9a83bfdfd5db7a83a23b5093f0b265cce62ab69ee134099afed09268d7265f23a52e2a34dd5b6712c6ae741d913a65af844db3a61b2974a980e85863381ce9aad2a3d517346934c867ba39b00351aa577d9d656ac7b867502e118b9be866b8c5"}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000063620000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000020000005000000a436080008000000f910000007000000848acfff04000000586600000085000000b7000000000000009500"/128, @ANYRES32=r8], &(0x7f0000000200)='syzkaller\x00', 0x4390, 0x0, 0x0, 0x41100, 0x4c, '\x00', r5, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, r11, 0x5, &(0x7f0000000300)=[r4], &(0x7f0000000980)=[{0x2, 0x100003, 0xa, 0xc}, {0x3, 0xb, 0x3, 0x5}, {0x3, 0x3, 0xa, 0xb}, {0x3, 0x4, 0xf, 0x2}, {0x0, 0x5, 0xe, 0x3}], 0x10, 0x401}, 0x94)

3m21.190841419s ago: executing program 0 (id=1158):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0, 0xd, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f00000008c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000900)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x6, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000002c0)='syzkaller\x00', 0x1f6, 0x0, &(0x7f0000000380), 0x40f00, 0x40, '\x00', r6, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x1, 0x0, 0x5b8}, 0x10, 0x0, r1, 0x4, &(0x7f0000000b00)=[r0, r0], &(0x7f0000000b40)=[{0x2, 0x3, 0x9, 0x1}, {0x5, 0x5, 0x10, 0x8}, {0x5, 0x1, 0x7, 0x5}, {0x4, 0x1, 0xd}], 0x10, 0x1}, 0x94)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x84000)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x2300, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="1b0000001e006b00003fe30400007ea60800"/27, 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8810)
r8 = socket$kcm(0xa, 0x5, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
close(r9)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x79, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x0, 0x1a, 'E&\x00'}, @IPSET_ATTR_IP2={0x0, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_IP2={0x0, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_NAME={0x0, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xc}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4000881}, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m21.121817786s ago: executing program 0 (id=1159):
socket$isdn(0x22, 0x3, 0x26)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004c818) (async)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)="569d653679b0ecb6894123b74636e2ba61f2b2855bf21b65c1fa69121ab8d050ebf3a4ab27ee19701663da0558e9c70b971d27e174cd5fea1738286fe87f15281557be02f34e104f75ea2b528d82bd0bf247", 0x52}], 0x2, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4000081) (async)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2042)

3m21.119877371s ago: executing program 0 (id=1162):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
r3 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0xb5, 0x5, 0xfd, 0x3, 0x0, 0x1, 0x200, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x1}, 0x410, 0x3, 0x4, 0x5, 0x2, 0x6, 0x20, 0x0, 0x1, 0x0, 0x8000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8a06, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, r3, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)

3m21.050834493s ago: executing program 0 (id=1164):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x828, 0x8, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = syz_clone(0x0, &(0x7f0000000340)="fc5af288b63bb279724d3fea989cb3eebf3d10b5c6ebdd047b91197ee6b52c6d644d252ca48bf3713cf824c2f30ddbd3921b92db412f15793a9be68e1f822fcf9e3d5df3d5caf09682ed2806278298dfb76f333a93c16465684fe66e612a01657204021826e8b28142b2", 0x6a, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000480)="8a8dfdaac6bcf8ca6da603f95509787cb3528bca1523528ba83b0ded53f2156dc62e5d5a9f84e3eb0fd6c7bfbe4aecf4aeafdc14158a763bd98ca63b9787fad11a34ad9afdaea180e13a768eab73dfd83aa2121e0945de2468b8ee7f9e1df4845f6343e986b27361a4e82533c6cbb7ddaa144991d45c2c2893b87ff902017a71189fa7fc0879b0dc86d3034076ce")
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x81, 0x1, 0x41, 0x6, 0x0, 0x4, 0x20800, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x100001, 0x5, 0x2, 0x7, 0x7, 0x3, 0x0, 0x0, 0x5, 0x0, 0x3c4e}, r2, 0x7, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001980)={0x1, 0x80, 0x1d, 0x0, 0x2, 0x2a, 0x0, 0xf34, 0x9210, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000001940), 0x6}, 0x2041, 0x5, 0x4, 0x5, 0x4, 0x6, 0x5, 0x0, 0x7, 0x0, 0x8001}, r2, 0x7, r1, 0x2)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
r5 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33)
recvmsg$kcm(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4100, 0xa83}, {&(0x7f0000000bc0)=""/209, 0x7f}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x9a}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/154, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/199}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={<r7=>r4})
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWRULE={0x160, 0x6, 0xa, 0x409, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0xec, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x5d}, @NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x15, &(0x7f0000000280)=r9, 0x28)
close(0x3)
r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12)
sendmsg$NFNL_MSG_ACCT_GET(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000001000001000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x4800)
sendmsg(r7, &(0x7f0000001900)={&(0x7f00000003c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0xcd, 0x9, "9bb96b44e820ec69ed754f98eb9c93b7597d0e4a655ea3588d7abbabec73fb48832a6321aec0308b380a46cb446c676be4576072f0c6cc43f54391807ee8a9", 0x3}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001580)="61eebac06a1ab14639c3400af205b38d7fc83992e6262dc128a244f37cfb444eb02d01b9dfb0371a6589f88d7ff8e04b2d16bc74246a9285697c8994cd022a64f40d11fced8758a1b8572d76a1c6b1cde376571d62e5ea385c2001705e3fc12cd9f9f4b7995c950cfe5dbc0a6e4698235e9924cbeec674f0a9e53c3fa6874c38da3f7334", 0x84}], 0x1, &(0x7f0000001a00)=[{0x88, 0x103, 0x3, "1b7a708828b7e51391a58f1bed9b72e813a07b26187790677b4c1afe870176b2f03e5e21a8daa1a875f0db8060c897177c4849c37519aa5a343db7bac83d2c13f6cfea2bcd00cb9be13f0a9825ab86d5b17175c683fc58237ffc1caafe96ab7c197d3303b787dfe027efa9a920db11ee9545fd"}], 0x88}, 0x0)

3m20.854966542s ago: executing program 0 (id=1166):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0400, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x7, 0x4)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f8000000190001002dbd700000000000000000000000000000000000000000016401010200000008000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044"], 0xf8}}, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(r0)
socket$kcm(0x2b, 0x1, 0x0)

3m19.451610054s ago: executing program 0 (id=1171):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095", @ANYRESDEC=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000a40)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0}, 0x4040042)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r10 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca)

3m3.549472604s ago: executing program 33 (id=1171):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095", @ANYRESDEC=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000a40)=@hci={0x1f, 0x4, 0x2}, 0x80, 0x0}, 0x4040042)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r10 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca)

2.891639935s ago: executing program 4 (id=2670):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x79660d333faadf9a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000900000044000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001400"/21], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c0000000c0601040000000000e10000000000030900020073797a32000000000900020073797a320000000005000100070000000900020073797a3200000000050001000700000005000100070000000900020073797a3000000000c2780457cf833045896441a081e7968346bec0089cb5291127ae94218f52f35242e8b40043d1cc8519a6a8a4e1c2907df6c184143db9ad57bbdc5f22e3af04908f00000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4cc, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffffc, 0xb, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x80000001, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x1f, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x95a, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x5, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x101, 0xa, 0x7, 0x1, 0x8, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x2, 0x6, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000004, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9) (async)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x28) (async, rerun: 64)
setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x10) (async, rerun: 64)
socket$kcm(0x2, 0x5, 0x84)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32)
r12 = socket$kcm(0x2, 0x3, 0x106) (rerun: 32)
ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x890d, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x78, &(0x7f0000000040)=r11, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="348b0d151f8218e3c73697e48864", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r13=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)

2.81908424s ago: executing program 4 (id=2672):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x282c01, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=@base={0x1b, 0x0, 0xfffffffe, 0x2000, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x474b65b1fa94c962)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000ec0)=r2, 0x4)
sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000f00)="709b1edc2051e5ac8c09051c1c0c6fc51376aa7e1cd252a2", 0x18}], 0x2}, 0x800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xd, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bc0, 0xffff8001, {0x6, 0x32, 0x0, 0x3, 0x0, 0xfa04, 0x0, @in=@multicast1, @in6=@private1}}]}, 0x78}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
close(r0)

1.941079235s ago: executing program 4 (id=2680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150090", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.938754145s ago: executing program 4 (id=2682):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x80fe)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x600}, 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r4, 0x0, 0x80000fffe}, 0x38)

1.876397909s ago: executing program 2 (id=2683):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x22, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), 0x0}, 0x20)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000041500010000000000000000000a0000000400000004000280"], 0x1c}}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@newtclass={0x20c, 0x28, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xb, 0xfff1}, {0x8, 0xfff2}, {0x4, 0xe}}, [@c_atm={{0x8}, {0x84, 0x2, [@TCA_ATM_HDR={0x3a, 0x3, "620d450e1d8c9daad9fb815de3328ad0bd698b8b260f5e9b51a730547235410d6f59ec458b864f95d0a93d87b4300917ac30adf29100"}, @TCA_ATM_HDR={0x42, 0x3, "03096fcb439812de6f280f42e6b2c8dea86276531451ff20bf9241590a6b569c01b33000e312ad378941116fd4725660d49d28f3831329264e14643317f1"}]}}, @c_atm={{0x8}, {0xb4, 0x2, [@TCA_ATM_HDR={0x19, 0x3, "a5ab5268b48310ecafd69d0bfda00329f785c0e174"}, @TCA_ATM_HDR={0x23, 0x3, "f2389c32a61e60793a054b40a9d850ec5c874c74e1310e772871a7cd086982"}, @TCA_ATM_HDR={0x36, 0x3, "e8ad3537d35792646e4e84972994ca1cd20f54b89b86d6ce3fcfd78c9bc4ce3c3202e6cd06ab48fc7589e8ffabdd5a9540a8"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff9, 0xfff3}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8, 0x1, r7}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe9}}]}}, @c_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x25, 0x3, 0x81, 0x6, 0x7, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x4, 0xb, 0x4, 0xfff, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0xd, 0x2, 0x5, 0xb, 0x6, 0xc0000000, 0x7, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0x4}, 0x7, 0x4}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xff}}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x10, 0x4, 0x10, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r11=>0xffffffffffffffff})
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x2, 0x2, 0x73)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100"/16], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94)

1.875296834s ago: executing program 3 (id=2684):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="320000002410000000000000", @ANYRES32, @ANYRES64=0x0], 0x20)
r0 = socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}}}}], 0x58}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, &(0x7f0000000200)="c422dd1b44c88937896bfd", 0x0, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xda1e}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000037faf7576f0e362d6482000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e0000000400000008000000634f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00 '], 0x48)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x3}, 0x100503, 0x3, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x52430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000080000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d4448d49850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f0892f", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.599573305s ago: executing program 3 (id=2685):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x12800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x0, 0x7, 0x6, 0x7, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, 0x0}, 0x94)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r1})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

1.512742983s ago: executing program 4 (id=2686):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = gettid()
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xfc, 0x2, 0x9, 0x0, 0x0, 0x5, 0x3480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x60)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20900, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x30000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="01549f004ad245584e43652b40b5cf457f14fe6a21503ea935c7df9fc9a3917fa7c85f425875f00a774212741de8e0ab6c2956c48afb97b66115d0aace908b3f7db13c7bbae23911d2728130aa7e26c0fcd7c4fede0e16aab5a6ff9ce600b5bbe585323b2654372dd3e1aeb06705c47cf1959e935ed35e4bd6af1247cf2736df89571a5794ed31243457a9827c4356e4054e36e6ac6076e564fc064a", 0x9c}, {&(0x7f0000000540)="72848eb6ae0daf4e8083355c3912f2e2f5f29603633218cedce6755bf1ebf4d5e2450af078c52e57cef41dacae93f20921d531164e0d166b1e7428ca2190a3edccf765e0ae73d5a5f355cb242b295309e4c45273a828dbfa00a092058017eacdbe3f50e6e566c63ca2e2bd05eddf90d887b06525238a5b6dab9c553ff5e2daa26f35a94d19c6b8b33d4df87ce36c27f2e778bcb21376609c42f885fcf8aad8a375c4c4e583f0e597e31003e9fb6c6fad49bfc9fa53d1ac916c849344bbf516ac6a141a154c5c31b6167dd48d82e31f6afc1d8a48b684c12fed7cc347e5e8948dfdc8", 0xe2}, {&(0x7f0000000440)="19c7f6fcee5b11fc573cbee963821264cc0fb0f022d3ee6027ac5a75776666cda84a7a7da8cca7c01d86ea3f2ae149a1379614aa681f45dc9d4446c213c30e8717b1cc4f546baef9ab4842db030a178d539b26bbdeeaef4f", 0x58}, {&(0x7f0000000640)="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", 0xfa}], 0x4, &(0x7f0000000740)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0xc3f, 0x8, 0x2, 0xf66}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x1, 0x3, 0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x0, 0x6, 0x7fffffff}}, @init={0x18, 0x84, 0x0, {0x25, 0x4, 0x6, 0x2}}], 0xa8}, 0x24040001)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000e00))
r4 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
close(r5)
syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5)

1.422142527s ago: executing program 3 (id=2687):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001140)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)

1.351386945s ago: executing program 3 (id=2688):
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xffc0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x48}}, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, 0x1405, 0x200, 0x70bd25, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10040810}, 0x20000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x180, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x800}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1000}, @IPSET_ATTR_SKBPRIO={0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5719}, @IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000054}, 0x44024)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000004}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffbffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x3, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x80000003, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0xe, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x2f27}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x20000006, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x3, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x7, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0c, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0xa, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x1}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x3e, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1002, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x7}, {0x4a, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xffffffff, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0x1, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000100000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006"], 0xac}}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000f1409"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40010)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000e00000020000000000000000000000007f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ac1e0101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffff"], 0xf8}}, 0x20000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
r9 = socket$kcm(0xa, 0x0, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4}, 0x48)
setsockopt$sock_attach_bpf(r9, 0x88, 0x68, &(0x7f00000009c0), 0x4)

1.260710591s ago: executing program 4 (id=2689):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x15100, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x40)
socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700))
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x15, 0x5, 0x0)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x114, 0x8, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872460dba78b)
r7 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000093000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000100000950000000000a14a8709000000000000bf91000000000000b7020000020000008500000085000000b7000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c004)

1.001872658s ago: executing program 2 (id=2690):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0xfffffffffffffff9}, 0x18240, 0x2, 0xfffffffe, 0x0, 0x0, 0x3ff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef3}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000b00200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
close(r4)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x11e, 0x1e, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1a19ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300b29800000085000000190000009574d03c72000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffd5)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001200010028bd7000fbdbdf257368613338342d67656e6572696300000000000000000000000000000000000000000000000000000000004d700000000000000000000000000000000000000000000000000000edffffff0000000000000000000000000000000000000000000800"/212], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe71}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r8], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38)
r10 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000240)=@x25, 0x80, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000040)="c9357543258f5ba23d02c7fb784ee34989ef5129f8631e11f6ef", 0x1a}, {&(0x7f0000000580)="cbe650408150f939d035b666e68038d022c965977327ccae4376bc96610c7f0e2db618616d9906a50fe139cc2174cbf6a86bb50b2cab81d66013c9b253476e2a4c8f9cb991ee383b04ab5913a55a67ab6ebdbc4bd4f88090d53e3c62f6907ac15b082e22df0b0baf7c9421cbc79896801f85d13ba847e837528df6be1c12434ed276ed379b634d7bdf878d6d1196416093e8b5855bbedf8ed9b363", 0x9b}, {&(0x7f0000000640)="33698e456fac7b758e1a4aa4338d96c94dfb26ce01e2353d22fdd30d8a46339dd523b4929bf3f0a6466069ade80769a4ba7812ff53ca402612a383cd1cb6ff7fd3514e9c77e424e871d77e108da0a3e82ae4763bd923aef9e4c1b1ce418aa7f18323d14267787bdb4052bb2a7f3c4780a6149d2557d04462591d7e6fbc09bccff5bd2da2a1362c098d8a3689e744", 0x8e}, {&(0x7f0000000700)="8f8fff90c67560f4c6e63b0f2cb8aa29d60a8bc79fc9934e0c80b483b57b7ec5c9f590100b6a7ea137882cdc96d7487c6649677b5fa28dff8355ae7cb2ee39e4a40896b97f88e9c2aabc8b52f505e007650c1d9f3c33d51c1db1eadd9a31a4326a84ce12a6c65322eb0b1a4ee0f4a022943c37d985851a727f478b06030d2ea8fdf0763369fb3e6aa12ccfd8285497a5fa4f2c67ebb52bd76eae6bcb28bb3828416eebf631f15091cf6414c17b889b5e523971755a83d6e64939293c15", 0xbd}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x1080}, 0x4c185)

