last executing test programs:

2m20.674775918s ago: executing program 2 (id=32):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40010)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r1, 0x0, 0x82)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8800)
r4 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd8700fcc6a5f6680000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x2}, 0x80, &(0x7f0000000580)=[{0x0}], 0x1}, 0x8880)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x40000000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdir(0x0, 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

2m20.523751724s ago: executing program 2 (id=36):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
close(0x3)

2m20.392212455s ago: executing program 2 (id=38):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="560a0000f6d9e5dac6687673000000e9ae00000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(0x0, r3, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r4, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

2m20.160591341s ago: executing program 2 (id=39):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x6, 0x1f7c, 0xa}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

2m19.906969421s ago: executing program 2 (id=40):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, 0x0, 0x20040010)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000000)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full', 0x20, 0x6, 0x20, 0xeb3}, 0x2f)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020601040000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e65740000000057634aaaada4980ee764e02f2fe196cadc8c8c5ea4abc5d93549589cb75c0f17a676a437277d"], 0x48}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)=ANY=[@ANYBLOB="44000000090601020000000000000000070000000900020073797a310000000005000100070000001c0007801800018014000240fc01000000000000000000940f5b"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

2m19.605285542s ago: executing program 0 (id=41):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xbf\xe3?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\fr\xf1\xec\xd9CD\x80\xb4^\x8cw;\x87\xea\x8c\x8bJ\x9a\x0ej\x8f\x8e^\xe6\xa6\xaa\x910\fD\xabFU\xa0D;\xd6\xd1\xeer\x9d\x02\xd9\xf7d`\xbfv\x15.\xe4\x82|)K\x99\x98&?\xcd\xe5\xa8\xba~$;g\t\x02\x84+\x90\xab\x816$/\x92\"\xef\xf7\x18\xfaE\xfe\xf7\n\xb2\x7fC\xbb\xbdg#F\n\vu\xe2\xe9\b\xa2\xf1\x94Fb\x92\xc9\xddP\xf0m35+\xdd\xac3\x00\xdd\xfb\b\xc0\x95\xe8\xa5\xec\x9e\xbfA\x7f\xff\xb8\xe2\xe2HNy$\xd4\xc6\x9dd\t\xf6\xed\x10\x15%\r\x1aD\f>\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq')
ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"})

2m19.540088994s ago: executing program 0 (id=42):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffee7, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff05140100000e12011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)

2m19.473886311s ago: executing program 0 (id=45):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x3, 0x73)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

2m19.469835506s ago: executing program 2 (id=46):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x8, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)

2m19.156973906s ago: executing program 0 (id=49):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x38, 0x1, 0x20, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40010)

2m19.019428153s ago: executing program 0 (id=50):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa9}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

2m18.787555669s ago: executing program 0 (id=51):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114a00000000020000000000000000850000000500004095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)

2m4.069397799s ago: executing program 32 (id=46):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x8, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0)

2m3.830261932s ago: executing program 33 (id=51):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114a00000000020000000000000000850000000500004095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10)

14.296042051s ago: executing program 4 (id=1547):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.233655181s ago: executing program 4 (id=1548):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3, 0x400000000398}, 0x18020, 0x4, 0x0, 0x0, 0x2, 0xfffff271}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f00}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x3f}, 0x90)

14.155946159s ago: executing program 4 (id=1549):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d", @ANYRESDEC=r0], 0xfe33)

13.344130168s ago: executing program 4 (id=1551):
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
socket$unix(0x1, 0x5, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
syz_clone(0x3000, &(0x7f0000001240)="033931ad5b95059bc163dde74bd2baa4c68e0cd30cad94728ae1", 0x1a, &(0x7f00000000c0), &(0x7f0000000100), 0x0)
fstat(r0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
close(r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xc0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xfffffffe, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/cgroup\x00')
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x122)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
fstat(0xffffffffffffffff, 0x0)

12.956666343s ago: executing program 4 (id=1562):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x100000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x2dd}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@loopback, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}]}]}, 0x13c}}, 0x0)

12.877912733s ago: executing program 3 (id=1564):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
socket$kcm(0x1e, 0x4, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x88, 0x90, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xaba}, 0x0, 0x1, 0xffffffffffffffff, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x42)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x6}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

12.877536851s ago: executing program 4 (id=1565):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x37)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1946}, 0x8110, 0x0, 0x0, 0x7, 0x3fe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r3, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
close(r2)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r2, 0xff06, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000000), 0x4)