825.075341ms ago: executing program 2 (id=2691):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000900000007000000040000000c800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="40000000ff0000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0xb}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3}, 0xc)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18080f0000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=r7, @ANYBLOB="0300"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="03000000040000000300"/27], 0x50)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0xffffffffffffffcc, 0x52, 0x1, 0x4, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x0, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x8, 0x0, 0x93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
socket$kcm(0x11, 0x200000000000002, 0x300)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r11 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x2e, &(0x7f0000000640)=r10, 0x4)
recvmsg$kcm(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
r12 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1400000044000b02d25a806f8c6394f90424fc20", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)

450.597439ms ago: executing program 3 (id=2692):
r0 = socket$kcm(0x11, 0xa, 0x300)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000080000000b00000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000000000000000000000000000000000000000000000056368e"], 0x50)
close(0x3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000000000c0010000002fc4366831a92699f17872b8bf981d0d8fd52ed2b82955b5019686fb08b9aba0a5fa51fbedb1aca83e4bc5b34d27ec138635f7d3617617cd2b64", @ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000005681cac73fcb22a1262e5ae782cb7d2af0c00819cbb83f8cccbf16a9753965c84542cfe6afd4800a9026718acaa977635371d31b64613d79fbade5d574e88f9116ad4718f18ed67101a295a952593e8cb22aa"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='scsi_dispatch_cmd_error\x00', r5}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/21], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r7 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(r7, 0x0, 0x80)
r8 = socket$kcm(0x10, 0x3, 0x0)
recvmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x142)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000004643d4fa5b954d0b70d2b2577217bb7eb5e10cadc7cac9abce2ab8913236de87004363753d99b8feafd262c35bd6310c42d7f969a02a5f71fb9c2167a73336e74a17b37aaff987d73ca228bff37fc293e79aa67a39e4700efd8edb18169897c8532c96adf093c7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r11}, 0x10)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r12, 0x0, &(0x7f0000001700)=""/53}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
socket$kcm(0xa, 0x2, 0x88)

450.155241ms ago: executing program 2 (id=2693):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="ec020000100013070000000000000000e0000001000000000000000000000000ac1e00928f6e5ac77e3b3a000000000000001100fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2ec}}, 0x0)

448.940516ms ago: executing program 2 (id=2694):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00003a00db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa"], 0xfdef)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x48, 0x140d, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20010084}, 0x4004000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x36, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000900000007000000040000000c800000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="40000000ff0000000300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0xb}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x18, 0x0, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3}, 0xc)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18080f0000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES64=0x0, @ANYBLOB="0300"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="03000000040000000300"/27], 0x50)
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x4, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x0, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
socket$kcm(0x11, 0x200000000000002, 0x300)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r11 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x2e, &(0x7f0000000640)=r10, 0x4)
recvmsg$kcm(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0)
r12 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x47}, 0x80, 0x0}, 0x240428f8)
write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[], 0x12)

6.95829ms ago: executing program 3 (id=2695):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000004000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000005"], 0xfc}}, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) (async)
sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="fe86567b0f9be5df0da79234c0709ba5d59987b9f17a1caa3f8418585fd947148d24337db1c1c0811059a242b7dfc1d5c708e61496ed94c2c9a702a695", 0x3d}, {&(0x7f00000000c0)="e11e6392b8d78a886d878d4f416c134b241672c17230f8432f6cf92b85289fb494b090b9356c0f70d0d38d261499cdc1211453ec000fee7256d26b182532715bc00420ee9c8764b7d4bf049ed0102cf151d49a9c063405a0b985ff14b44a2308420878c786b1f1f9093ac6f5d4c73997bca8395609dde1abea01f86357e980eee3234370690f2defad7e2485fffe055a5b8c5c41b07729d615ab24371e81", 0x9e}, {&(0x7f0000000180)="68284f51c201cb054e8261d6cc91e939cf76b0e283ea05565f2f86624350b8c1d2541fd9ce22dad9325192ce281b8d47f50c6ddcc6877601940f3b73dd766ec1f3025607727e4a5391a9f5a305c0e48bf1da22cab8c2fadd38570cd1864603a5c6605d52356c1fd76809737971eeb7165ddc7c49aaff0e9f3bbea39c706bc17dc50fb4c340981826001eb8982d67fddb3b35e9a945d57fd273ef41d519adc9cf11fc42b5603cc39fc1a4217914c20feb56c737a88b6bef3c56796b6ad9b6791184476f30339069b89dbd2e8534bb7d7f614b253b7e52e3e1d360c5878f8f7318447d0a2edb4070fe6b997c63cfcca94ed0019a84", 0xf4}, {&(0x7f0000000280)="9bcbc5c46d0e85a730309d377a9fc42524936177ab784f6412ffcaa91dd252d5c607a875e71c2c15acd5e5d0f52ca2ffc6923755bf06c0f9062d08f4d37a7f511056df37eea39a543ec5db5e93447e8d455334d3452ab293b8cf841d122c11791bd8733650ec403f86eb396a63d909b6121cda4713cc9dadf920eda9346047f39072435abc0caeed3d6dd9eb182f890db631707e143716415b057e012fe0ead89c3e587d92df41f4220eb8e7ab6ac6e6d875b5a72197ee75d2b62692304a22056ba268399791b2a32d4ee97f0e3314d976caa5bbd87d25da8f", 0xd9}, {&(0x7f0000000380)="9f2876c0d6b2c8425725e9502d0f1b80924bef23b76ef9745e5551b0886b307e191d4d97426984beaed52a8cad6ebf9e21e9351d999f6995d49900d77bcbcda36c7f407eaa24a716c2cf80916c8ac7505a0ecc5c0f8dfd7d3c20b4e9bde52beeadd7d88c01bff68e3f40f4a31d4a9e720300692dcf34dcdf36f4fdf6e09b068cd6bc1a93386a8a53547186a6fce11fd5df14f717c79d394a02e1d67a0ffc9b1bed4ddf601641a23d8a64855e7f4e40c777563b2025e1051283d7", 0xba}], 0x5, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @txtime={{0x18}}], 0x48}, 0x85)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)

0s ago: executing program 2 (id=2696):
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000080ffffffffffff0000000000000a0000041c0008800c00078008000940000000070c00078008001c40000000070500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)

kernel console output (not intermixed with test programs):

syz.0.137': attribute type 29 has an invalid length.
[   82.887842][ T6413] netlink: 'syz.0.137': attribute type 29 has an invalid length.
[   82.936538][ T6413] netlink: 'syz.0.137': attribute type 29 has an invalid length.
[   83.397948][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.402924][ T6439] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.144'.
[   83.686106][ T6453] netlink: 152 bytes leftover after parsing attributes in process `syz.0.149'.
[   83.688233][ T6457] netlink: 'syz.2.150': attribute type 21 has an invalid length.
[   83.731101][ T6457] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   83.803469][ T6457] netlink: 55039 bytes leftover after parsing attributes in process `syz.2.150'.
[   84.383343][ T6478] netlink: 'syz.2.155': attribute type 10 has an invalid length.
[   84.573770][ T6478] team0 (unregistering): Port device team_slave_0 removed
[   84.580925][ T6478] team0 (unregistering): Port device team_slave_1 removed
[   84.594040][ T6477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.156'.
[   84.733990][ T6485] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.158'.
[   84.820248][ T6487] TCP: TCP_TX_DELAY enabled
[   85.584362][ T6519] netlink: 180 bytes leftover after parsing attributes in process `syz.0.169'.
[   86.111493][ T6529] netlink: 7 bytes leftover after parsing attributes in process `syz.0.173'.
[   86.320660][ T6552] : entered promiscuous mode
[   86.437927][ T6558] openvswitch: netlink: Missing key (keys=40, expected=80)
[   86.478373][  T975] cfg80211: failed to load regulatory.db
[   88.568003][ T6600] __nla_validate_parse: 1 callbacks suppressed
[   88.568019][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'.
[   88.657092][ T6600] syzkaller1: tun_chr_ioctl cmd 1074025677
[   88.663064][ T6600] syzkaller1: linktype set to 776
[   88.748054][ T6601] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   88.882678][ T6601] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   89.792668][ T6626] netlink: 188 bytes leftover after parsing attributes in process `syz.2.196'.
[   90.733087][ T6635] syzkaller0: entered promiscuous mode
[   90.734979][ T6635] syzkaller0: entered allmulticast mode
[   92.415508][ T6664] netlink: 56 bytes leftover after parsing attributes in process `syz.0.204'.
[   92.478644][ T6674] netlink: 400 bytes leftover after parsing attributes in process `syz.1.210'.
[   92.595394][ T6684] warning: `syz.0.213' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.338191][ T6720] netlink: 'syz.2.222': attribute type 2 has an invalid length.
[   93.347713][ T6720] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   93.351808][ T6720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'.
[   93.382262][ T6719] netlink: 'syz.1.223': attribute type 39 has an invalid length.
[   93.588596][ T6719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.604967][ T6719] openvswitch: netlink: Duplicate or invalid key (type 0).
[   93.607371][ T6719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.947646][ T6739] netlink: 'syz.1.228': attribute type 21 has an invalid length.
[   94.006874][ T6739] netlink: 72 bytes leftover after parsing attributes in process `syz.1.228'.
[   94.044767][ T6739] netlink: 212180 bytes leftover after parsing attributes in process `syz.1.228'.
[   94.048779][ T6739] netlink: zone id is out of range
[   94.086659][ T6739] netlink: zone id is out of range
[   94.088913][ T6739] netlink: zone id is out of range
[   94.091382][ T6739] netlink: zone id is out of range
[   94.094209][ T6739] netlink: zone id is out of range
[   94.096313][ T6739] netlink: zone id is out of range
[   94.098357][ T6739] netlink: zone id is out of range
[   94.462757][ T6756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'.
[   94.466424][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[   95.087989][ T6789] netlink: 10 bytes leftover after parsing attributes in process `syz.0.243'.
[   95.567496][ T6804] netlink: 516 bytes leftover after parsing attributes in process `syz.2.248'.
[   96.458850][ T6829] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.254'.
[   96.481707][ T6830] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.254'.
[   96.484805][ T6835] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.254'.
[   96.777660][ T6840] netlink: 'syz.2.257': attribute type 1 has an invalid length.
[   96.797443][ T6840] netlink: 'syz.2.257': attribute type 4 has an invalid length.
[   97.312241][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'.
[   98.104718][ T6881] netlink: 'syz.0.266': attribute type 10 has an invalid length.
[   98.115508][ T6881] geneve0: entered promiscuous mode
[   98.137689][ T6881] bond0: (slave geneve0): Enslaving as an active interface with an up link
[   98.224213][ T6886] netlink: 'syz.0.268': attribute type 46 has an invalid length.
[   98.666464][ T6917] netlink: 'syz.0.278': attribute type 25 has an invalid length.
[   98.675527][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.680504][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.685263][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.688393][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.046147][ T6921] netlink: 'syz.1.279': attribute type 10 has an invalid length.
[   99.056067][ T6921] __nla_validate_parse: 1 callbacks suppressed
[   99.056091][ T6921] netlink: 55 bytes leftover after parsing attributes in process `syz.1.279'.
[   99.515812][ T6936] netlink: 92 bytes leftover after parsing attributes in process `syz.1.284'.
[   99.541981][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   99.560963][ T6938] netlink: 68 bytes leftover after parsing attributes in process `syz.2.285'.
[   99.739564][ T6945] net_ratelimit: 8 callbacks suppressed
[   99.739671][ T6945] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  100.129105][ T6978] netlink: 'syz.1.293': attribute type 46 has an invalid length.
[  100.253141][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'.
[  100.987559][ T7003] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.300'.
[  100.994376][ T7002] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.300'.
[  100.998964][ T7003] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.300'.
[  102.111374][ T7032] netlink: 'syz.2.309': attribute type 1 has an invalid length.
[  102.212153][ T7042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.311'.
[  102.894645][ T7076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.319'.
[  103.222005][ T7093] xt_time: invalid argument - start or stop time greater than 23:59:59
[  103.318635][ T7102] netlink: 'syz.0.326': attribute type 10 has an invalid length.
[  103.333233][ T7100] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[  103.337713][ T7100] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[  103.343939][ T7100] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[  103.374946][ T7100] netlink: 'syz.1.325': attribute type 29 has an invalid length.
[  103.463866][ T7104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.226008][ T7111] netlink: 'syz.2.329': attribute type 16 has an invalid length.
[  105.229207][ T7112] netlink: 'syz.2.329': attribute type 16 has an invalid length.
[  105.230949][ T7111] __nla_validate_parse: 1 callbacks suppressed
[  105.230964][ T7111] netlink: 152 bytes leftover after parsing attributes in process `syz.2.329'.
[  105.232578][ T7112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.329'.
[  105.404020][ T7122] netlink: 252 bytes leftover after parsing attributes in process `syz.1.330'.
[  105.408540][ T7117] netlink: 252 bytes leftover after parsing attributes in process `syz.1.330'.
[  105.965060][ T7138] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  105.969190][ T7138] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.078042][ T7142] netlink: 'syz.1.337': attribute type 27 has an invalid length.
[  106.082710][ T7142] netlink: 164 bytes leftover after parsing attributes in process `syz.1.337'.
[  106.706730][ T7158] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  107.627900][ T7187] netlink: 260 bytes leftover after parsing attributes in process `syz.0.349'.
[  107.634324][ T7187] netlink: 'syz.0.349': attribute type 1 has an invalid length.
[  108.427297][ T7201] netlink: zone id is out of range
[  108.435526][ T7201] netlink: zone id is out of range
[  108.437678][ T7201] netlink: zone id is out of range
[  108.471301][ T7201] netlink: set zone limit has 4 unknown bytes
[  108.477661][ T7201] netlink: del zone limit has 4 unknown bytes
[  108.852572][ T7224] openvswitch: netlink: Unknown key attributes 1
[  109.489092][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'.
[  109.492641][ T7242] netlink: 6 bytes leftover after parsing attributes in process `syz.1.367'.
[  111.006741][ T7239] netlink: 'syz.1.367': attribute type 14 has an invalid length.
[  111.513178][ T7258] netlink: 'syz.1.372': attribute type 3 has an invalid length.
[  111.524264][ T7258] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.372'.
[  115.042053][ T7342] netlink: 'syz.1.398': attribute type 10 has an invalid length.
[  115.045280][ T7342] netlink: 55 bytes leftover after parsing attributes in process `syz.1.398'.
[  115.122636][ T7339] delete_channel: no stack
[  115.496070][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'.
[  115.709910][ T7368] netlink: 'syz.1.405': attribute type 21 has an invalid length.
[  115.713249][ T7368] netlink: 'syz.1.405': attribute type 1 has an invalid length.
[  115.716310][ T7368] netlink: 100 bytes leftover after parsing attributes in process `syz.1.405'.
[  115.723524][ T7367] delete_channel: no stack
[  115.726220][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'.
[  116.109620][ T7385] netlink: 'syz.2.411': attribute type 39 has an invalid length.
[  119.459505][ T7422] raw_sendmsg: syz.2.419 forgot to set AF_INET. Fix it!
[  119.935631][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'.
[  119.939143][ T7443] netlink: 130016 bytes leftover after parsing attributes in process `syz.0.425'.
[  119.943660][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'.
[  120.018849][ T7443] netlink: 300 bytes leftover after parsing attributes in process `syz.0.425'.
[  120.635126][ T7475] netlink: 'syz.2.433': attribute type 10 has an invalid length.
[  120.642918][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.646937][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.683123][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.686038][ T7475] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.689198][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.692453][ T7475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.718175][ T7475] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  120.973390][ T7494] netlink: 'syz.2.437': attribute type 6 has an invalid length.
[  121.437697][ T7504] netlink: 328 bytes leftover after parsing attributes in process `syz.0.441'.
[  122.411699][ T7504] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  124.810556][ T7530] syzkaller1: tun_chr_ioctl cmd 1074025677
[  124.816294][ T7530] syzkaller1: linktype set to 780
[  124.823802][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.0.445'.
[  125.004250][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'.
[  125.149498][ T7572] netlink: 'syz.2.460': attribute type 13 has an invalid length.
[  125.156710][ T7572] netlink: 164 bytes leftover after parsing attributes in process `syz.2.460'.
[  125.160674][ T7572] syz_tun: refused to change device tx_queue_len
[  125.248846][ T7568] netlink: 'syz.1.458': attribute type 10 has an invalid length.
[  125.343649][ T7568] team0: Cannot enslave team device to itself
[  125.493459][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'.
[  125.599176][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'.
[  125.664981][ T7595] netlink: 'syz.1.468': attribute type 1 has an invalid length.
[  125.867884][ T7607] netlink: 104 bytes leftover after parsing attributes in process `syz.0.472'.
[  125.957719][ T7618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.909172][ T7637] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.477'.
[  127.016882][ T7638] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  127.098590][ T7638] syzkaller0: entered promiscuous mode
[  127.100505][ T7638] syzkaller0: entered allmulticast mode
[  127.165668][ T7638] =======================================================
[  127.165668][ T7638] WARNING: The mand mount option has been deprecated and
[  127.165668][ T7638]          and is ignored by this kernel. Remove the mand
[  127.165668][ T7638]          option from the mount to silence this warning.
[  127.165668][ T7638] =======================================================
[  127.257525][ T7642] netlink: zone id is out of range
[  127.268737][ T7642] netlink: zone id is out of range
[  127.271300][ T7642] netlink: zone id is out of range
[  127.303829][ T7643] netlink: del zone limit has 4 unknown bytes
[  127.404862][ T7642] netlink: set zone limit has 4 unknown bytes
[  127.800183][ T7665] netlink: 763 bytes leftover after parsing attributes in process `syz.2.486'.
[  129.319526][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'.
[  129.621677][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'.
[  130.253352][ T7712] netlink: del zone limit has 4 unknown bytes
[  130.256736][ T7712] netlink: del zone limit has 4 unknown bytes
[  130.260096][ T7712] netlink: del zone limit has 4 unknown bytes
[  130.501878][ T7721] netlink: 'syz.2.500': attribute type 32 has an invalid length.
[  131.886933][ T7740] netlink: 'syz.0.506': attribute type 10 has an invalid length.
[  131.915822][ T7740] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  132.463824][ T7762] netlink: 'syz.0.511': attribute type 21 has an invalid length.
[  132.554490][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.556706][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.856207][ T7771] netlink: 'syz.2.513': attribute type 5 has an invalid length.
[  133.198797][ T7779] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[  133.220990][ T7779] netlink: 'syz.2.516': attribute type 2 has an invalid length.
[  133.234755][ T7779] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.516'.
[  133.310127][ T7779] netlink: 104 bytes leftover after parsing attributes in process `syz.2.516'.
[  135.098892][ T7812] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.525'.
[  135.157732][ T7813] siw: device registration error -23
[  135.375637][ T7818] netlink: 67 bytes leftover after parsing attributes in process `syz.0.525'.
[  136.170011][ T7843] netlink: 'syz.2.528': attribute type 10 has an invalid length.
[  137.584459][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'.
[  137.592197][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'.
[  137.610365][ T7887] netlink: 'syz.0.538': attribute type 4 has an invalid length.
[  137.624578][ T7887] netlink: 152 bytes leftover after parsing attributes in process `syz.0.538'.
[  137.647114][ T7887] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  137.818190][ T7891] netlink: 'syz.2.539': attribute type 10 has an invalid length.
[  137.881321][ T7891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.539'.
[  138.569229][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'.
[  138.593034][ T7903] openvswitch: netlink: Flow actions attr not present in new flow.
[  138.878417][ T7907] IPv6: Can't replace route, no match found
[  140.235897][ T7927] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[  140.378643][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'.
[  140.699410][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'.
[  140.776290][ T7942] netlink: zone id is out of range
[  140.778253][ T7942] netlink: zone id is out of range
[  140.787060][ T7942] netlink: zone id is out of range
[  140.789118][ T7942] netlink: zone id is out of range
[  140.809412][ T7942] netlink: set zone limit has 4 unknown bytes
[  140.816863][ T7942] netlink: del zone limit has 4 unknown bytes
[  142.165180][ T7948] netlink: 'syz.0.553': attribute type 10 has an invalid length.
[  144.371760][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  144.376889][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  144.380582][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  144.386249][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  144.391599][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  144.682378][ T7998] chnl_net:caif_netlink_parms(): no params data found
[  144.902125][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.909628][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.913415][ T7998] bridge_slave_0: entered allmulticast mode
[  144.921428][ T7998] bridge_slave_0: entered promiscuous mode
[  144.928470][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.937596][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.940374][ T7998] bridge_slave_1: entered allmulticast mode
[  144.949268][ T7998] bridge_slave_1: entered promiscuous mode
[  144.980602][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'.
[  145.016375][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.023074][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'.
[  145.135011][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.179494][ T8016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.571'.
[  145.246881][ T7998] team0: Port device team_slave_0 added
[  145.293164][ T8021] netlink: 104 bytes leftover after parsing attributes in process `syz.2.572'.
[  145.296829][ T8019] netlink: 104 bytes leftover after parsing attributes in process `syz.2.572'.
[  145.312584][ T7998] team0: Port device team_slave_1 added
[  145.446132][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.448927][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.462710][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.476485][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.479250][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.570114][ T8031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.576'.
[  145.582469][ T8032] netlink: 48 bytes leftover after parsing attributes in process `syz.2.576'.
[  145.593194][ T8031] netlink: 'syz.2.576': attribute type 13 has an invalid length.
[  145.610628][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.782296][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.785551][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.895908][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.910720][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.092893][ T5872] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.103864][ T5872] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.107014][ T5872] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.109784][ T5872] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.147646][ T7998] hsr_slave_0: entered promiscuous mode
[  146.153059][ T7998] hsr_slave_1: entered promiscuous mode
[  146.156288][ T7998] debugfs: 'hsr0' already exists in 'hsr'
[  146.158501][ T7998] Cannot create hsr debugfs directory
[  146.471664][   T55] Bluetooth: hci3: command tx timeout
[  146.515548][ T7998] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  146.525560][ T7998] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  146.531984][ T7998] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  146.546392][ T7998] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  146.774223][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.805639][ T7998] 8021q: adding VLAN 0 to HW filter on device team0
[  146.815672][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.817891][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.842455][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.845385][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.018212][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.073522][ T7998] veth0_vlan: entered promiscuous mode
[  147.082814][ T7998] veth1_vlan: entered promiscuous mode
[  147.110031][ T7998] veth0_macvtap: entered promiscuous mode
[  147.115327][ T7998] veth1_macvtap: entered promiscuous mode
[  147.128940][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.138368][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.148109][ T5872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.159764][ T5872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.166381][ T5872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.169830][ T5872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.236800][ T6274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.242200][ T6274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.263753][ T6274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.267035][ T6274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.514481][ T8099] netlink: 'syz.3.591': attribute type 10 has an invalid length.
[  147.518403][ T8099] netlink: 'syz.3.591': attribute type 1 has an invalid length.
[  147.523312][ T8099] bridge0: port 1(bridge_slave_0) entered learning state
[  147.885153][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.594'.
[  148.561400][   T55] Bluetooth: hci3: command tx timeout
[  149.065041][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'.
[  149.066737][ T8140] netlink: 168 bytes leftover after parsing attributes in process `syz.2.600'.