10.220711537s ago: executing program 3 (id=1574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x200c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fe8, 0x2, 0x0, 0x1, [@nested={0x1fe4, 0x14}, @nested={0x1fdd, 0x19, 0x0, 0x1, [@generic="6bcf64449c0703dba8877ef71b006860845fde701d2fea34ecd4d55bb66bca93687c4b94f44c96941f5716c048d30eb21ab818c74a49b5515505708352f8005a2fa7cc13124294006539aed9015d2c9877bbe95584a2e9573d60d08f67cf0d89d4c0284ffa221c16345928c83861da5565a905f80096f7524c40d5c16631ffc9150953c3b90d2397a1", @typed={0x8, 0x86, 0x0, 0x0, @pid}, @nested={0x153d, 0x32, 0x0, 0x1, [@nested={0x3d, 0xe0, 0x0, 0x1, [@generic="10af31790eadc1710f871770280c5d2472f24226865ed7697c72083e18ff8555e8f5ea85b9fd9dae3d705005d835793b9ff9a8b9cf62f07e65"]}, @generic="09865825f384dc06fb059a6be932692ef0cb7705932ad093a9024b789dbe869e2f83ccda0738ad48faf5897215e87d5d5bb1c8c7842160891c260ba5ac6bf76b3724119fb4778e1db2521954189d5b6be390f80cd2ccb1ca946b4b790ceac430ea8589a41f27dd7e1dc6e9babbe212346d3922c98265599295bbe3858ad2a6edc914502a03b674cfcb856f526332f252335915ab3d4754e21651a42e9e70cf2d7a45aa35cb8f921a36d94e3df0bc6147bf87cd618a7eebce2efe45c766ee282cd779", @nested={0x181, 0x39, 0x0, 0x1, [@nested={0x4, 0x12a}, @generic="553f735ba3abe53c4887ab5c3c2aecd5e00c53c07ded354932a38a06e4252f4c398372075ad4877bb7c8afc3bb17cd10f0140186b3549b51f0183d9a9bd122e042304df80f7d4f1425174ceca2b5fd8e1605fe9155afc761fd431c129fa66f114696bc8b1d2c2d26588ab21e5df1ed41b8d16823dbb4beca51d7bf76b1f520e51b5837f8d0d179d23e745b", @generic="8bff6c411d7aafe19d22ef0259020ea9360e2c6a1919719dcba6719f1f398e383ac3cc5d2c575cc0be346e148d144df61cecf0002e1e5e9678d963662fd6be89385713558d6e854ee8637179503e9bc4ac25ea46075963180091a12ac9188e5b2319c7c64b35c8edda2d1b8d18b1e7386c6e91b8a0148e941e8a3f88f10e345f44bb732b245ee9dedaa9f4779d429672fbc33cfec549c44063dc2db0f2a0f220e888b5bad8a74d94f98b6e2dbc318c2e430721a0467b9461150c", @nested={0x4, 0x10a}, @typed={0x14, 0x11f, 0x0, 0x0, @ipv6=@mcast2}, @generic="f0844a534c769f6d9321ead5", @nested={0x4, 0xb6}, @nested={0x4, 0xc5}, @nested={0x4, 0x3c}, @nested={0x4, 0x47}]}, @nested={0x11d9, 0x49, 0x0, 0x1, [@generic="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", @generic="8e14ed05aeecb3ae2b2506af0a3ea072b99eb3ef5e479ecf470bb9d143b49db50e277c978845804803e364a86b9947d31d2246c76cb7ac0455fe268164308d3042d2fba350894ab681a3caeac467ce13575f4c81b7403f0b82b093e53ba6db59b962a438349dd66afc889aba238e55a6abe9576cce35d66a27d95199932234f22b8ff51f9babaa038ea253cca785c0381fb8e3f4b1711bf4158e65e553f172bfb507f2809853cbf051cab3bb317dad8ad1ffc98ddf6df020c97b37a622f73ac81d55881113633a02176e94a7f598a8fb5990c66f7a7b52f72a85c54bbd90248f67348c39a1591c28ef9bf34488985d6a78", @typed={0x8, 0xbf, 0x0, 0x0, @pid}, @nested={0x4, 0x53}, @nested={0x4, 0xda}, @generic="d12e311411dc36756a6218b574aec74c103ce63659588491eeea7bf4f10c308b2ebb0ae998d3c567ac1642f8cb9ec9083b1afcf97917a328bd9cb0dd96b35aabfc9f974047f582a82648e91c106e34bd1fc3d0fcff309eae6a3fdee6d94859a3be3b56090032b2a1aca35da62bf65f", @generic="27232e7ade157133170e7fe87e21c513efc404fabecd462fc653e70b8e9f8a2e7c903737128805ab6c9086934b07a03c4a791eb66475257b4cf142c103711c71a6f523455c8fe2e98b2101d43e4cca985c6a03e4becb7444ecd91d4c66d40ffb6befb28761"]}, @generic="6ac20f85a69e40eef2942d1f29ef38e8f23d68dbb80de760f7ec2f3d6f5e67649cd6ab8fce65fdd016ec75aea9617ef00156d469b9cc2d11fef4e62c69ea7b035abfbd9dd9d269be8687dfa1854ff46505e729a4c5072495afe19bc79d60b23dfb6271d3fa906e6aa6b715c34a9c9045df80b2abaad6e1b9af215c15a730bbdfb54076f1078599b43ec52b01c82467224c3c0767a6ef50d44fd4e8731015532f4b5d97a8cb57b15ebdb0101583a158356a21ecafd8579318521e1ac8e60692f28e3f33706a226c90f1742c3ddf0966f190d4a25a60d8cf"]}, @nested={0xa05, 0x88, 0x0, 0x1, [@generic="71ec84018437cb0463e0a09640e12a3c0377af68f5", @typed={0xa, 0x119, 0x0, 0x0, @str=',(\\&{\x00'}, @generic="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"]}]}]}]}, 0x200c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