[  149.207996][ T8157] netlink: 'syz.2.604': attribute type 2 has an invalid length.
[  149.212281][ T8157] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  149.215408][ T8157] nbd: couldn't find a device at index 16
[  150.631047][   T55] Bluetooth: hci3: command tx timeout
[  152.711058][   T55] Bluetooth: hci3: command tx timeout
[  153.536326][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1495302079 wd_nsec: 1495302181
[  162.537789][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.827971][ T8191] __nla_validate_parse: 1 callbacks suppressed
[  163.827987][ T8191] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.611'.
[  165.754283][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'.
[  165.757273][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'.
[  165.765224][ T8244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.628'.
[  166.857625][ T8272] netlink: 180 bytes leftover after parsing attributes in process `syz.2.636'.
[  166.910435][ T8278] netlink: 'syz.3.634': attribute type 21 has an invalid length.
[  167.560052][ T8289] netlink: 'syz.0.639': attribute type 10 has an invalid length.
[  167.581850][ T8289] team0: Cannot enslave team device to itself
[  168.106628][ T8307] netlink: 'syz.0.645': attribute type 10 has an invalid length.
[  168.109373][ T8307] lo: entered promiscuous mode
[  168.122664][ T8307] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  168.502235][ T8317] netlink: 'syz.0.647': attribute type 3 has an invalid length.
[  168.507269][ T8317] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[  168.947583][ T8335] netlink: 'syz.3.651': attribute type 10 has an invalid length.
[  169.034525][ T8335] netlink: 55 bytes leftover after parsing attributes in process `syz.3.651'.
[  170.157935][ T8350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'.
[  170.597845][ T8372] netlink: 204 bytes leftover after parsing attributes in process `syz.3.659'.
[  170.604772][ T8372] netlink: 324 bytes leftover after parsing attributes in process `syz.3.659'.
[  170.633543][ T8372] netlink: 'syz.3.659': attribute type 1 has an invalid length.
[  171.587233][ T8403] netlink: 'syz.3.667': attribute type 10 has an invalid length.
[  171.593060][ T8403] geneve0: entered promiscuous mode
[  171.599211][ T8403] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  171.927520][ T8417] netlink: del zone limit has 4 unknown bytes
[  172.323702][ T8429] netlink: 'syz.2.673': attribute type 10 has an invalid length.
[  172.326878][ T8429] lo: entered promiscuous mode
[  172.329144][ T8429] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  172.652316][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'.
[  172.666289][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'.
[  173.480447][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'.
[  173.569131][ T8477] netlink: 'syz.3.687': attribute type 10 has an invalid length.
[  173.573105][ T8477] netlink: 55 bytes leftover after parsing attributes in process `syz.3.687'.
[  174.257029][ T8504] netlink: 'syz.2.693': attribute type 2 has an invalid length.
[  174.435463][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.437979][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.442271][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.445634][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.604727][ T8546] netlink: 'syz.0.703': attribute type 3 has an invalid length.
[  175.611620][ T8546] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.703'.
[  175.991354][ T8536] delete_channel: no stack
[  176.098751][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.710'.
[  176.176830][ T8574] netlink: 'syz.3.711': attribute type 11 has an invalid length.
[  176.224300][ T8576] sit0: left promiscuous mode
[  176.227273][ T8576] sit0: entered promiscuous mode
[  176.329805][ T8584] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.716'.
[  176.334821][ T8584] bridge: RTM_NEWNEIGH with invalid state 0x1
[  177.476484][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  177.481480][ T8627] netlink: 'syz.3.726': attribute type 10 has an invalid length.
[  177.483987][ T8627] netlink: 55 bytes leftover after parsing attributes in process `syz.3.726'.
[  177.755535][ T8640] netlink: 'syz.3.728': attribute type 10 has an invalid length.
[  177.758126][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.728'.
[  177.775178][ T8640] netlink: 'syz.3.728': attribute type 10 has an invalid length.
[  182.165292][ T8683] netlink: 'syz.3.739': attribute type 12 has an invalid length.
[  182.168099][ T8683] netlink: 120 bytes leftover after parsing attributes in process `syz.3.739'.
[  182.183931][ T8683] lo speed is unknown, defaulting to 1000
[  182.186313][ T8683] lo speed is unknown, defaulting to 1000
[  182.193246][ T8683] lo speed is unknown, defaulting to 1000
[  182.282230][ T8683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  182.414633][ T8683] lo speed is unknown, defaulting to 1000
[  182.451206][ T8683] lo speed is unknown, defaulting to 1000
[  182.474466][ T8650] Bluetooth: hci2: command 0x0406 tx timeout
[  182.477375][ T8650] Bluetooth: hci1: command 0x0406 tx timeout
[  182.487307][ T8683] lo speed is unknown, defaulting to 1000
[  182.499926][ T8683] lo speed is unknown, defaulting to 1000
[  187.186588][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'.
[  187.190718][ T8723] unsupported nlmsg_type 40
[  187.719169][ T8745] lo speed is unknown, defaulting to 1000
[  188.378153][ T8763] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.757'.
[  190.647485][ T8797] lo speed is unknown, defaulting to 1000
[  190.996213][ T8803] lo speed is unknown, defaulting to 1000
[  191.257653][ T8824] netlink: 'syz.3.774': attribute type 5 has an invalid length.
[  191.394424][ T8830] netlink: 'syz.0.775': attribute type 2 has an invalid length.
[  191.396954][ T8830] netlink: 'syz.0.775': attribute type 1 has an invalid length.
[  191.399324][ T8830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.775'.
[  191.404716][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'.
[  191.595824][ T8843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.618613][ T8843] netlink: 'syz.0.779': attribute type 11 has an invalid length.
[  191.622114][ T8843] netlink: 168 bytes leftover after parsing attributes in process `syz.0.779'.
[  192.008333][ T8852] netlink: 'syz.0.780': attribute type 4 has an invalid length.
[  192.167295][ T8858] lo speed is unknown, defaulting to 1000
[  192.443383][ T8866] netlink: 'syz.3.785': attribute type 21 has an invalid length.
[  192.448816][ T8866] netlink: 'syz.3.785': attribute type 1 has an invalid length.
[  192.459041][ T8866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.785'.
[  192.667770][ T8856] lo speed is unknown, defaulting to 1000
[  193.140681][ T8874] siw: device registration error -23
[  193.289762][ T8873] lo speed is unknown, defaulting to 1000
[  193.306706][ T8877] netlink: 'syz.2.789': attribute type 10 has an invalid length.
[  193.320674][ T8877] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  193.446252][ T8882] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.790'.
[  193.639964][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'.
[  193.996982][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.999483][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.063967][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.793'.
[  194.145134][ T8893] netlink: 84 bytes leftover after parsing attributes in process `syz.0.793'.
[  195.297648][ T8939] lo speed is unknown, defaulting to 1000
[  196.116523][ T8971] lo speed is unknown, defaulting to 1000
[  196.405456][ T8981] lo speed is unknown, defaulting to 1000
[  196.503861][ T8985] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.815'.
[  197.205760][ T9001] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.819'.
[  197.498060][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'.
[  197.516283][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'.
[  197.521242][ T9012] erspan0: default FDB implementation only supports local addresses
[  197.673599][ T9017] lo speed is unknown, defaulting to 1000
[  199.104821][ T9051] syzkaller1: tun_chr_ioctl cmd 1074025677
[  199.107380][ T9051] syzkaller1: linktype set to 780
[  199.256193][ T9049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'.
[  199.282546][ T9046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.829'.
[  199.553463][ T9063] netlink: 'syz.2.834': attribute type 16 has an invalid length.
[  199.556642][ T9063] netlink: 'syz.2.834': attribute type 3 has an invalid length.
[  199.570490][ T9063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.834'.
[  199.582854][ T9063] netlink: 'syz.2.834': attribute type 10 has an invalid length.
[  199.585944][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'.
[  199.589666][ T9063] dummy0: entered promiscuous mode
[  199.601921][ T9063] dummy0: entered allmulticast mode
[  199.617781][ T9063] bridge0: port 3(dummy0) entered blocking state
[  199.624042][ T9063] bridge0: port 3(dummy0) entered disabled state
[  199.643934][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'.
[  199.707941][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'.
[  199.992964][ T9105] lo speed is unknown, defaulting to 1000
[  200.714882][ T9123] lo speed is unknown, defaulting to 1000
[  200.935085][ T9135] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  201.335477][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.852'.
[  201.344012][ T9149] syzkaller0: entered promiscuous mode
[  201.346150][ T9149] syzkaller0: entered allmulticast mode
[  201.582781][ T9166] netlink: 56 bytes leftover after parsing attributes in process `syz.2.855'.
[  201.603748][ T9163] lo speed is unknown, defaulting to 1000
[  202.342580][ T9183] lo speed is unknown, defaulting to 1000
[  203.288383][ T9197] __nla_validate_parse: 3 callbacks suppressed
[  203.288393][ T9197] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.862'.
[  203.298352][ T9197] veth0_to_bond: default FDB implementation only supports local addresses
[  203.383543][ T9194] lo speed is unknown, defaulting to 1000
[  203.615944][ T9215] netlink: 'syz.2.868': attribute type 64 has an invalid length.
[  203.634344][ T9210] netlink: 128 bytes leftover after parsing attributes in process `syz.3.867'.
[  203.823615][ T9210] lo speed is unknown, defaulting to 1000
[  203.947280][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.870'.
[  204.082664][ T9237] lo speed is unknown, defaulting to 1000
[  204.143661][ T9237] netlink: 'syz.0.874': attribute type 1 has an invalid length.
[  204.148754][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'.
[  204.260007][ T9244] lo speed is unknown, defaulting to 1000
[  204.617229][ T9257] lo speed is unknown, defaulting to 1000
[  205.317270][ T9284] lo speed is unknown, defaulting to 1000
[  205.364724][ T9285] netlink: 'syz.0.886': attribute type 10 has an invalid length.
[  205.369592][ T9285] veth1_vlan: entered allmulticast mode
[  205.385758][ T9285] team0: Device veth1_vlan failed to register rx_handler
[  205.399280][ T9288] bridge0: entered allmulticast mode
[  205.432024][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.535084][ T9298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.072996][ T9324] lo speed is unknown, defaulting to 1000
[  206.077841][ T9325] netlink: 'syz.0.896': attribute type 10 has an invalid length.
[  206.108909][ T9325] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  206.237050][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.897'.
[  206.242203][ T9331] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  207.816808][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'.
[  207.829173][ T9365] netlink: 'syz.3.906': attribute type 10 has an invalid length.
[  207.840986][ T9365] netlink: 55 bytes leftover after parsing attributes in process `syz.3.906'.
[  208.330575][ T9386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.911'.
[  208.337470][ T9387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.911'.
[  208.461248][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'.
[  208.464993][ T9389] openvswitch: netlink: Flow key attr not present in new flow.
[  209.024460][ T9402] netlink: 'syz.0.917': attribute type 3 has an invalid length.
[  209.027311][ T9402] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  209.036847][ T9402] netlink: 'syz.0.917': attribute type 13 has an invalid length.
[  209.039731][ T9402] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.917'.
[  209.669086][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.932648][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.019955][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.138227][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.149273][ T9443] netlink: 'syz.0.928': attribute type 21 has an invalid length.
[  210.154233][ T9443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.928'.
[  210.256805][   T13] bridge_slave_1: left allmulticast mode
[  210.258839][   T13] bridge_slave_1: left promiscuous mode
[  210.261890][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.270670][   T13] bridge_slave_0: left allmulticast mode
[  210.276896][   T13] bridge_slave_0: left promiscuous mode
[  210.280716][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.539303][   T13] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  210.660209][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.666935][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.672220][   T13] bond0 (unregistering): Released all slaves
[  210.743498][   T13] : left promiscuous mode
[  210.981973][   T13] hsr_slave_0: left promiscuous mode
[  210.984956][   T13] hsr_slave_1: left promiscuous mode
[  210.987821][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.995563][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.999048][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.001746][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.012781][   T13] veth1_macvtap: left promiscuous mode
[  211.014874][   T13] veth0_macvtap: left promiscuous mode
[  211.239308][   T13] team0 (unregistering): Port device team_slave_1 removed
[  211.263853][   T13] team0 (unregistering): Port device team_slave_0 removed
[  211.366844][ T9460] delete_channel: no stack
[  211.682529][ T9466] netlink: 'syz.0.934': attribute type 13 has an invalid length.
[  211.685927][ T9466] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.934'.
[  211.693963][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.937'.
[  211.951976][ T9494] lo speed is unknown, defaulting to 1000
[  212.871345][ T9514] netlink: 'syz.3.947': attribute type 10 has an invalid length.
[  212.872428][ T9513] netlink: 'syz.3.947': attribute type 10 has an invalid length.
[  213.147242][ T9537] lo speed is unknown, defaulting to 1000
[  213.496267][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'.
[  213.622707][ T9567] lo speed is unknown, defaulting to 1000
[  214.097035][ T9590] netlink: 'syz.2.970': attribute type 10 has an invalid length.
[  214.100323][ T9590] netlink: 55 bytes leftover after parsing attributes in process `syz.2.970'.
[  214.254178][ T9599] netlink: 'syz.2.973': attribute type 29 has an invalid length.
[  214.258043][ T9599] netlink: 'syz.2.973': attribute type 29 has an invalid length.
[  214.698310][ T9610] netlink: 72 bytes leftover after parsing attributes in process `syz.3.975'.
[  214.757776][ T9612] netlink: 'syz.3.976': attribute type 21 has an invalid length.
[  215.576194][ T9643] lo speed is unknown, defaulting to 1000
[  215.802940][ T9651] lo speed is unknown, defaulting to 1000
[  215.967391][ T9662] netlink: 1 bytes leftover after parsing attributes in process `syz.3.988'.
[  216.425969][ T9672] netlink: 'syz.0.990': attribute type 1 has an invalid length.
[  216.591521][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  216.596829][ T9677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.992'.
[  216.615387][ T9677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.636127][ T9675] lo speed is unknown, defaulting to 1000
[  216.846224][ T9683] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.993'.
[  216.849785][ T9683] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  216.857180][ T9682] lo speed is unknown, defaulting to 1000
[  216.880532][ T9683] openvswitch: netlink: Duplicate key (type 0).
[  217.155528][ T9689] syzkaller0: entered promiscuous mode
[  217.157905][ T9689] syzkaller0: entered allmulticast mode
[  217.183727][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'.
[  217.249492][ T9697] netlink: 'syz.2.998': attribute type 3 has an invalid length.
[  217.253804][ T9697] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.998'.
[  218.699199][ T9704] syzkaller1: tun_chr_ioctl cmd 1074025677
[  218.701851][ T9704] syzkaller1: linktype set to 780
[  218.709356][ T9708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.999'.
[  218.724675][ T9703] lo speed is unknown, defaulting to 1000
[  218.855908][ T9713] lo speed is unknown, defaulting to 1000
[  221.996445][ T9724] rdma_rxe: rxe_newlink: failed to add vcan0
[  222.205147][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'.
[  222.274203][ T9735] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1008'.
[  222.314516][ T9738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1009'.
[  222.419682][ T9747] lo speed is unknown, defaulting to 1000
[  222.482827][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  222.575832][ T9757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1014'.
[  222.718048][ T9761] lo speed is unknown, defaulting to 1000
[  222.997295][ T9785] netlink: 'syz.3.1020': attribute type 29 has an invalid length.
[  223.000318][ T9785] netlink: 'syz.3.1020': attribute type 29 has an invalid length.
[  223.004239][ T9785] netlink: 'syz.3.1020': attribute type 29 has an invalid length.
[  223.052999][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'.
[  223.184651][ T9790] lo speed is unknown, defaulting to 1000
[  223.499758][ T9807] lo speed is unknown, defaulting to 1000
[  223.666435][ T9819] netlink: 'syz.2.1028': attribute type 4 has an invalid length.
[  223.723261][ T9821] openvswitch: netlink: Flow key attribute not present in set flow.
[  223.729117][ T9822] lo: left promiscuous mode
[  223.741227][ T9822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.899192][ T9824] netlink: 'syz.2.1028': attribute type 12 has an invalid length.
[  223.904513][ T9824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1028'.
[  224.207187][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'.
[  224.233528][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  224.355497][ T9833] lo speed is unknown, defaulting to 1000
[  225.655046][ T9869] netlink: 'syz.3.1042': attribute type 6 has an invalid length.
[  226.039898][ T9888] lo speed is unknown, defaulting to 1000
[  226.157842][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  226.277373][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  226.284812][ T9906] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1052'.
[  226.465130][ T9909] lo speed is unknown, defaulting to 1000
[  227.714033][ T9931] netlink: 'syz.0.1059': attribute type 3 has an invalid length.
[  227.756045][ T9924] lo speed is unknown, defaulting to 1000
[  227.814536][ T9934] netlink: 'syz.0.1060': attribute type 2 has an invalid length.
[  227.817756][ T9934] netlink: 'syz.0.1060': attribute type 1 has an invalid length.
[  227.830998][ T9934] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1060'.
[  228.291962][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'.
[  228.301279][ T9962] netlink: 'syz.3.1067': attribute type 17 has an invalid length.
[  228.333680][   T24] lo speed is unknown, defaulting to 1000
[  228.384855][ T9965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1068'.
[  228.411179][ T9964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1068'.
[  228.556724][ T9964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.709936][   T55] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  228.778028][ T9978] netlink: 'syz.2.1074': attribute type 4 has an invalid length.
[  228.792431][ T9979] netlink: 'syz.2.1074': attribute type 4 has an invalid length.
[  228.945170][ T9985] __nla_validate_parse: 6 callbacks suppressed
[  228.945187][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'.
[  230.024990][T10001] lo speed is unknown, defaulting to 1000
[  230.700727][T10018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1085'.
[  230.705149][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1085'.
[  230.791025][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  231.037160][T10027] netlink: 'syz.3.1087': attribute type 29 has an invalid length.
[  231.043586][T10027] netlink: 'syz.3.1087': attribute type 29 has an invalid length.
[  231.048548][T10027] netlink: 'syz.3.1087': attribute type 29 has an invalid length.
[  231.161958][T10031] netlink: 'syz.2.1089': attribute type 21 has an invalid length.
[  231.164651][T10031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1089'.
[  232.069771][T10052] netlink: 'syz.0.1095': attribute type 1 has an invalid length.
[  232.317489][T10057] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1096'.
[  233.078304][T10084] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1104'.
[  235.473816][T10142] syzkaller1: tun_chr_ioctl cmd 1074025677
[  235.477339][T10142] syzkaller1: linktype set to 780
[  235.736543][T10151] netlink: 'syz.2.1121': attribute type 39 has an invalid length.
[  236.400721][T10178] netlink: 'syz.3.1130': attribute type 4 has an invalid length.
[  236.406458][T10178] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1130'.
[  236.420427][T10178] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  236.451993][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'.
[  236.570186][T10176] netlink: 'syz.2.1129': attribute type 1 has an invalid length.
[  237.594514][T10202] netlink: zone id is out of range
[  237.597734][T10202] netlink: zone id is out of range
[  237.599700][T10202] netlink: zone id is out of range
[  237.614705][T10211] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1134'.
[  237.624372][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'.
[  237.811909][T10202] netlink: set zone limit has 4 unknown bytes
[  239.391526][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'.
[  239.421533][T10248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1143'.
[  239.965319][T10252] netlink: 'syz.2.1144': attribute type 7 has an invalid length.
[  239.973168][T10252] netlink: 21512 bytes leftover after parsing attributes in process `syz.2.1144'.
[  239.980305][T10252] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1144'.
[  239.989245][T10252] netlink: 'syz.2.1144': attribute type 7 has an invalid length.
[  239.997242][T10252] netlink: 21512 bytes leftover after parsing attributes in process `syz.2.1144'.
[  241.163508][T10275] syzkaller0: entered promiscuous mode
[  241.172247][T10275] syzkaller0: entered allmulticast mode
[  241.568722][T10305] netlink: 'syz.0.1158': attribute type 3 has an invalid length.
[  241.572724][T10305] netlink: 'syz.0.1158': attribute type 1 has an invalid length.
[  241.577042][T10305] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1158'.
[  241.589330][T10305] netlink: 'syz.0.1158': attribute type 8 has an invalid length.
[  241.689448][T10314] netlink: 'syz.0.1162': attribute type 12 has an invalid length.
[  241.692243][T10314] netlink: 209028 bytes leftover after parsing attributes in process `syz.0.1162'.
[  241.756297][T10320] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1164'.
[  241.764177][T10320] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1164'.
[  242.170525][T10332] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1166'.
[  243.066772][T10339] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1170'.
[  243.070104][T10339] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1170'.
[  243.073809][T10339] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.1170'.
[  245.397281][T10357] sctp: [Deprecated]: syz.3.1175 (pid 10357) Use of struct sctp_assoc_value in delayed_ack socket option.
[  245.397281][T10357] Use struct sctp_sack_info instead
[  245.540612][T10362] netlink: 'syz.3.1177': attribute type 1 has an invalid length.
[  245.544938][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1177'.
[  245.631527][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'.
[  245.710726][T10371] hsr0 speed is unknown, defaulting to 1000
[  245.714081][T10371] hsr0 speed is unknown, defaulting to 1000
[  245.718745][T10371] hsr0 speed is unknown, defaulting to 1000
[  245.728782][T10371] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  245.746463][T10371] hsr0 speed is unknown, defaulting to 1000
[  245.751644][T10371] hsr0 speed is unknown, defaulting to 1000
[  245.757188][T10371] hsr0 speed is unknown, defaulting to 1000
[  245.814704][T10377] netlink: 'syz.2.1182': attribute type 10 has an invalid length.
[  246.263855][T10390] netlink: 'syz.3.1185': attribute type 37 has an invalid length.
[  246.366304][T10390] hsr0 speed is unknown, defaulting to 1000
[  246.835856][T10398] netlink: 'syz.2.1186': attribute type 49 has an invalid length.
[  247.020271][T10407] netlink: 'syz.3.1189': attribute type 1 has an invalid length.
[  247.174861][T10412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.343740][T10423] __nla_validate_parse: 1 callbacks suppressed
[  247.343753][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'.
[  247.632731][T10430] hsr0 speed is unknown, defaulting to 1000
[  247.875128][T10435] hsr0 speed is unknown, defaulting to 1000
[  248.511508][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'.
[  248.832426][T10477] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1207'.
[  249.013256][T10483] netlink: 'syz.2.1210': attribute type 10 has an invalid length.
[  249.016573][T10483] bridge0: left allmulticast mode
[  249.119919][T10483] hsr0 speed is unknown, defaulting to 1000
[  249.189703][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1209'.
[  249.244417][T10484] hsr0 speed is unknown, defaulting to 1000
[  252.646994][T10521] hsr0 speed is unknown, defaulting to 1000
[  252.855164][T10527] netlink: 'syz.3.1220': attribute type 2 has an invalid length.
[  253.067854][T10529] netlink: 'syz.3.1221': attribute type 29 has an invalid length.
[  253.083958][T10529] netlink: 'syz.3.1221': attribute type 29 has an invalid length.
[  253.088037][T10529] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1221'.
[  253.139484][T10531] hsr0 speed is unknown, defaulting to 1000
[  253.542198][T10541] hsr0 speed is unknown, defaulting to 1000
[  254.764621][T10579] openvswitch: netlink: Message has 8 unknown bytes.
[  254.832265][T10580] hsr0 speed is unknown, defaulting to 1000
[  254.853257][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'.
[  254.927168][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'.
[  254.962160][T10585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1233'.
[  254.966755][T10585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1233'.
[  255.434404][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.437300][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.877643][T10596] hsr0 speed is unknown, defaulting to 1000
[  256.492574][T10608] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1240'.
[  257.832289][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'.
[  257.835281][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1249'.
[  258.364483][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'.
[  258.371225][T10638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1250'.
[  258.393640][T10638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1250'.
[  259.582682][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.597432][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.605901][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.609794][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.614968][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.896154][T10642] hsr0 speed is unknown, defaulting to 1000
[  260.030346][T10642] chnl_net:caif_netlink_parms(): no params data found
[  260.036810][T10653] netlink: 'syz.2.1254': attribute type 10 has an invalid length.
[  260.064330][T10655] netlink: 'syz.3.1255': attribute type 10 has an invalid length.
[  260.066882][T10655] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1255'.
[  260.129763][T10642] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.133048][T10642] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.135867][T10642] bridge_slave_0: entered allmulticast mode
[  260.141726][T10642] bridge_slave_0: entered promiscuous mode
[  260.146468][T10642] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.149394][T10642] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.152943][T10642] bridge_slave_1: entered allmulticast mode
[  260.158570][T10642] bridge_slave_1: entered promiscuous mode
[  260.192888][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.207686][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.235207][T10642] team0: Port device team_slave_0 added
[  260.239508][T10642] team0: Port device team_slave_1 added
[  260.263364][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.265952][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.274834][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.279357][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.282375][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.290057][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.321663][T10642] hsr_slave_0: entered promiscuous mode
[  260.324277][T10642] hsr_slave_1: entered promiscuous mode
[  260.434753][T10642] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  260.439416][T10642] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  260.452136][T10642] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  260.457815][T10642] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  260.477851][T10642] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.480866][T10642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.483755][T10642] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.486356][T10642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.537118][T10642] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.547056][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.550072][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.559949][T10642] 8021q: adding VLAN 0 to HW filter on device team0
[  260.569452][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.571696][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.577879][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.580262][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.709216][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.882814][T10642] veth0_vlan: entered promiscuous mode
[  260.892533][T10642] veth1_vlan: entered promiscuous mode
[  260.924685][T10642] veth0_macvtap: entered promiscuous mode
[  260.931844][T10642] veth1_macvtap: entered promiscuous mode
[  260.948449][T10642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.960039][T10642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.972863][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.995341][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.999039][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.016531][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.095995][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.097412][T10686] hsr0 speed is unknown, defaulting to 1000
[  261.101755][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.153815][ T8339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.158671][ T8339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.561855][T10708] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1263'.
[  261.674794][   T55] Bluetooth: hci0: command tx timeout
[  261.816221][T10712] : renamed from gre0 (while UP)
[  261.969249][T10715] hsr0 speed is unknown, defaulting to 1000
[  261.986343][T10714] hsr0 speed is unknown, defaulting to 1000
[  262.168195][T10727] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1267'.
[  262.692382][T10747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1273'.
[  262.732244][T10750] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  262.847107][T10756] netlink: 'syz.4.1277': attribute type 10 has an invalid length.
[  262.847679][T10757] netlink: 'syz.4.1277': attribute type 10 has an invalid length.
[  262.857894][T10756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.862496][T10756] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  262.944174][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1281'.
[  262.955540][T10765] netlink: 'syz.4.1279': attribute type 10 has an invalid length.
[  262.976712][T10765] geneve0: entered promiscuous mode
[  263.013616][T10765] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  263.210202][T10775] hsr0 speed is unknown, defaulting to 1000
[  263.387840][T10783] netlink: 'syz.4.1285': attribute type 29 has an invalid length.
[  263.500609][T10786] hsr0 speed is unknown, defaulting to 1000
[  263.718305][T10809] sock: sock_timestamping_bind_phc: sock not bind to device
[  263.762717][   T55] Bluetooth: hci0: command tx timeout
[  264.617288][T10831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.623444][T10831] netlink: 'syz.2.1298': attribute type 21 has an invalid length.
[  265.982811][ T5236] Bluetooth: hci0: command tx timeout
[  268.031525][ T8689] Bluetooth: hci3: command 0x0406 tx timeout
[  268.034137][ T5236] Bluetooth: hci0: command tx timeout
[  272.158513][T10834] hsr0 speed is unknown, defaulting to 1000
[  272.397432][T10848] hsr0 speed is unknown, defaulting to 1000
[  272.507911][T10868] netlink: 'syz.2.1305': attribute type 2 has an invalid length.
[  274.034260][T10903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1316'.
[  274.543313][T10913] hsr0 speed is unknown, defaulting to 1000
[  274.674049][T10919] tmpfs: Bad value for 'mode'
[  274.769047][T10924] netlink: 'syz.2.1321': attribute type 6 has an invalid length.
[  274.773531][T10924] netlink: 173820 bytes leftover after parsing attributes in process `syz.2.1321'.
[  275.632385][T10946] netlink: 294 bytes leftover after parsing attributes in process `syz.3.1327'.
[  275.966722][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.059213][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.419177][T10971] netlink: 'syz.2.1333': attribute type 40 has an invalid length.
[  276.795139][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.856421][T10975] netlink: 'syz.4.1334': attribute type 10 has an invalid length.
[  276.859278][T10975] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1334'.
[  276.927884][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.019762][T10979] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1335'.
[  277.707712][   T13] bridge_slave_1: left allmulticast mode
[  277.709684][   T13] bridge_slave_1: left promiscuous mode
[  277.712648][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.731216][   T13] bridge_slave_0: left allmulticast mode
[  277.733501][   T13] bridge_slave_0: left promiscuous mode
[  277.735874][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.933506][T11002] netlink: 'syz.2.1341': attribute type 10 has an invalid length.
[  277.936659][T11002] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1341'.
[  280.806953][   T13] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  280.982358][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.995893][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.004063][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  281.011753][   T13] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  281.016670][   T13] bond0 (unregistering): Released all slaves
[  281.046690][T10984] hsr0 speed is unknown, defaulting to 1000
[  281.400857][T11021] syzkaller1: tun_chr_ioctl cmd 1074025677
[  281.403600][T11021] syzkaller1: linktype set to 780
[  281.428495][T11014] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1343'.
[  281.823375][   T13] hsr_slave_0: left promiscuous mode
[  281.826399][   T13] hsr_slave_1: left promiscuous mode
[  281.837759][   T13] veth1_macvtap: left promiscuous mode
[  281.840291][   T13] veth0_macvtap: left promiscuous mode
[  281.845302][   T13] veth0_vlan: left promiscuous mode
[  282.133109][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'.
[  282.144228][T11039] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1349'.
[  282.198257][T11040] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1349'.
[  282.390008][   T13] team0 (unregistering): Port device team_slave_1 removed
[  282.430583][   T13] team0 (unregistering): Port device team_slave_0 removed
[  282.843170][   T47] infiniband syz0: ib_query_port failed (-19)
[  282.853975][T11039] caif0: entered promiscuous mode
[  282.856087][T11039] caif0: entered allmulticast mode
[  282.866951][T11038] hsr0 speed is unknown, defaulting to 1000
[  282.906846][T11043] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1350'.
[  283.218381][T11056] hsr0 speed is unknown, defaulting to 1000
[  283.344570][T11064] siw: device registration error -23
[  283.920464][T11091] hsr0 speed is unknown, defaulting to 1000
[  284.647643][T11102] netlink: zone id is out of range
[  284.665572][T11102] netlink: zone id is out of range
[  284.669515][T11102] netlink: zone id is out of range
[  284.699352][T11105] netlink: del zone limit has 4 unknown bytes
[  284.761461][T11102] netlink: zone id is out of range
[  284.796623][T11102] netlink: set zone limit has 4 unknown bytes
[  285.472785][T11118] netlink: 948 bytes leftover after parsing attributes in process `syz.3.1373'.
[  285.777653][T11131] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1377'.
[  285.781862][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1377'.
[  286.001600][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.004722][T11142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.023165][T11142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.027379][T11142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.117881][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'.
[  286.122203][T11144] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1382'.
[  286.129088][T11145] netlink: 'syz.4.1380': attribute type 5 has an invalid length.
[  286.152252][T11142] bond0: (slave batadv0): Releasing backup interface
[  286.545641][T11156] __nla_validate_parse: 3 callbacks suppressed
[  286.545656][T11156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1385'.
[  286.625906][T11158] hsr0 speed is unknown, defaulting to 1000
[  286.743601][T11167] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1387'.
[  287.184178][T11184] hsr0 speed is unknown, defaulting to 1000
[  287.569440][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  287.575543][T11197] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1394'.
[  287.725018][T11208] netlink: 'syz.3.1396': attribute type 21 has an invalid length.
[  287.729400][T11206] netlink: 'syz.3.1396': attribute type 21 has an invalid length.
[  287.733110][T11208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1396'.
[  287.738347][T11206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1396'.
[  288.165918][T11215] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1398'.
[  288.603239][T11230] netlink: 'syz.2.1402': attribute type 13 has an invalid length.
[  288.606430][T11230] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1402'.
[  288.683551][T11230] hsr0 speed is unknown, defaulting to 1000
[  288.915552][T11238] openvswitch: netlink: Key type 16144 is out of range max 32
[  289.062272][T11240] hsr0 speed is unknown, defaulting to 1000
[  289.157891][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'.
[  289.161281][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'.
[  289.468873][T11257] hsr0 speed is unknown, defaulting to 1000
[  289.985655][T11258] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  290.144512][T11269] netlink: 'syz.4.1413': attribute type 3 has an invalid length.
[  290.261901][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  290.305031][T11273] netlink: 'syz.4.1413': attribute type 4 has an invalid length.
[  290.509257][T11273] .`: renamed from bond0 (while UP)
[  290.615685][T11279] syzkaller0: entered promiscuous mode
[  290.617874][T11279] syzkaller0: entered allmulticast mode
[  291.491400][T11293] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.494979][T11293] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.506079][T11293] bridge0: entered allmulticast mode
[  291.540087][T11295] bridge_slave_1: left allmulticast mode
[  291.544362][T11295] bridge_slave_1: left promiscuous mode
[  291.561629][T11295] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.609239][T11295] bridge_slave_0: left allmulticast mode
[  291.612496][T11295] bridge_slave_0: left promiscuous mode
[  291.615120][T11295] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.751852][T11305] hsr0 speed is unknown, defaulting to 1000
[  292.193725][T11327] netlink: 'syz.2.1429': attribute type 1 has an invalid length.
[  292.196985][T11327] __nla_validate_parse: 1 callbacks suppressed
[  292.196996][T11327] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1429'.
[  293.583303][T11343] delete_channel: no stack
[  293.912712][T11362] netlink: 'syz.2.1437': attribute type 2 has an invalid length.
[  294.169068][T11365] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.1439'.
[  294.174995][T11365] netlink: 'syz.4.1439': attribute type 3 has an invalid length.
[  294.226367][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'.
[  294.424691][T11381] syzkaller0: entered promiscuous mode
[  294.426694][T11381] syzkaller0: entered allmulticast mode
[  294.439777][T11385] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1445'.
[  294.472758][T11383] hsr0 speed is unknown, defaulting to 1000
[  294.683959][T11398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.693099][T11397] netlink: 'syz.2.1448': attribute type 6 has an invalid length.
[  294.696585][T11397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1448'.
[  294.728354][T11401] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1449'.
[  295.016438][T11415] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1452'.
[  295.326747][T11437] hsr0 speed is unknown, defaulting to 1000
[  295.388559][T11438] hsr0 speed is unknown, defaulting to 1000