10.220379302s ago: executing program 3 (id=1575):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0)

10.038815836s ago: executing program 3 (id=1576):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000014006bcc9e3be05c6e17aa31286b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0005007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

9.468689817s ago: executing program 3 (id=1577):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x2)

5.914620088s ago: executing program 3 (id=1580):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

3.435654642s ago: executing program 1 (id=1584):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0xa4)

3.435256167s ago: executing program 1 (id=1585):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90)

2.161665142s ago: executing program 1 (id=1586):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

508.275791ms ago: executing program 1 (id=1587):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

507.951957ms ago: executing program 1 (id=1588):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611084000000000004000000000000009500010000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

0s ago: executing program 1 (id=1589):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)='%-010d \x00'}, 0x20)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001"], 0x178}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42964' (ED25519) to the list of known hosts.
syzkaller login: [   57.295653][ T5832] cgroup: Unknown subsys name 'net'
[   57.426332][ T5832] cgroup: Unknown subsys name 'cpuset'
[   57.432502][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.747581][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.444252][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.447714][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.460441][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.463515][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.466805][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.523957][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.527512][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.532533][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.537458][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.544077][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.577050][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.581420][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.584134][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.588805][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.592698][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.829468][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   65.908267][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.921382][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   65.991191][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.994798][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.998225][ T5844] bridge_slave_0: entered allmulticast mode
[   66.001747][ T5844] bridge_slave_0: entered promiscuous mode
[   66.011427][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.014223][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.017037][ T5844] bridge_slave_1: entered allmulticast mode
[   66.023076][ T5844] bridge_slave_1: entered promiscuous mode
[   66.094793][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.099288][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.102205][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.104525][ T5850] bridge_slave_0: entered allmulticast mode
[   66.107302][ T5850] bridge_slave_0: entered promiscuous mode
[   66.122756][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.126352][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.129121][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.131895][ T5849] bridge_slave_0: entered allmulticast mode
[   66.134742][ T5849] bridge_slave_0: entered promiscuous mode
[   66.138191][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.142077][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.144855][ T5850] bridge_slave_1: entered allmulticast mode
[   66.148402][ T5850] bridge_slave_1: entered promiscuous mode
[   66.182184][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.184525][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.186993][ T5849] bridge_slave_1: entered allmulticast mode
[   66.192183][ T5849] bridge_slave_1: entered promiscuous mode
[   66.231171][ T5844] team0: Port device team_slave_0 added
[   66.236311][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.243606][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.248532][ T5844] team0: Port device team_slave_1 added
[   66.265484][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.271901][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.344794][ T5849] team0: Port device team_slave_0 added
[   66.347997][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.351221][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.361144][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.366719][ T5849] team0: Port device team_slave_1 added
[   66.369649][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.372489][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.381708][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.386854][ T5850] team0: Port device team_slave_0 added
[   66.411237][ T5850] team0: Port device team_slave_1 added
[   66.429588][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.433326][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.444416][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.471641][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.474277][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.483886][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.518747][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.521620][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.532971][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.544381][ T5844] hsr_slave_0: entered promiscuous mode
[   66.547960][ T5844] hsr_slave_1: entered promiscuous mode
[   66.568666][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.571657][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.582003][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.635330][ T5849] hsr_slave_0: entered promiscuous mode
[   66.638744][ T5849] hsr_slave_1: entered promiscuous mode
[   66.642512][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   66.645147][ T5849] Cannot create hsr debugfs directory
[   66.727249][ T5850] hsr_slave_0: entered promiscuous mode
[   66.729552][ T5850] hsr_slave_1: entered promiscuous mode