[  295.574850][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'.
[  295.909513][T11464] netlink: ct family unspecified
[  295.915239][T11464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.020547][T11465] delete_channel: no stack
[  296.118168][T11468] netlink: 'syz.3.1472': attribute type 10 has an invalid length.
[  296.121967][T11468] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1472'.
[  296.186310][T11468] syzkaller0: entered promiscuous mode
[  296.188632][T11468] syzkaller0: entered allmulticast mode
[  296.204052][T11468] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1472'.
[  297.714982][T11496] netlink: 'syz.2.1483': attribute type 2 has an invalid length.
[  297.794665][   T55] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11
[  297.794951][T11501] __nla_validate_parse: 1 callbacks suppressed
[  297.794965][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1484'.
[  297.902252][T11507] hsr0 speed is unknown, defaulting to 1000
[  298.110240][T11517] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1490'.
[  298.167109][T11517] syzkaller1: tun_chr_ioctl cmd 1074025677
[  298.170250][T11517] syzkaller1: linktype set to 780
[  298.181755][T11517] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1490'.
[  298.264332][T11517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1490'.
[  298.275691][T11517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1490'.
[  298.569054][T11534] netlink: 'syz.4.1494': attribute type 11 has an invalid length.
[  298.572468][T11534] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.1494'.
[  298.629465][T11534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.773816][T11539] siw: device registration error -23
[  298.916563][T11544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1497'.
[  299.103943][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1501'.
[  299.121401][T11561] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.151998][T11561] bridge_slave_0 (unregistering): left allmulticast mode
[  299.159304][T11561] bridge_slave_0 (unregistering): left promiscuous mode
[  299.163121][T11561] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.229517][T11568] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1503'.
[  299.244047][T11568] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1503'.
[  299.270179][T11570] hsr0 speed is unknown, defaulting to 1000
[  299.284375][T11574] hsr0 speed is unknown, defaulting to 1000
[  299.878789][T11599] hsr0 speed is unknown, defaulting to 1000
[  300.049735][T11604] hsr0 speed is unknown, defaulting to 1000
[  300.494665][T11615] tmpfs: Bad value for 'mode'
[  300.677895][T11624] netlink: 'syz.3.1518': attribute type 21 has an invalid length.
[  301.620269][T11668] netlink: 'syz.2.1530': attribute type 3 has an invalid length.
[  301.623930][T11668] netlink: 'syz.2.1530': attribute type 1 has an invalid length.
[  301.669276][T11665] hsr0 speed is unknown, defaulting to 1000
[  302.130695][T11690] netlink: 'syz.2.1534': attribute type 17 has an invalid length.
[  302.324866][T11683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.399621][T11683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.416582][T11683] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  302.421973][T11683] bond0 (unregistering): Released all slaves
[  302.500369][T11687] hsr0 speed is unknown, defaulting to 1000
[  303.630303][T11724] syzkaller0: entered promiscuous mode
[  303.651674][T11724] syzkaller0: entered allmulticast mode
[  303.654876][T11726] __nla_validate_parse: 11 callbacks suppressed
[  303.654889][T11726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1544'.
[  303.964389][T11730] openvswitch: netlink: Message has 8 unknown bytes.
[  305.910389][T11750] IPv6: Can't replace route, no match found
[  305.913901][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'.
[  306.411679][T11767] hsr0 speed is unknown, defaulting to 1000
[  306.544000][T11770] hsr0 speed is unknown, defaulting to 1000
[  306.664200][T11773] netlink: 'syz.2.1559': attribute type 4 has an invalid length.
[  306.667389][T11773] netlink: 14281 bytes leftover after parsing attributes in process `syz.2.1559'.
[  307.120023][T11790] hsr0 speed is unknown, defaulting to 1000
[  307.276379][T11796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  307.815443][T11807] netlink: 'syz.4.1567': attribute type 12 has an invalid length.
[  307.818428][T11807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1567'.
[  307.906632][T11807] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1567'.
[  308.721288][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'.
[  308.734160][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'.
[  308.809258][T11830] netlink: 'syz.3.1573': attribute type 10 has an invalid length.
[  308.838246][T11834] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1575'.
[  309.389504][T11857] hsr0 speed is unknown, defaulting to 1000
[  309.551250][T11859] netlink: 'syz.3.1584': attribute type 29 has an invalid length.
[  309.579331][T11863] netlink: 'syz.3.1584': attribute type 29 has an invalid length.
[  309.600518][T11866] netlink: 'syz.3.1584': attribute type 29 has an invalid length.
[  310.017999][T11883] netlink: 'syz.3.1589': attribute type 10 has an invalid length.
[  310.063282][T11883] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1589'.
[  310.643485][T11890] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1590'.
[  310.812463][T11907] veth1_macvtap: left promiscuous mode
[  310.814470][T11907] macsec0: entered promiscuous mode
[  311.070427][T11922] hsr0 speed is unknown, defaulting to 1000
[  311.297305][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1598'.
[  312.035922][T11964] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1612'.
[  312.054303][T11964] netlink: 'syz.4.1612': attribute type 10 has an invalid length.
[  312.160272][T11965] netlink: 'syz.2.1614': attribute type 4 has an invalid length.
[  313.093670][T11981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1617'.
[  313.314716][T11996] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1623'.
[  313.336232][T11996] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1623'.
[  313.344504][T11996] netlink: 'syz.3.1623': attribute type 2 has an invalid length.
[  313.393789][T11995] syzkaller1: tun_chr_ioctl cmd 1074025677
[  313.397282][T11995] syzkaller1: linktype set to 780
[  313.527518][T12000] hsr0 speed is unknown, defaulting to 1000
[  314.053061][T12023] netlink: 'syz.3.1633': attribute type 2 has an invalid length.
[  314.056363][T12023] netlink: 'syz.3.1633': attribute type 8 has an invalid length.
[  314.059916][T12023] __nla_validate_parse: 6 callbacks suppressed
[  314.059995][T12023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1633'.
[  314.383331][T12033] hsr0 speed is unknown, defaulting to 1000
[  314.785048][T12052] netlink: 'syz.4.1644': attribute type 10 has an invalid length.
[  314.788209][T12052] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1644'.
[  315.627953][T12070] netlink: 'syz.2.1649': attribute type 10 has an invalid length.
[  315.634014][T12070] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1649'.
[  315.826883][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  315.862984][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  316.408015][T12084] hsr0 speed is unknown, defaulting to 1000
[  316.655252][T12094] hsr0 speed is unknown, defaulting to 1000
[  316.742010][T12102] netlink: 'syz.4.1657': attribute type 21 has an invalid length.
[  316.745113][T12102] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1657'.
[  316.876097][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.878687][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.981284][T12107] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.1658'.
[  317.086028][T12115] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1660'.
[  317.244357][T12131] netlink: 'syz.3.1666': attribute type 10 has an invalid length.
[  317.404921][T12143] netlink: 'syz.2.1671': attribute type 1 has an invalid length.
[  317.408091][T12143] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1671'.
[  317.720271][T12160] netlink: 'syz.2.1678': attribute type 11 has an invalid length.
[  317.824181][T12159] : renamed from gre0 (while UP)
[  317.842366][T12167] netlink: 'syz.2.1680': attribute type 21 has an invalid length.
[  318.051358][T12167] netlink: 'syz.2.1680': attribute type 4 has an invalid length.
[  318.054691][T12167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1680'.
[  319.515152][T12225] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1698'.
[  319.890090][T12241] hsr0 speed is unknown, defaulting to 1000
[  319.904411][T12243] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1703'.
[  320.117304][T12256] hsr0 speed is unknown, defaulting to 1000
[  320.885810][T12282] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  320.980149][T12284] hsr0 speed is unknown, defaulting to 1000
[  321.229770][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1719'.
[  321.233609][T12303] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  321.236839][T12303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.358483][T12307] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1721'.
[  321.536882][T12309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  321.721432][T12326] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1725'.
[  322.982593][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  322.982622][   T55] Bluetooth: unknown link type 110
[  322.983440][T12347] netlink: 'syz.3.1733': attribute type 10 has an invalid length.
[  322.985383][   T55] Bluetooth: hci3: connection err: -111
[  322.987559][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  322.990381][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  322.992342][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  322.995630][   T55] Bluetooth: unknown link type 110
[  322.997739][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.000405][   T55] Bluetooth: hci3: connection err: -111
[  323.002430][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.002448][   T55] Bluetooth: unknown link type 110
[  323.002465][   T55] Bluetooth: hci3: connection err: -111
[  323.007992][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.009999][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.011730][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.013653][   T55] Bluetooth: unknown link type 110
[  323.013675][   T55] Bluetooth: hci3: connection err: -111
[  323.013827][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.018101][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.018973][   T55] Bluetooth: unknown link type 110
[  323.018994][   T55] Bluetooth: hci3: connection err: -111
[  323.019238][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.025632][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.025860][   T55] Bluetooth: unknown link type 110
[  323.028596][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.034680][   T55] Bluetooth: hci3: connection err: -111
[  323.050665][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.050687][   T55] Bluetooth: unknown link type 110
[  323.055769][   T55] Bluetooth: hci3: connection err: -111
[  323.056071][T12347] netlink: 'syz.3.1733': attribute type 1 has an invalid length.
[  323.058135][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.061311][   T55] Bluetooth: unknown link type 110
[  323.066762][   T55] Bluetooth: hci3: connection err: -111
[  323.069364][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.069382][   T55] Bluetooth: unknown link type 110
[  323.074611][   T55] Bluetooth: hci3: connection err: -111
[  323.076825][   T55] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  323.076842][   T55] Bluetooth: unknown link type 110
[  323.081728][   T55] Bluetooth: hci3: connection err: -111
[  323.083945][   T55] Bluetooth: unknown link type 110
[  323.086012][   T55] Bluetooth: hci3: connection err: -111
[  323.088251][   T55] Bluetooth: unknown link type 110
[  323.090275][   T55] Bluetooth: hci3: connection err: -111
[  323.092811][   T55] Bluetooth: unknown link type 110
[  323.094810][   T55] Bluetooth: hci3: connection err: -111
[  323.097071][   T55] Bluetooth: unknown link type 110
[  323.099188][   T55] Bluetooth: hci3: connection err: -111
[  323.102375][   T55] Bluetooth: unknown link type 110
[  323.104543][   T55] Bluetooth: hci3: connection err: -111
[  323.106766][   T55] Bluetooth: unknown link type 110
[  323.108743][   T55] Bluetooth: hci3: connection err: -111
[  323.111147][   T55] Bluetooth: unknown link type 110
[  323.113423][   T55] Bluetooth: hci3: connection err: -111
[  323.115782][   T55] Bluetooth: unknown link type 110
[  323.117841][   T55] Bluetooth: hci3: connection err: -111
[  323.120120][   T55] Bluetooth: unknown link type 110
[  323.122272][   T55] Bluetooth: hci3: connection err: -111
[  323.124688][   T55] Bluetooth: unknown link type 110
[  323.126773][   T55] Bluetooth: hci3: connection err: -111
[  323.129170][   T55] Bluetooth: unknown link type 110
[  323.131435][   T55] Bluetooth: hci3: connection err: -111
[  323.134266][   T55] Bluetooth: unknown link type 110
[  323.136319][   T55] Bluetooth: hci3: connection err: -111
[  323.138544][   T55] Bluetooth: unknown link type 110
[  323.140464][   T55] Bluetooth: hci3: connection err: -111
[  323.142679][   T55] Bluetooth: unknown link type 110
[  323.144620][   T55] Bluetooth: hci3: connection err: -111
[  323.146802][   T55] Bluetooth: unknown link type 110
[  323.148844][   T55] Bluetooth: hci3: connection err: -111
[  323.151218][   T55] Bluetooth: unknown link type 110
[  323.153163][   T55] Bluetooth: hci3: connection err: -111
[  323.155378][   T55] Bluetooth: unknown link type 110
[  323.157396][   T55] Bluetooth: hci3: connection err: -111
[  323.159763][   T55] Bluetooth: unknown link type 110
[  323.162065][   T55] Bluetooth: hci3: connection err: -111
[  323.164234][   T55] Bluetooth: unknown link type 110
[  323.166148][   T55] Bluetooth: hci3: connection err: -111
[  323.168599][   T55] Bluetooth: unknown link type 110
[  323.170629][   T55] Bluetooth: hci3: connection err: -111
[  323.172962][   T55] Bluetooth: unknown link type 110
[  323.175095][   T55] Bluetooth: hci3: connection err: -111
[  323.177352][   T55] Bluetooth: unknown link type 110
[  323.179303][   T55] Bluetooth: hci3: connection err: -111
[  323.181862][   T55] Bluetooth: unknown link type 110
[  323.184067][   T55] Bluetooth: hci3: connection err: -111
[  323.308079][T12358] hsr0 speed is unknown, defaulting to 1000
[  323.572946][T12368] hsr0 speed is unknown, defaulting to 1000
[  325.314027][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1750'.
[  325.548117][T12419] hsr0 speed is unknown, defaulting to 1000
[  325.611263][T12420] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1751'.
[  325.652307][T12420] siw: device registration error -23
[  325.852479][T12428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1754'.
[  326.453940][T12440] hsr0 speed is unknown, defaulting to 1000
[  326.522312][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'.
[  326.753536][T12455] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1761'.
[  326.954745][T12455] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1761'.
[  326.991704][T12456] hsr0 speed is unknown, defaulting to 1000
[  327.562024][T12478] hsr0 speed is unknown, defaulting to 1000
[  328.418921][T12488] hsr0 speed is unknown, defaulting to 1000
[  329.773532][T12521] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1778'.
[  329.817898][T12523] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1779'.
[  329.897773][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'.
[  329.908930][T12521] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1778'.
[  329.936400][T12526] hsr0 speed is unknown, defaulting to 1000
[  330.165751][T12533] validate_nla: 26 callbacks suppressed
[  330.165782][T12533] netlink: 'syz.2.1781': attribute type 23 has an invalid length.
[  330.567931][T12544] syzkaller1: tun_chr_ioctl cmd 1074025677
[  330.570674][T12544] syzkaller1: linktype set to 780
[  330.638668][T12542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1784'.
[  330.684988][T12542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1784'.
[  330.729326][T12542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1784'.
[  331.232784][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1790'.
[  331.471658][T12564] hsr0 speed is unknown, defaulting to 1000
[  332.737514][T12584] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1796'.
[  333.293423][T12595] hsr0 speed is unknown, defaulting to 1000
[  333.343717][T12596] hsr0 speed is unknown, defaulting to 1000
[  334.046814][T12611] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1803'.
[  334.539939][T12617] netlink: 'syz.4.1805': attribute type 29 has an invalid length.
[  334.545711][T12617] netlink: 'syz.4.1805': attribute type 29 has an invalid length.
[  334.611336][T12619] openvswitch: netlink: Message has 8 unknown bytes.
[  334.719961][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'.
[  334.732085][T12628] openvswitch: netlink: Flow actions attr not present in new flow.
[  334.946690][T12634] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1811'.
[  334.979133][T12640] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1812'.
[  335.028002][T12646] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1813'.
[  335.134201][T12658] netlink: 'syz.4.1816': attribute type 1 has an invalid length.
[  335.141079][T12657] netlink: 'syz.4.1816': attribute type 1 has an invalid length.
[  335.854243][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'.
[  338.343168][T12680] hsr0 speed is unknown, defaulting to 1000
[  338.812407][T12691] syzkaller1: tun_chr_ioctl cmd 1074025677
[  338.814994][T12691] syzkaller1: linktype set to 780
[  338.817194][T12692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1823'.
[  338.830389][T12693] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1823'.
[  339.157372][T12706] hsr0 speed is unknown, defaulting to 1000
[  339.680647][T12733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1833'.
[  340.144044][T12746] C: renamed from team_slave_0 (while UP)
[  340.175981][T12746] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1836'.
[  340.485539][T12753] syzkaller1: tun_chr_ioctl cmd 1074025677
[  340.488466][T12753] syzkaller1: linktype set to 780
[  340.496327][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'.
[  340.504126][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1841'.
[  340.956709][T12761] netlink: zone id is out of range
[  340.992769][T12762] netlink: del zone limit has 4 unknown bytes
[  341.018584][T12761] netlink: zone id is out of range
[  341.023387][T12761] netlink: zone id is out of range
[  341.315890][T12761] netlink: set zone limit has 4 unknown bytes
[  341.412317][T12774] IPv6: Can't replace route, no match found
[  342.203862][T12800] hsr0 speed is unknown, defaulting to 1000
[  342.834388][T12834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  342.851298][T12834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  343.543574][T12867] netlink: 'syz.4.1873': attribute type 10 has an invalid length.
[  343.814047][T12871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1874'.
[  343.896180][T12894] netlink: 'syz.3.1880': attribute type 4 has an invalid length.
[  343.899552][T12894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1880'.
[  344.166314][T12907] hsr0 speed is unknown, defaulting to 1000
[  345.675044][T12973] dummy0: mtu less than device minimum
[  346.053229][T12988] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  346.819252][T13011] netlink: 'syz.2.1912': attribute type 12 has an invalid length.
[  346.826834][T13011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1912'.
[  346.937798][T13017] syz.2.1912 (13017) used obsolete PPPIOCDETACH ioctl
[  346.978531][T13022] netlink: 'syz.3.1915': attribute type 31 has an invalid length.
[  347.133126][T13027] hsr0 speed is unknown, defaulting to 1000
[  347.185061][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'.
[  347.532807][T13041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1920'.
[  347.925194][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'.
[  347.929031][T13051] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1924'.
[  348.418546][T13061] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[  348.440002][T13065] hsr0 speed is unknown, defaulting to 1000
[  348.799621][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'.
[  350.213864][T13107] hsr0 speed is unknown, defaulting to 1000
[  350.536078][T13120] syzkaller1: tun_chr_ioctl cmd 1074025677
[  350.538585][T13120] syzkaller1: linktype set to 780
[  350.594341][T13117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1944'.
[  350.600466][T13117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1944'.
[  350.931710][T13133] syzkaller1: tun_chr_ioctl cmd 1074025677
[  350.934262][T13133] syzkaller1: linktype set to 780
[  350.998686][T13133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1948'.
[  351.014699][T13132] hsr0 speed is unknown, defaulting to 1000
[  351.408517][T13141] hsr0 speed is unknown, defaulting to 1000
[  352.138100][T13171] netlink: 'syz.3.1958': attribute type 1 has an invalid length.
[  352.141187][T13171] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1958'.
[  352.595296][T13182] C: renamed from team_slave_0 (while UP)
[  352.607208][T13182] netlink: 'syz.3.1962': attribute type 1 has an invalid length.
[  352.610420][T13182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1962'.
[  352.622185][T13182] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  352.898495][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'.
[  352.937310][T13201] hsr0 speed is unknown, defaulting to 1000
[  352.986336][T13199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1968'.
[  353.055805][T13206] hsr0 speed is unknown, defaulting to 1000
[  353.544434][T13226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.600214][T13227] hsr0 speed is unknown, defaulting to 1000
[  354.879505][T13257] netlink: 'syz.3.1985': attribute type 5 has an invalid length.
[  355.124673][T13256] hsr0 speed is unknown, defaulting to 1000
[  355.775601][T13277] netlink: 'syz.2.1990': attribute type 3 has an invalid length.
[  355.778433][T13277] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.1990'.
[  355.910542][T13282] hsr0 speed is unknown, defaulting to 1000
[  355.998711][T13290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1994'.
[  356.007519][T13286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1994'.
[  356.024298][T13290] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1994'.
[  356.198853][T13290] netlink: 'syz.2.1994': attribute type 1 has an invalid length.
[  356.207435][T13286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.285608][T13296] IPv6: Can't replace route, no match found
[  356.420644][T13301] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1997'.
[  357.138475][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'.
[  357.143749][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2003'.
[  357.147285][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2003'.
[  358.184954][T13363] netlink: 'syz.3.2014': attribute type 10 has an invalid length.
[  358.354038][T13363] team0 (unregistering): Port device C removed
[  358.359690][T13363] team0 (unregistering): Port device team_slave_1 removed
[  358.381470][T13368] netlink: 'syz.2.2016': attribute type 21 has an invalid length.
[  358.384135][T13368] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2016'.
[  358.422124][T13372] hsr0 speed is unknown, defaulting to 1000
[  358.542944][T13377] hsr0 speed is unknown, defaulting to 1000
[  358.664046][T13384] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2017'.
[  358.725652][T13383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  360.160603][T13427] hsr0 speed is unknown, defaulting to 1000
[  360.284263][T13432] hsr0 speed is unknown, defaulting to 1000
[  360.354842][T13433] netlink: 'syz.2.2034': attribute type 21 has an invalid length.
[  360.382742][T13433] netlink: 'syz.2.2034': attribute type 5 has an invalid length.
[  360.392737][T13433] netlink: 'syz.2.2034': attribute type 6 has an invalid length.
[  360.415386][T13443] Unknown options in mask b7f2
[  360.485219][T13439] syzkaller1: tun_chr_ioctl cmd 1074025677
[  360.487058][T13439] syzkaller1: linktype set to 780
[  360.658782][T13456] netlink: 'syz.4.2039': attribute type 29 has an invalid length.
[  360.670119][T13456] netlink: 'syz.4.2039': attribute type 29 has an invalid length.
[  360.678518][T13456] unsupported nla_type 58
[  360.779228][T13463] hsr0 speed is unknown, defaulting to 1000
[  360.900115][T13477] siw: device registration error -23
[  361.094891][T13489] netlink: 'syz.4.2048': attribute type 10 has an invalid length.
[  361.097344][T13489] __nla_validate_parse: 9 callbacks suppressed
[  361.097351][T13489] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2048'.
[  362.544467][T13518] netlink: 'syz.4.2055': attribute type 1 has an invalid length.
[  362.570865][T13518] netlink: 'syz.4.2055': attribute type 2 has an invalid length.
[  362.933469][T13541] hsr0 speed is unknown, defaulting to 1000
[  362.955760][T13537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2059'.
[  363.539253][T13563] hsr0 speed is unknown, defaulting to 1000
[  363.700248][T13571] lo: left promiscuous mode
[  363.704215][T13571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  365.269480][T13610] hsr0 speed is unknown, defaulting to 1000
[  365.884219][T13634] validate_nla: 1 callbacks suppressed
[  365.884335][T13634] netlink: 'syz.2.2084': attribute type 4 has an invalid length.
[  365.907000][T13634] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2084'.
[  366.052246][T13634] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  366.086274][T13633] hsr0 speed is unknown, defaulting to 1000
[  366.298135][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'.
[  366.937524][T13671] netlink: 'syz.4.2094': attribute type 210 has an invalid length.
[  366.985834][T13670] hsr0 speed is unknown, defaulting to 1000
[  367.369425][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'.
[  367.535420][T13686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2100'.
[  368.193757][T13720] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2105'.
[  369.840631][T13743] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  369.859592][T13743] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2111'.
[  369.932770][T13744] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2112'.
[  370.277806][T13769] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2115'.
[  371.491339][T13801] netlink: 'syz.3.2125': attribute type 6 has an invalid length.
[  371.550227][T13803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2128'.
[  371.565219][T13806] netlink: 'syz.3.2127': attribute type 41 has an invalid length.
[  371.572733][T13806] syzkaller0: entered promiscuous mode
[  371.575937][T13806] syzkaller0: entered allmulticast mode
[  371.734022][T13808] hsr0 speed is unknown, defaulting to 1000
[  371.815947][T13809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2129'.
[  372.095637][T13826] syzkaller1: tun_chr_ioctl cmd 1074025677
[  372.101066][T13826] syzkaller1: linktype set to 780
[  372.112702][T13826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2134'.
[  372.117437][T13826] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2134'.
[  372.139639][T13828] hsr0 speed is unknown, defaulting to 1000
[  372.263787][T13837] hsr0 speed is unknown, defaulting to 1000
[  372.311489][T13841] netlink: 'syz.2.2138': attribute type 11 has an invalid length.
[  372.470482][T13848] netlink: 'syz.2.2140': attribute type 10 has an invalid length.
[  372.475379][T13848] netlink: 'syz.2.2140': attribute type 19 has an invalid length.
[  372.479684][T13848] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.2140'.
[  372.633026][T13848] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2140'.
[  372.974648][T13851] netlink: zone id is out of range
[  372.978516][T13851] netlink: zone id is out of range
[  372.980857][T13851] netlink: zone id is out of range
[  373.009085][T13851] netlink: set zone limit has 4 unknown bytes
[  373.034829][T13850] netlink: del zone limit has 4 unknown bytes
[  373.097283][T13868] netlink: 'syz.2.2144': attribute type 10 has an invalid length.
[  373.100571][T13868] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2144'.
[  373.435801][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2145'.
[  373.839119][T13884] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2150'.
[  374.345016][T13899] netlink: 'syz.3.2155': attribute type 21 has an invalid length.
[  374.348269][T13899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2155'.
[  376.330122][T13928] hsr0 speed is unknown, defaulting to 1000
[  376.390235][T13936] netlink: 'syz.4.2166': attribute type 1 has an invalid length.
[  376.398549][T13936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.774002][T13955] hsr0 speed is unknown, defaulting to 1000
[  376.868229][T13963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2171'.
[  377.582813][T13972] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2176'.
[  377.939361][T13966] delete_channel: no stack
[  378.163843][T13972] openvswitch: netlink: IPv6 tunnel dst address is zero
[  378.240639][T13992] hsr0 speed is unknown, defaulting to 1000
[  378.290257][T13972] hsr0 speed is unknown, defaulting to 1000
[  378.318867][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.330950][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  380.578628][T14011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2183'.
[  380.630060][T14014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2183'.
[  381.406658][T14037] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2191'.
[  381.565183][T14042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2192'.
[  381.571624][T14042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2192'.
[  381.583064][T14042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2192'.
[  382.945186][T14065] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2200'.
[  383.044588][T14074] netlink: 'syz.3.2203': attribute type 10 has an invalid length.
[  384.346807][T14114] netlink: 'syz.3.2214': attribute type 29 has an invalid length.
[  384.353786][T14114] netlink: 'syz.3.2214': attribute type 29 has an invalid length.
[  384.360173][T14114] netlink: 'syz.3.2214': attribute type 29 has an invalid length.
[  384.916891][T14131] openvswitch: netlink: Message has 8 unknown bytes.
[  385.524638][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  387.619010][T14156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2223'.
[  388.275817][T14166] netlink: 'syz.3.2228': attribute type 29 has an invalid length.
[  388.280622][T14165] netlink: 'syz.3.2228': attribute type 29 has an invalid length.
[  388.287789][T14166] netlink: 'syz.3.2228': attribute type 29 has an invalid length.
[  388.309671][T14166] netlink: 'syz.3.2228': attribute type 29 has an invalid length.
[  388.478161][T14179] hsr0 speed is unknown, defaulting to 1000
[  388.523610][T14184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.616975][T14189] hsr0 speed is unknown, defaulting to 1000
[  390.904913][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2241'.
[  390.908886][T14207] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2241'.
[  391.022743][T14217] netlink: 'syz.3.2243': attribute type 10 has an invalid length.
[  391.025879][T14217] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2243'.
[  391.122785][T14222] hsr0 speed is unknown, defaulting to 1000
[  391.506112][T14243] hsr0 speed is unknown, defaulting to 1000
[  391.656880][T14259] netlink: 'syz.4.2255': attribute type 12 has an invalid length.
[  391.660032][T14259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2255'.
[  392.001408][T14278] netlink: 'syz.2.2260': attribute type 10 has an invalid length.
[  392.217711][T14288] pim6reg1: entered promiscuous mode
[  392.220126][T14288] pim6reg1: entered allmulticast mode
[  392.498028][T14302] syzkaller1: tun_chr_ioctl cmd 1074025677
[  392.510875][T14302] syzkaller1: linktype set to 780
[  392.513365][T14303] syzkaller1: tun_chr_ioctl cmd 1074025677
[  392.515158][T14303] syzkaller1: linktype set to 780
[  392.590924][T14302] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2266'.
[  392.604425][T14303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2266'.
[  392.929569][T14327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.938400][T14330] netlink: 'syz.4.2273': attribute type 2 has an invalid length.
[  392.951629][T14329] hsr0 speed is unknown, defaulting to 1000
[  393.161847][T14338] netlink: 'syz.3.2275': attribute type 10 has an invalid length.
[  393.303575][T14341] netlink: 'syz.2.2276': attribute type 10 has an invalid length.
[  394.755524][T14382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2289'.
[  394.793912][T14386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.988304][T14400] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  395.071829][T14402] hsr0 speed is unknown, defaulting to 1000
[  395.324907][T14412] hsr0 speed is unknown, defaulting to 1000
[  395.505114][   T55] bt_warn_ratelimited: 23 callbacks suppressed
[  395.505131][   T55] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  395.507487][   T55] Bluetooth: hci2: connection err: -111
[  395.627508][T14418] xt_limit: Overflow, try lower: 271964/0
[  395.832672][T14421] netlink: 'syz.4.2299': attribute type 10 has an invalid length.
[  395.835324][T14421] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2299'.
[  395.902904][   T55] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  396.385700][T14431] hsr0 speed is unknown, defaulting to 1000
[  396.398164][T14432] netlink: 'syz.4.2301': attribute type 37 has an invalid length.
[  396.837537][T14442] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2304'.
[  396.890565][T14440] hsr0 speed is unknown, defaulting to 1000
[  397.136271][T14453] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2307'.
[  397.460631][T14457] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2308'.
[  397.473526][T14456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2308'.
[  397.485905][T14457] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2308'.
[  397.599196][T14459] openvswitch: netlink: Message has 8 unknown bytes.
[  397.718332][T14456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  397.849317][T14467] netlink: 'syz.4.2311': attribute type 5 has an invalid length.
[  397.860893][T14467] netlink: 'syz.4.2311': attribute type 5 has an invalid length.
[  397.911404][ T5236] Bluetooth: hci3: command 0x0406 tx timeout
[  398.374286][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2313'.
[  398.934575][T14502] _Z`Ԁ@S!: entered promiscuous mode
[  399.744916][T14539] hsr0 speed is unknown, defaulting to 1000
[  400.081965][T14552] siw: device registration error -23
[  400.493509][T14562] hsr0 speed is unknown, defaulting to 1000
[  400.702884][T14571] netlink: 'syz.3.2338': attribute type 2 has an invalid length.
[  400.706652][T14571] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2338'.
[  400.710499][T14571] nbd: must specify an index to disconnect
[  401.241144][T14586] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2344'.
[  401.493067][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'.
[  401.499275][T14599] netlink: 'syz.3.2348': attribute type 10 has an invalid length.
[  401.511837][T14599] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2348'.
[  401.669376][T14599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  401.676586][T14599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  401.966461][T14621] netlink: 'syz.2.2354': attribute type 10 has an invalid length.
[  401.969835][T14621] __nla_validate_parse: 1 callbacks suppressed
[  401.969847][T14621] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2354'.
[  402.055418][T14623] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2356'.
[  402.991848][T14643] netlink: 'syz.3.2361': attribute type 10 has an invalid length.
[  403.003972][T14643] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2361'.
[  403.019170][T14643] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  403.258250][T14665] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2363'.
[  403.618220][T14668] netlink: zone id is out of range
[  403.642612][T14671] netlink: del zone limit has 4 unknown bytes
[  403.658208][T14668] netlink: zone id is out of range
[  403.660245][T14668] netlink: zone id is out of range
[  403.851408][T14668] netlink: set zone limit has 4 unknown bytes
[  403.919544][T14675] hsr0 speed is unknown, defaulting to 1000
[  403.946665][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'.
[  404.248395][T14687] hsr0 speed is unknown, defaulting to 1000
[  405.196032][T14717] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2378'.
[  405.359624][T14727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2381'.
[  405.373224][T14727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2381'.
[  405.409929][T14729] netlink: 'syz.2.2382': attribute type 12 has an invalid length.
[  405.414106][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2382'.
[  406.504537][T14753] syzkaller1: tun_chr_ioctl cmd 1074025677
[  406.507152][T14753] syzkaller1: linktype set to 780
[  406.513056][T14751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2388'.
[  406.700133][T14768] hsr0 speed is unknown, defaulting to 1000
[  406.791388][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  406.794340][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  406.796940][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  406.800200][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  406.805252][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  406.808536][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  406.812065][T14779] netlink: 'syz.4.2395': attribute type 7 has an invalid length.
[  407.861727][T14814] __nla_validate_parse: 3 callbacks suppressed
[  407.861742][T14814] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2404'.
[  407.876312][T14814] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2404'.
[  407.883886][T14806] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2404'.
[  408.172814][T14824] hsr0 speed is unknown, defaulting to 1000
[  408.531541][T14832] hsr0 speed is unknown, defaulting to 1000
[  408.536312][T14834] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2410'.
[  408.540347][T14829] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2410'.
[  408.544143][T14834] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2410'.
[  408.571314][T14835] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2412'.
[  408.599845][T14835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  408.706565][T14836] netlink: 'syz.2.2411': attribute type 29 has an invalid length.
[  408.713892][T14839] netlink: 'syz.2.2411': attribute type 29 has an invalid length.
[  408.722681][T14836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2411'.
[  408.761410][T14836] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2411'.
[  409.043475][T14841] hsr0 speed is unknown, defaulting to 1000
[  409.418011][T14846] hsr0 speed is unknown, defaulting to 1000
[  410.036361][T14869] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2419'.
[  411.101246][T14898] netlink: 'syz.3.2427': attribute type 1 has an invalid length.
[  411.193924][T14900] hsr0 speed is unknown, defaulting to 1000
[  412.007550][T14940] netlink: 'syz.3.2438': attribute type 1 has an invalid length.
[  412.166293][T14940] hsr0 speed is unknown, defaulting to 1000
[  412.883515][T14966] netlink: 'syz.3.2443': attribute type 4 has an invalid length.
[  413.582791][T14976] __nla_validate_parse: 1 callbacks suppressed
[  413.582801][T14976] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2447'.
[  413.612285][T14977] hsr0 speed is unknown, defaulting to 1000
[  413.936601][T14993] netlink: 'syz.4.2452': attribute type 10 has an invalid length.
[  414.006787][T15001] netlink: 'syz.3.2454': attribute type 2 has an invalid length.
[  414.010086][T15001] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.2454'.
[  414.015547][T15001] netlink: 'syz.3.2454': attribute type 1 has an invalid length.
[  414.074634][T15006] hsr0 speed is unknown, defaulting to 1000
[  414.294913][T15014] netlink: 'syz.2.2457': attribute type 2 has an invalid length.
[  414.297666][T15014] netlink: 'syz.2.2457': attribute type 2 has an invalid length.
[  415.009142][T15046] netlink: 'syz.3.2467': attribute type 4 has an invalid length.
[  415.013408][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'.
[  415.039950][T15044] hsr0 speed is unknown, defaulting to 1000
[  415.575625][T15071] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2473'.
[  415.765900][T15076] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2474'.
[  415.999565][T15087] hsr0 speed is unknown, defaulting to 1000
[  416.543730][T15103] netlink: 'syz.4.2481': attribute type 5 has an invalid length.
[  416.546320][T15103] netlink: 'syz.4.2481': attribute type 15 has an invalid length.
[  416.707036][T15113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2486'.
[  416.716840][T15113] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2486'.
[  416.745795][T15114] hsr0 speed is unknown, defaulting to 1000
[  417.097237][T15120] bridge0: entered allmulticast mode
[  418.048252][T15149] syzkaller1: tun_chr_ioctl cmd 1074025677
[  418.051018][T15149] syzkaller1: linktype set to 780
[  418.164539][T15145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2496'.
[  418.178101][T15145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2496'.
[  418.892657][T15171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2504'.
[  419.004107][T15175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2504'.
[  419.011274][T15175] validate_nla: 1 callbacks suppressed
[  419.011287][T15175] netlink: 'syz.4.2504': attribute type 10 has an invalid length.
[  419.119819][T15175] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  419.441508][T15182] netlink: del zone limit has 4 unknown bytes
[  419.441678][T15181] netlink: del zone limit has 4 unknown bytes
[  419.469756][T15184] hsr0 speed is unknown, defaulting to 1000
[  419.765383][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'.