[   66.732882][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   66.734829][ T5850] Cannot create hsr debugfs directory
[   66.983255][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.992047][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.998083][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.014925][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.067935][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.077191][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.096710][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.107450][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.179282][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.188385][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.199496][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.217461][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.334472][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.362675][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.377007][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   67.396088][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.399070][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.414050][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   67.423387][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.426252][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.437524][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.440454][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.469833][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.475292][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.477990][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.501069][ T5234] Bluetooth: hci0: command tx timeout
[   67.536822][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.556610][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.559508][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.580242][ T5234] Bluetooth: hci1: command tx timeout
[   67.587677][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.590596][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.661186][ T5234] Bluetooth: hci2: command tx timeout
[   67.666403][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.725541][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.796383][ T5844] veth0_vlan: entered promiscuous mode
[   67.808777][ T5844] veth1_vlan: entered promiscuous mode
[   67.816344][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.856767][ T5844] veth0_macvtap: entered promiscuous mode
[   67.872282][ T5844] veth1_macvtap: entered promiscuous mode
[   67.882279][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.898603][ T5849] veth0_vlan: entered promiscuous mode
[   67.909835][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.924057][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.930755][ T5849] veth1_vlan: entered promiscuous mode
[   67.946630][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.954897][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.959189][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.974118][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.082336][ T5849] veth0_macvtap: entered promiscuous mode
[   68.098956][ T5850] veth0_vlan: entered promiscuous mode
[   68.107410][ T5849] veth1_macvtap: entered promiscuous mode
[   68.109797][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.112786][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.134739][ T5850] veth1_vlan: entered promiscuous mode
[   68.157116][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.179048][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.181030][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.186296][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.212310][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.216207][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.225567][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.253639][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.264005][ T5850] veth0_macvtap: entered promiscuous mode
[   68.284319][ T5850] veth1_macvtap: entered promiscuous mode
[   68.327229][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.353128][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.384215][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.386082][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.395128][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.410909][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.414704][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.417936][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.423784][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.468719][  T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.479342][  T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.596497][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.599596][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.653051][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.657065][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.812202][ T5920] =======================================================
[   68.812202][ T5920] WARNING: The mand mount option has been deprecated and
[   68.812202][ T5920]          and is ignored by this kernel. Remove the mand
[   68.812202][ T5920]          option from the mount to silence this warning.
[   68.812202][ T5920] =======================================================
[   68.839920][    C0] hrtimer: interrupt took 70716 ns
[   69.580653][ T5234] Bluetooth: hci0: command tx timeout
[   69.660237][ T5234] Bluetooth: hci1: command tx timeout
[   69.751873][ T5234] Bluetooth: hci2: command tx timeout
[   69.842843][ T5945] Zero length message leads to an empty skb
[   69.876048][ T5949] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16'.
[   69.926038][ T5949] netlink: 'syz.1.16': attribute type 10 has an invalid length.
[   69.997006][ T5951] netlink: 'syz.0.18': attribute type 8 has an invalid length.
[   70.004894][ T5951] netlink: 'syz.0.18': attribute type 3 has an invalid length.
[   70.012120][ T5951] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.18'.
[   70.044078][ T5951] netlink: 'syz.0.18': attribute type 13 has an invalid length.
[   70.052785][ T5951] netlink: 'syz.0.18': attribute type 17 has an invalid length.
[   70.063499][ T5954] netlink: 'syz.2.17': attribute type 10 has an invalid length.
[   70.147203][ T5956] netlink: 'syz.2.17': attribute type 11 has an invalid length.
[   70.161862][ T5956] netlink: 'syz.2.17': attribute type 11 has an invalid length.
[   70.604359][ T5951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.621591][ T5954] team0: Port device macvlan1 added
[   70.809438][ T5963] netlink: 'syz.2.21': attribute type 11 has an invalid length.
[   70.814763][ T5963] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.21'.
[   71.260971][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.346244][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.348530][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.646741][ T5983] netlink: 64 bytes leftover after parsing attributes in process `syz.1.30'.
[   71.660114][ T5234] Bluetooth: hci0: command tx timeout
[   71.740669][ T5234] Bluetooth: hci1: command tx timeout
[   71.773655][ T5991] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.33'.
[   71.821060][ T5234] Bluetooth: hci2: command tx timeout
[   71.835567][ T5995] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.886363][ T5993] netlink: 348 bytes leftover after parsing attributes in process `syz.1.34'.
[   71.928950][ T5993] lo speed is unknown, defaulting to 1000
[   71.934919][ T5993] lo speed is unknown, defaulting to 1000
[   72.001655][ T5993] lo speed is unknown, defaulting to 1000
[   72.089449][ T5993] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.647129][ T5993] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.744187][ T5993] lo speed is unknown, defaulting to 1000
[   72.764847][ T5993] lo speed is unknown, defaulting to 1000
[   72.793781][ T5993] lo speed is unknown, defaulting to 1000
[   73.085839][ T6032] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.46'.
[   73.820611][ T5234] Bluetooth: hci1: command tx timeout
[   73.835508][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1054860779 wd_nsec: 1054860767
[   73.901114][ T5234] Bluetooth: hci2: command tx timeout
[   75.569569][ T5234] Bluetooth: hci0: command tx timeout
[   77.671547][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 3320750142 wd_nsec: 3320750373
[   88.322443][   T47] cfg80211: failed to load regulatory.db
[   88.359929][    C1] sched: DL replenish lagged too much
[   88.708936][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.712907][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.716480][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.724875][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.728525][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.765833][ T6060] lo speed is unknown, defaulting to 1000
[   88.877640][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.885159][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.892258][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.895138][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.897990][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.990768][ T6065] lo speed is unknown, defaulting to 1000
[   89.131216][ T6060] chnl_net:caif_netlink_parms(): no params data found
[   89.273854][ T5674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.284946][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.287947][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.291455][ T6060] bridge_slave_0: entered allmulticast mode
[   89.295294][ T6060] bridge_slave_0: entered promiscuous mode
[   89.305748][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.308871][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.312061][ T6060] bridge_slave_1: entered allmulticast mode
[   89.316486][ T6060] bridge_slave_1: entered promiscuous mode
[   89.319781][ T6065] chnl_net:caif_netlink_parms(): no params data found
[   89.337670][ T5674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.432614][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.447130][ T5674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.472758][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.518840][ T6060] team0: Port device team_slave_0 added
[   89.539526][ T5674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.559355][ T6060] team0: Port device team_slave_1 added
[   89.562287][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.565201][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.568112][ T6065] bridge_slave_0: entered allmulticast mode
[   89.572502][ T6065] bridge_slave_0: entered promiscuous mode
[   89.591026][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.593501][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.596606][ T6065] bridge_slave_1: entered allmulticast mode
[   89.601108][ T6065] bridge_slave_1: entered promiscuous mode
[   89.641056][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.643913][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.654960][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.664171][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.672665][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.688182][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.691348][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.699566][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.725531][ T6065] team0: Port device team_slave_0 added
[   89.728992][ T6065] team0: Port device team_slave_1 added
[   89.788755][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.793115][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.814306][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.837682][ T6060] hsr_slave_0: entered promiscuous mode
[   89.843895][ T6060] hsr_slave_1: entered promiscuous mode
[   89.847123][ T6060] debugfs: 'hsr0' already exists in 'hsr'
[   89.848983][ T6060] Cannot create hsr debugfs directory
[   89.853618][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.856167][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.870029][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.937999][ T5674] bridge_slave_1: left allmulticast mode
[   89.946182][ T5674] bridge_slave_1: left promiscuous mode
[   89.949364][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.958765][ T5674] bridge_slave_0: left allmulticast mode
[   89.961892][ T5674] bridge_slave_0: left promiscuous mode
[   89.966548][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.027071][ T6096] netlink: 'syz.1.62': attribute type 1 has an invalid length.
[   90.029394][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'.
[   90.304908][ T5674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.316206][ T5674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.326334][ T5674] bond0 (unregistering): Released all slaves
[   90.782003][ T5854] Bluetooth: hci3: command tx timeout
[   90.940861][ T5854] Bluetooth: hci4: command tx timeout
[   91.307959][ T6065] hsr_slave_0: entered promiscuous mode
[   91.311292][ T6065] hsr_slave_1: entered promiscuous mode
[   91.314225][ T6065] debugfs: 'hsr0' already exists in 'hsr'
[   91.316593][ T6065] Cannot create hsr debugfs directory
[   92.245772][ T5674] hsr_slave_0: left promiscuous mode