[  420.892861][T15242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.227815][T15258] openvswitch: netlink: Message has 8 unknown bytes.
[  421.346247][T15274] netlink: 'syz.3.2531': attribute type 29 has an invalid length.
[  421.438012][T15291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2531'.
[  421.447904][T15282] hsr0 speed is unknown, defaulting to 1000
[  422.037298][T15306] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2537'.
[  422.042006][T15306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2537'.
[  422.271338][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2539'.
[  422.327851][T15313] netlink: 211 bytes leftover after parsing attributes in process `syz.3.2539'.
[  423.613862][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'.
[  423.617616][T15353] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  423.620638][T15353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.292995][T15361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  424.446332][T15367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2555'.
[  424.767888][T15371] hsr0 speed is unknown, defaulting to 1000
[  425.068726][T15379] netlink: 'syz.3.2558': attribute type 3 has an invalid length.
[  425.144652][T15379] IPv6: NLM_F_CREATE should be specified when creating new route
[  425.269110][T15387] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2559'.
[  425.274723][T15387] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.2559'.
[  426.407154][T15408] syzkaller1: tun_chr_ioctl cmd 1074025677
[  426.409979][T15408] syzkaller1: linktype set to 780
[  426.459828][T15395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2563'.
[  426.472357][T15395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2563'.
[  427.030374][T15441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2575'.
[  427.103907][T15443] netlink: 'syz.4.2576': attribute type 21 has an invalid length.
[  427.106984][T15443] netlink: 'syz.4.2576': attribute type 1 has an invalid length.
[  427.110009][T15443] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2576'.
[  427.406323][T15453] netlink: 'syz.2.2580': attribute type 40 has an invalid length.
[  427.536657][T15458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'.
[  427.715941][T15466] xt_socket: unknown flags 0x20
[  427.855143][T15472] hsr0 speed is unknown, defaulting to 1000
[  428.250876][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'.
[  428.548461][T15498] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2591'.
[  429.898729][T15533] hsr0 speed is unknown, defaulting to 1000
[  430.328532][T15542] netlink: 'syz.4.2604': attribute type 2 has an invalid length.
[  430.362180][T15542] __nla_validate_parse: 3 callbacks suppressed
[  430.362235][T15542] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2604'.
[  430.494935][T15554] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2608'.
[  430.498034][T15554] netlink: 'syz.3.2608': attribute type 1 has an invalid length.
[  431.535013][T15573] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2613'.
[  431.547403][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'.
[  431.604995][T15582] hsr0 speed is unknown, defaulting to 1000
[  431.667994][T15584] netlink: 'syz.3.2616': attribute type 21 has an invalid length.
[  432.202926][T15605] hsr0 speed is unknown, defaulting to 1000
[  432.761192][T15629] syzkaller1: tun_chr_ioctl cmd 1074025677
[  432.764481][T15629] syzkaller1: linktype set to 780
[  432.774857][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2625'.
[  432.800110][T15629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2625'.
[  432.813843][T15629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2625'.
[  434.908120][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2634'.
[  435.166272][T15674] netlink: 'syz.3.2637': attribute type 10 has an invalid length.
[  435.982163][T15684] hsr0 speed is unknown, defaulting to 1000
[  436.342509][T15698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2643'.
[  436.459610][T15709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2648'.
[  436.642324][T15715] netlink: del zone limit has 4 unknown bytes
[  436.936541][T15720] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2650'.
[  436.941891][T15719] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2650'.
[  436.988376][T15720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2650'.
[  437.194643][T15729] hsr0 speed is unknown, defaulting to 1000
[  437.433150][T15737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.598050][T15754] hsr0 speed is unknown, defaulting to 1000
[  437.719086][T15764] hsr0 speed is unknown, defaulting to 1000
[  437.817231][T15770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2660'.
[  438.140564][T15773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2663'.
[  438.174269][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'.
[  438.230437][T15779] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  438.916594][T15790] netlink: 'syz.2.2667': attribute type 3 has an invalid length.
[  438.919873][T15790] netlink: 150428 bytes leftover after parsing attributes in process `syz.2.2667'.
[  439.727359][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2667'.
[  439.745989][T15785] hsr0 speed is unknown, defaulting to 1000
[  439.764140][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.767001][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  439.776036][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.779163][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.784076][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.786976][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.789957][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.794101][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.797542][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  439.800383][T15792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  441.345124][T15851] hsr0 speed is unknown, defaulting to 1000
[  441.443730][T15859] __nla_validate_parse: 3 callbacks suppressed
[  441.443747][T15859] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2688'.
[  441.604831][T15859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2688'.
[  441.658360][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'.
[  441.746065][T15868] net_ratelimit: 57 callbacks suppressed
[  441.746077][T15868] netlink: zone id is out of range
[  441.751518][T15868] netlink: zone id is out of range
[  441.753837][T15868] netlink: zone id is out of range
[  441.773777][T15868] netlink: set zone limit has 4 unknown bytes
[  441.777029][T15868] netlink: del zone limit has 4 unknown bytes
[  441.782669][T15868] netlink: 'syz.2.2690': attribute type 21 has an invalid length.
[  441.785236][T15868] netlink: 'syz.2.2690': attribute type 11 has an invalid length.
[  442.778317][T15886] ==================================================================
[  442.781593][T15886] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  442.784805][T15886] Read of size 1 at addr ffff88802806f030 by task syz.3.2695/15886
[  442.788544][T15886] 
[  442.789881][T15886] CPU: 1 UID: 0 PID: 15886 Comm: syz.3.2695 Not tainted syzkaller #0 PREEMPT(full) 
[  442.789901][T15886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  442.789911][T15886] Call Trace:
[  442.789918][T15886]  <TASK>
[  442.789926][T15886]  dump_stack_lvl+0x189/0x250
[  442.789946][T15886]  ? __kasan_check_byte+0x12/0x40
[  442.789962][T15886]  ? __pfx_dump_stack_lvl+0x10/0x10
[  442.789977][T15886]  ? lock_release+0x4b/0x3e0
[  442.789998][T15886]  ? __virt_addr_valid+0x4a5/0x5c0
[  442.790042][T15886]  print_report+0xca/0x240
[  442.790056][T15886]  ? __xfrm_state_insert+0x8af/0x1450
[  442.790075][T15886]  kasan_report+0x118/0x150
[  442.790088][T15886]  ? __xfrm_state_insert+0x8af/0x1450
[  442.790109][T15886]  __xfrm_state_insert+0x8af/0x1450
[  442.790129][T15886]  ? xfrm_state_insert+0x44/0x60
[  442.790147][T15886]  xfrm_state_insert+0x54/0x60
[  442.790164][T15886]  ipcomp6_init_state+0x655/0x900
[  442.790186][T15886]  __xfrm_init_state+0xa76/0x13f0
[  442.790198][T15886]  ? __xfrm_init_state+0x7ef/0x13f0
[  442.790212][T15886]  xfrm_init_state+0x18/0xa0
[  442.790230][T15886]  pfkey_add+0x1d38/0x2e00
[  442.790255][T15886]  ? __pfx_pfkey_add+0x10/0x10
[  442.790270][T15886]  ? kmem_cache_free+0x18f/0x400
[  442.790288][T15886]  pfkey_sendmsg+0xbfe/0x1090
[  442.790303][T15886]  ? trace_sched_exit_tp+0x36/0x110
[  442.790326][T15886]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  442.790351][T15886]  ? aa_sock_msg_perm+0xf1/0x1d0
[  442.790369][T15886]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  442.790387][T15886]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  442.790403][T15886]  __sock_sendmsg+0x21c/0x270
[  442.790420][T15886]  ____sys_sendmsg+0x505/0x830
[  442.790440][T15886]  ? __pfx_____sys_sendmsg+0x10/0x10
[  442.790462][T15886]  ? import_iovec+0x74/0xa0
[  442.790475][T15886]  ___sys_sendmsg+0x21f/0x2a0
[  442.790494][T15886]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.790524][T15886]  ? __fget_files+0x2a/0x420
[  442.790538][T15886]  ? __fget_files+0x3a0/0x420
[  442.790554][T15886]  __x64_sys_sendmsg+0x19b/0x260
[  442.790573][T15886]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  442.790594][T15886]  ? rcu_is_watching+0x15/0xb0
[  442.790609][T15886]  ? do_syscall_64+0xbe/0x3b0
[  442.790634][T15886]  do_syscall_64+0xfa/0x3b0
[  442.790649][T15886]  ? lockdep_hardirqs_on+0x9c/0x150
[  442.790665][T15886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.790678][T15886]  ? exc_page_fault+0x9f/0xf0
[  442.790694][T15886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.790707][T15886] RIP: 0033:0x7f309718ec29
[  442.790721][T15886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  442.790734][T15886] RSP: 002b:00007f3097f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.790749][T15886] RAX: ffffffffffffffda RBX: 00007f30973d5fa0 RCX: 00007f309718ec29
[  442.790759][T15886] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  442.790768][T15886] RBP: 00007f3097211e41 R08: 0000000000000000 R09: 0000000000000000
[  442.790776][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.790784][T15886] R13: 00007f30973d6038 R14: 00007f30973d5fa0 R15: 00007ffc4115ced8
[  442.790799][T15886]  </TASK>
[  442.790804][T15886] 
[  442.884851][T15891] netlink: 'syz.2.2698': attribute type 2 has an invalid length.
[  442.884873][T15886] Allocated by task 13456:
[  442.918244][T15886]  kasan_save_track+0x3e/0x80
[  442.920142][T15886]  __kasan_slab_alloc+0x6c/0x80
[  442.922098][T15886]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  442.924209][T15886]  xfrm_state_alloc+0x24/0x2f0
[  442.926113][T15886]  __find_acq_core+0x8a7/0x1c00
[  442.928067][T15886]  xfrm_find_acq+0x78/0xa0
[  442.929850][T15886]  xfrm_alloc_userspi+0x6b3/0xc90
[  442.931857][T15886]  xfrm_user_rcv_msg+0x7a3/0xab0
[  442.933855][T15886]  netlink_rcv_skb+0x208/0x470
[  442.935781][T15886]  xfrm_netlink_rcv+0x79/0x90
[  442.937648][T15886]  netlink_unicast+0x82f/0x9e0
[  442.939693][T15886]  netlink_sendmsg+0x805/0xb30
[  442.941622][T15886]  __sock_sendmsg+0x21c/0x270
[  442.943527][T15886]  ____sys_sendmsg+0x505/0x830
[  442.945467][T15886]  ___sys_sendmsg+0x21f/0x2a0
[  442.947397][T15886]  __x64_sys_sendmsg+0x19b/0x260
[  442.949261][T15886]  do_syscall_64+0xfa/0x3b0
[  442.951060][T15886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.953388][T15886] 
[  442.954358][T15886] Freed by task 24:
[  442.955891][T15886]  kasan_save_track+0x3e/0x80
[  442.957782][T15886]  kasan_save_free_info+0x46/0x50
[  442.959795][T15886]  __kasan_slab_free+0x5b/0x80
[  442.961693][T15886]  kmem_cache_free+0x18f/0x400
[  442.963583][T15886]  xfrm_state_gc_task+0x52d/0x6b0
[  442.965546][T15886]  process_scheduled_works+0xae1/0x17b0
[  442.967731][T15886]  worker_thread+0x8a0/0xda0
[  442.969576][T15886]  kthread+0x711/0x8a0
[  442.971221][T15886]  ret_from_fork+0x439/0x7d0
[  442.973087][T15886]  ret_from_fork_asm+0x1a/0x30
[  442.974984][T15886] 
[  442.975961][T15886] The buggy address belongs to the object at ffff88802806ed00
[  442.975961][T15886]  which belongs to the cache xfrm_state of size 928
[  442.981372][T15886] The buggy address is located 816 bytes inside of
[  442.981372][T15886]  freed 928-byte region [ffff88802806ed00, ffff88802806f0a0)
[  442.986752][T15886] 
[  442.987730][T15886] The buggy address belongs to the physical page:
[  442.990250][T15886] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802806c000 pfn:0x2806c
[  442.994198][T15886] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  442.997516][T15886] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  443.000662][T15886] page_type: f5(slab)
[  443.002271][T15886] raw: 00fff00000000040 ffff88801af95640 0000000000000000 0000000000000001
[  443.005663][T15886] raw: ffff88802806c000 00000000800e0008 00000000f5000000 0000000000000000
[  443.008756][T15886] head: 00fff00000000040 ffff88801af95640 0000000000000000 0000000000000001
[  443.012038][T15886] head: ffff88802806c000 00000000800e0008 00000000f5000000 0000000000000000
[  443.015424][T15886] head: 00fff00000000002 ffffea0000a01b01 00000000ffffffff 00000000ffffffff
[  443.018830][T15886] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  443.022254][T15886] page dumped because: kasan: bad access detected
[  443.024784][T15886] page_owner tracks the page as allocated
[  443.027003][T15886] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5976, tgid 5975 (syz.1.18), ts 63343913207, free_ts 63246196359
[  443.034200][T15886]  post_alloc_hook+0x240/0x2a0
[  443.036114][T15886]  get_page_from_freelist+0x21e4/0x22c0
[  443.038302][T15886]  __alloc_frozen_pages_noprof+0x181/0x370
[  443.040543][T15886]  alloc_pages_mpol+0x232/0x4a0
[  443.042393][T15886]  allocate_slab+0x8a/0x370
[  443.044187][T15886]  ___slab_alloc+0xbeb/0x1420
[  443.046031][T15886]  kmem_cache_alloc_noprof+0x283/0x3c0
[  443.048145][T15886]  xfrm_state_alloc+0x24/0x2f0
[  443.050076][T15886]  xfrm_add_sa+0x17d1/0x4070
[  443.051879][T15886]  xfrm_user_rcv_msg+0x7a3/0xab0
[  443.053837][T15886]  netlink_rcv_skb+0x208/0x470
[  443.055757][T15886]  xfrm_netlink_rcv+0x79/0x90
[  443.057629][T15886]  netlink_unicast+0x82f/0x9e0
[  443.059544][T15886]  netlink_sendmsg+0x805/0xb30
[  443.061467][T15886]  __sock_sendmsg+0x21c/0x270
[  443.063347][T15886]  ____sys_sendmsg+0x505/0x830
[  443.065269][T15886] page last free pid 5844 tgid 5844 stack trace:
[  443.067764][T15886]  __free_frozen_pages+0xbc4/0xd30
[  443.069809][T15886]  __slab_free+0x303/0x3c0
[  443.071583][T15886]  qlist_free_all+0x97/0x140
[  443.073433][T15886]  kasan_quarantine_reduce+0x148/0x160
[  443.075596][T15886]  __kasan_slab_alloc+0x22/0x80
[  443.077497][T15886]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  443.079632][T15886]  getname_flags+0xb8/0x540
[  443.081459][T15886]  do_readlinkat+0xbc/0x500
[  443.083277][T15886]  __x64_sys_readlink+0x7f/0x90
[  443.085225][T15886]  do_syscall_64+0xfa/0x3b0
[  443.087032][T15886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.089334][T15886] 
[  443.090281][T15886] Memory state around the buggy address:
[  443.092512][T15886]  ffff88802806ef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  443.095640][T15886]  ffff88802806ef80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  443.098788][T15886] >ffff88802806f000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  443.101938][T15886]                                      ^
[  443.104237][T15886]  ffff88802806f080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  443.107405][T15886]  ffff88802806f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  443.110569][T15886] ==================================================================
[  443.114108][T15886] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  443.116934][T15886] CPU: 1 UID: 0 PID: 15886 Comm: syz.3.2695 Not tainted syzkaller #0 PREEMPT(full) 
[  443.120588][T15886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  443.124541][T15886] Call Trace:
[  443.125879][T15886]  <TASK>
[  443.127045][T15886]  dump_stack_lvl+0x99/0x250
[  443.128853][T15886]  ? __asan_memcpy+0x40/0x70
[  443.130702][T15886]  ? __pfx_dump_stack_lvl+0x10/0x10
[  443.132796][T15886]  ? __pfx__printk+0x10/0x10
[  443.134637][T15886]  vpanic+0x281/0x750
[  443.136216][T15886]  ? __pfx_vpanic+0x10/0x10
[  443.137960][T15886]  ? irqentry_exit+0x74/0x90
[  443.139831][T15886]  panic+0xb9/0xc0
[  443.141344][T15886]  ? __pfx_panic+0x10/0x10
[  443.143131][T15886]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  443.145478][T15886]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  443.147839][T15886]  ? __xfrm_state_insert+0x8af/0x1450
[  443.149994][T15886]  check_panic_on_warn+0x89/0xb0
[  443.151991][T15886]  ? __xfrm_state_insert+0x8af/0x1450
[  443.154113][T15886]  end_report+0x78/0x160
[  443.155760][T15886]  kasan_report+0x129/0x150
[  443.157592][T15886]  ? __xfrm_state_insert+0x8af/0x1450
[  443.159597][T15886]  __xfrm_state_insert+0x8af/0x1450
[  443.161629][T15886]  ? xfrm_state_insert+0x44/0x60
[  443.163874][T15886]  xfrm_state_insert+0x54/0x60
[  443.165804][T15886]  ipcomp6_init_state+0x655/0x900
[  443.167660][T15886]  __xfrm_init_state+0xa76/0x13f0
[  443.169508][T15886]  ? __xfrm_init_state+0x7ef/0x13f0
[  443.171588][T15886]  xfrm_init_state+0x18/0xa0
[  443.173428][T15886]  pfkey_add+0x1d38/0x2e00
[  443.175218][T15886]  ? __pfx_pfkey_add+0x10/0x10
[  443.177107][T15886]  ? kmem_cache_free+0x18f/0x400
[  443.179071][T15886]  pfkey_sendmsg+0xbfe/0x1090
[  443.180810][T15886]  ? trace_sched_exit_tp+0x36/0x110
[  443.182757][T15886]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  443.184787][T15886]  ? aa_sock_msg_perm+0xf1/0x1d0
[  443.186770][T15886]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  443.188875][T15886]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  443.190921][T15886]  __sock_sendmsg+0x21c/0x270
[  443.192793][T15886]  ____sys_sendmsg+0x505/0x830
[  443.194713][T15886]  ? __pfx_____sys_sendmsg+0x10/0x10
[  443.196806][T15886]  ? import_iovec+0x74/0xa0
[  443.198621][T15886]  ___sys_sendmsg+0x21f/0x2a0
[  443.200494][T15886]  ? __pfx____sys_sendmsg+0x10/0x10
[  443.202590][T15886]  ? __fget_files+0x2a/0x420
[  443.204393][T15886]  ? __fget_files+0x3a0/0x420
[  443.206348][T15886]  __x64_sys_sendmsg+0x19b/0x260
[  443.208333][T15886]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  443.210487][T15886]  ? rcu_is_watching+0x15/0xb0
[  443.212384][T15886]  ? do_syscall_64+0xbe/0x3b0
[  443.214306][T15886]  do_syscall_64+0xfa/0x3b0
[  443.216116][T15886]  ? lockdep_hardirqs_on+0x9c/0x150
[  443.218189][T15886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.220582][T15886]  ? exc_page_fault+0x9f/0xf0
[  443.222460][T15886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.224804][T15886] RIP: 0033:0x7f309718ec29
[  443.226614][T15886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.234188][T15886] RSP: 002b:00007f3097f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.237494][T15886] RAX: ffffffffffffffda RBX: 00007f30973d5fa0 RCX: 00007f309718ec29
[  443.240610][T15886] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  443.243728][T15886] RBP: 00007f3097211e41 R08: 0000000000000000 R09: 0000000000000000
[  443.246868][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  443.250011][T15886] R13: 00007f30973d6038 R14: 00007f30973d5fa0 R15: 00007ffc4115ced8
[  443.253140][T15886]  </TASK>
[  443.255034][T15886] Kernel Offset: disabled
[  443.256696][T15886] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:41:58  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff821b266b RBX=ffffea00045a7dc0 RCX=ffff8880222e9cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90007c272a0
R8 =ffffea00045a7dc7 R9 =1ffffd40008b4fb8 R10=dffffc0000000000 R11=fffff940008b4fb9
R12=dffffc0000000000 R13=1ffffd40008b4fb9 R14=ffffea00045a7dc8 R15=1ffffd40008b4fb8
RIP=ffffffff81bfc5a8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b860f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f59b79cf5a0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=a2a67dc480dd6d18 9bac2225750951e3 XMM03=99dc867ef9ff6f60 5275c909b97beff4
XMM04=17571ba36949636c b077a16262340456 XMM05=744b6c208fec22e2 0e4107d66db91c08
XMM06=d646ddf4624622f8 16c417571ba36949 XMM07=636cb077a1626234 045699dc867ef9ff
XMM08=6f605275c909b97b eff4a2a67dc480dd XMM09=0000000000000000 00007f59b7812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008586db0
R8 =ffff8880203f0237 R9 =1ffff1100407e046 R10=dffffc0000000000 R11=ffffffff85504980
R12=dffffc0000000000 R13=ffffffff99b068cb R14=ffffffff99dfb420 R15=0000000000000000
RIP=ffffffff855049fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3097f7f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c0f000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001f40 CR3=00000001103ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f30973a7498 00007f30973a7470 XMM03=00007f30973a74a8 00007f30973a74a0
XMM04=00007f3097f0d100 00007f30973a7460 XMM05=00007f30973a7478 00007f30973a74c0
XMM06=00007f30973a74b8 00007f30973a74b0 XMM07=00007f30973a74a8 00007f30973a74a0
XMM08=0000000000000000 00007f3097212f0f XMM09=0000000000000000 00007f3097212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