[   92.258086][ T5674] hsr_slave_1: left promiscuous mode
[   92.263124][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.266663][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.273626][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.276234][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.296791][ T5674] veth1_macvtap: left promiscuous mode
[   92.298687][ T5674] veth0_macvtap: left promiscuous mode
[   92.313050][ T5674] veth1_vlan: left promiscuous mode
[   92.315297][ T5674] veth0_vlan: left promiscuous mode
[   92.612874][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'.
[   92.743283][ T5674] team0 (unregistering): Port device team_slave_1 removed
[   92.769294][ T5674] team0 (unregistering): Port device team_slave_0 removed
[   92.870201][ T5854] Bluetooth: hci3: command tx timeout
[   93.036361][ T5854] Bluetooth: hci4: command tx timeout
[   93.143880][ T6060] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.162504][ T6060] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.174986][ T6060] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.185493][ T6060] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.257350][ T6065] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.264370][ T6065] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.269144][ T6065] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.277370][ T6065] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.448290][ T5674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.469713][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.557559][ T5674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.578698][ T6160] GPL: port 1(gretap0) entered blocking state
[   93.583786][ T6160] GPL: port 1(gretap0) entered disabled state
[   93.585901][ T6160] gretap0: entered allmulticast mode
[   93.590819][ T6160] gretap0: entered promiscuous mode
[   93.622955][ T6060] 8021q: adding VLAN 0 to HW filter on device team0
[   93.643423][ T5674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.655420][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.657954][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.671859][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.674448][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.695661][ T5674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.728961][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.776536][ T6065] 8021q: adding VLAN 0 to HW filter on device team0
[   93.843163][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.845442][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.861899][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.864208][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.875677][ T6065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.879057][ T6065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.969357][ T5674] bridge_slave_1: left allmulticast mode
[   93.978177][ T5674] bridge_slave_1: left promiscuous mode
[   93.981765][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.985523][ T5674] bridge_slave_0: left allmulticast mode
[   93.987306][ T5674] bridge_slave_0: left promiscuous mode
[   93.989145][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.157887][ T6184] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   94.266210][ T5674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.270814][ T5674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.274669][ T5674] bond0 (unregistering): Released all slaves
[   94.430798][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.454452][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.523167][ T6060] veth0_vlan: entered promiscuous mode
[   94.538061][ T6060] veth1_vlan: entered promiscuous mode
[   94.578982][ T5674] hsr_slave_0: left promiscuous mode
[   94.590764][ T5674] hsr_slave_1: left promiscuous mode
[   94.595226][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.598216][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.610905][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.613960][ T5674] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.638797][ T5674] veth1_macvtap: left promiscuous mode
[   94.642734][ T5674] veth0_macvtap: left promiscuous mode
[   94.645208][ T5674] veth1_vlan: left promiscuous mode
[   94.647500][ T5674] veth0_vlan: left promiscuous mode
[   94.937791][ T5674] team0 (unregistering): Port device macvlan1 removed
[   94.950322][ T5854] Bluetooth: hci3: command tx timeout
[   95.057507][ T6201] netlink: 168 bytes leftover after parsing attributes in process `syz.1.79'.
[   95.101758][ T5854] Bluetooth: hci4: command tx timeout
[   95.158779][ T5674] team0 (unregistering): Port device team_slave_1 removed
[   95.184608][ T5674] team0 (unregistering): Port device team_slave_0 removed
[   95.472195][ T6060] veth0_macvtap: entered promiscuous mode
[   95.476242][ T6060] veth1_macvtap: entered promiscuous mode
[   95.499273][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.525003][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.542835][ T6112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.545743][ T6112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.548610][ T6112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.562600][ T6112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.658120][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   95.673328][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   95.709422][ T6065] veth0_vlan: entered promiscuous mode
[   95.778255][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.783520][ T6065] veth1_vlan: entered promiscuous mode
[   95.795823][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.868503][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.874812][ T6065] veth0_macvtap: entered promiscuous mode
[   95.881066][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.882930][ T6065] veth1_macvtap: entered promiscuous mode
[   95.906532][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.932736][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.954283][ T5674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.962246][ T5674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.982810][ T5674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.988024][ T5674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.033409][ T6229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.84'.
[   96.088055][  T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.092511][  T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.119271][  T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.122284][  T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.003174][ T6273] netlink: 'syz.1.90': attribute type 3 has an invalid length.
[   97.030191][ T5854] Bluetooth: hci3: command tx timeout
[   97.055073][ T6275] netlink: 220 bytes leftover after parsing attributes in process `syz.1.91'.
[   97.065458][ T6275] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[   97.182024][ T5854] Bluetooth: hci4: command tx timeout
[   97.281192][ T6286] netlink: 14 bytes leftover after parsing attributes in process `syz.4.95'.
[   99.197021][ T6360] delete_channel: no stack
[   99.303497][ T6370] netlink: 'syz.1.115': attribute type 40 has an invalid length.
[   99.339624][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.987861][ T6396] netlink: 'syz.4.129': attribute type 1 has an invalid length.
[   99.996545][ T6396] netlink: 'syz.4.129': attribute type 4 has an invalid length.
[   99.999731][ T6396] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.129'.
[  100.014101][ T6396] netlink: 'syz.4.129': attribute type 1 has an invalid length.
[  100.017401][ T6396] netlink: 'syz.4.129': attribute type 4 has an invalid length.
[  100.033320][ T6396] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.129'.
[  100.200747][ T6407] netlink: 26 bytes leftover after parsing attributes in process `syz.3.132'.
[  100.648991][ T6433] netlink: 'syz.3.141': attribute type 12 has an invalid length.
[  100.651774][ T6433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.141'.
[  102.462499][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'.
[  103.013784][ T6529] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'.
[  103.134178][ T6539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.174'.
[  103.138133][ T6539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.174'.
[  103.146764][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.174'.
[  103.403625][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.179'.
[  103.426470][ T6557] veth0_vlan: entered allmulticast mode
[  103.637758][ T6559] veth0_vlan: left promiscuous mode
[  103.652490][ T6559] veth0_vlan: entered promiscuous mode
[  103.979365][ T6566] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.832001][ T6590] syz.1.195 uses obsolete (PF_INET,SOCK_PACKET)
[  104.919612][ T6590] netlink: 72 bytes leftover after parsing attributes in process `syz.1.195'.
[  105.108899][ T6590] netlink: 72 bytes leftover after parsing attributes in process `syz.1.195'.
[  105.637586][ T6584] syz.4.192: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  105.645646][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.4.192 Not tainted syzkaller #0 PREEMPT(full) 
[  105.645659][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.645666][ T6584] Call Trace:
[  105.645670][ T6584]  <TASK>
[  105.645687][ T6584]  dump_stack_lvl+0x189/0x250
[  105.645706][ T6584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.645715][ T6584]  ? __pfx__printk+0x10/0x10
[  105.645732][ T6584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  105.645744][ T6584]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  105.645754][ T6584]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  105.645764][ T6584]  warn_alloc+0x214/0x310
[  105.645778][ T6584]  ? stack_depot_save_flags+0x41b/0x860
[  105.645790][ T6584]  ? __pfx_warn_alloc+0x10/0x10
[  105.645802][ T6584]  ? kasan_save_track+0x4f/0x80
[  105.645812][ T6584]  ? xskq_create+0x56/0x170
[  105.645823][ T6584]  ? xsk_init_queue+0xb0/0x110
[  105.645831][ T6584]  ? xsk_setsockopt+0x57b/0x8d0
[  105.645839][ T6584]  ? do_sock_setsockopt+0x17c/0x1b0
[  105.645846][ T6584]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  105.645852][ T6584]  ? do_syscall_64+0xfa/0x3b0
[  105.645863][ T6584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.645875][ T6584]  __vmalloc_node_range_noprof+0x125/0x12f0
[  105.645899][ T6584]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  105.645912][ T6584]  ? __kasan_kmalloc+0x93/0xb0
[  105.645924][ T6584]  vmalloc_user_noprof+0xad/0xf0
[  105.645934][ T6584]  ? xskq_create+0xbf/0x170
[  105.645944][ T6584]  xskq_create+0xbf/0x170
[  105.645955][ T6584]  xsk_init_queue+0xb0/0x110
[  105.645965][ T6584]  xsk_setsockopt+0x57b/0x8d0
[  105.645975][ T6584]  ? __pfx_xsk_setsockopt+0x10/0x10
[  105.645984][ T6584]  ? __pfx_aa_sk_perm+0x10/0x10
[  105.645997][ T6584]  ? __fget_files+0x2a/0x420
[  105.646003][ T6584]  ? aa_sock_opt_perm+0xff/0x1b0
[  105.646012][ T6584]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  105.646020][ T6584]  ? __pfx_xsk_setsockopt+0x10/0x10
[  105.646030][ T6584]  do_sock_setsockopt+0x17c/0x1b0
[  105.646039][ T6584]  __x64_sys_setsockopt+0x13f/0x1b0
[  105.646048][ T6584]  do_syscall_64+0xfa/0x3b0
[  105.646058][ T6584]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.646068][ T6584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.646075][ T6584]  ? exc_page_fault+0x9f/0xf0
[  105.646085][ T6584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.646114][ T6584] RIP: 0033:0x7ff23e98eba9
[  105.646124][ T6584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.646131][ T6584] RSP: 002b:00007ff23f8e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  105.646140][ T6584] RAX: ffffffffffffffda RBX: 00007ff23ebd5fa0 RCX: 00007ff23e98eba9
[  105.646146][ T6584] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  105.646150][ T6584] RBP: 00007ff23ea11e19 R08: 0000000000000004 R09: 0000000000000000
[  105.646155][ T6584] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  105.646159][ T6584] R13: 00007ff23ebd6038 R14: 00007ff23ebd5fa0 R15: 00007ffef59cda98
[  105.646172][ T6584]  </TASK>
[  105.646209][ T6584] Mem-Info:
[  105.688372][ T6590] netlink: 72 bytes leftover after parsing attributes in process `syz.1.195'.
[  105.710209][ T6584] active_anon:6850 inactive_anon:0 isolated_anon:0
[  105.710209][ T6584]  active_file:1250 inactive_file:38253 isolated_file:0
[  105.710209][ T6584]  unevictable:1768 dirty:176 writeback:0
[  105.710209][ T6584]  slab_reclaimable:9680 slab_unreclaimable:53608
[  105.710209][ T6584]  mapped:18108 shmem:2463 pagetables:1156
[  105.710209][ T6584]  sec_pagetables:0 bounce:0
[  105.710209][ T6584]  kernel_misc_reclaimable:0
[  105.710209][ T6584]  free:304242 free_pcp:13630 free_cma:0
[  105.792157][ T6584] Node 0 active_anon:17640kB inactive_anon:0kB active_file:4032kB inactive_file:150076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12820kB dirty:548kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4044kB pagetables:2408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  105.823137][ T6584] Node 1 active_anon:9928kB inactive_anon:0kB active_file:968kB inactive_file:2944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59696kB dirty:176kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7976kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  105.837266][ T6584] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  105.848062][ T6584] lowmem_reserve[]: 0 811 811 811 811
[  105.873815][ T6584] Node 0 DMA32 free:354628kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17404kB inactive_anon:0kB active_file:4032kB inactive_file:150076kB unevictable:3536kB writepending:572kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:18208kB local_pcp:14304kB free_cma:0kB
[  105.883712][ T6584] lowmem_reserve[]: 0 0 0 0 0
[  105.886357][ T6584] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  105.896536][ T6584] lowmem_reserve[]: 0 0 854 854 854
[  105.898330][ T6584] Node 1 Normal free:394904kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9968kB inactive_anon:0kB active_file:968kB inactive_file:2944kB unevictable:3536kB writepending:176kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29660kB local_pcp:14592kB free_cma:0kB
[  105.909459][ T6584] lowmem_reserve[]: 0 0 0 0 0
[  105.916229][ T6584] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  105.923803][ T6584] Node 0 DMA32: 1561*4kB (UM) 458*8kB (UM) 393*16kB (UM) 340*32kB (UME) 383*64kB (UME) 170*128kB (UME) 57*256kB (UM) 27*512kB (UM) 13*1024kB (UME) 11*2048kB (UME) 53*4096kB (UM) = 354692kB
[  105.930399][ T6584] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  105.937113][ T6584] Node 1 Normal: 46*4kB (U) 214*8kB (UME) 185*16kB (UE) 266*32kB (UE) 140*64kB (UME) 43*128kB (U) 19*256kB (UM) 3*512kB (ME) 2*1024kB (UE) 1*2048kB (M) 87*4096kB (M) = 394680kB
[  105.945180][ T6584] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  105.948196][ T6584] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  105.951481][ T6584] 41970 total pagecache pages
[  105.953190][ T6584] 0 pages in swap cache
[  105.954538][ T6584] Free swap  = 124996kB
[  105.955949][ T6584] Total swap = 124996kB
[  105.957647][ T6584] 786301 pages RAM
[  105.959198][ T6584] 0 pages HighMem/MovableOnly
[  105.962599][ T6584] 241331 pages reserved
[  105.963968][ T6584] 0 pages cma reserved
[  107.311566][ T6675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.213'.
[  107.328709][ T6681] netlink: 'syz.3.214': attribute type 15 has an invalid length.
[  107.526595][ T6696] netlink: 152 bytes leftover after parsing attributes in process `syz.4.221'.
[  108.969221][ T6747] netlink: 'syz.4.240': attribute type 1 has an invalid length.
[  110.366564][ T6787] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  111.282348][ T6821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.262'.
[  111.406431][ T6826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.264'.
[  112.337892][ T6891] netlink: 'syz.3.285': attribute type 21 has an invalid length.
[  112.373495][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.286'.
[  112.596185][ T6906] netlink: 'syz.3.289': attribute type 10 has an invalid length.
[  112.908357][ T6906] team0 (unregistering): Port device team_slave_0 removed
[  112.947260][ T6906] team0 (unregistering): Port device team_slave_1 removed
[  113.209193][ T5854] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  113.322890][ T6929] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.328848][ T6929] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.483404][ T6940] netlink: 'syz.1.300': attribute type 39 has an invalid length.
[  114.975827][ T6986] netlink: 'syz.4.313': attribute type 21 has an invalid length.
[  114.978809][ T6986] netlink: 'syz.4.313': attribute type 4 has an invalid length.
[  114.981370][ T6986] netlink: 14453 bytes leftover after parsing attributes in process `syz.4.313'.
[  115.302988][ T7016] netlink: 'syz.1.322': attribute type 21 has an invalid length.
[  115.325171][ T7019] netlink: 'syz.3.323': attribute type 3 has an invalid length.
[  115.562340][ T7004] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.319'.
[  115.880269][ T7058] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  116.821456][ T7081] netlink: 763 bytes leftover after parsing attributes in process `syz.1.348'.
[  116.825907][ T5854] Bluetooth: hci4: Malformed LE Event: 0x0d
[  117.587354][ T7118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.364'.
[  117.826112][ T7129] netdevsim netdevsim3: Firmware load for '/../file0' refused, path contains '..' component
[  118.123843][ T7131] syzkaller0: entered promiscuous mode
[  118.126919][ T7131] syzkaller0: entered allmulticast mode
[  119.305727][ T7152] netlink: 'syz.4.379': attribute type 22 has an invalid length.
[  119.308557][ T7152] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.379'.
[  120.176651][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'.
[  120.181294][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'.
[  120.185104][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.385'.
[  120.188919][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.385'.
[  120.438830][ T7176] netlink: 'syz.1.390': attribute type 11 has an invalid length.
[  120.501542][ T7184] netlink: 'syz.1.394': attribute type 21 has an invalid length.
[  120.534351][ T7189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.651287][ T7199] netlink: 'syz.3.400': attribute type 1 has an invalid length.
[  120.653739][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'.
[  120.658562][ T7194] netlink: 'syz.3.400': attribute type 2 has an invalid length.
[  120.672990][ T7194] netlink: 'syz.3.400': attribute type 8 has an invalid length.
[  120.675708][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.400'.
[  120.778226][ T7203] netlink: 'syz.1.403': attribute type 29 has an invalid length.
[  120.789704][ T7203] netlink: 'syz.1.403': attribute type 3 has an invalid length.
[  120.798674][ T7203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.403'.
[  120.816426][ T7205] netlink: 'syz.3.404': attribute type 28 has an invalid length.
[  121.852726][ T7231] Illegal XDP return value 4294967262 on prog  (id 143) dev N/A, expect packet loss!
[  122.545640][ T7234] netlink: 'syz.4.414': attribute type 15 has an invalid length.
[  123.710106][ T7269] netlink: 'syz.4.430': attribute type 25 has an invalid length.
[  123.713534][ T7269] __nla_validate_parse: 3 callbacks suppressed
[  123.713547][ T7269] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.430'.
[  123.766535][ T7271] syzkaller0: entered promiscuous mode
[  123.768530][ T7271] syzkaller0: entered allmulticast mode
[  124.388912][ T7294] netlink: 'syz.4.441': attribute type 10 has an invalid length.
[  124.922556][ T7294] geneve0: entered promiscuous mode
[  124.941759][ T7294] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  124.991276][ T7298] netlink: 'syz.1.443': attribute type 10 has an invalid length.
[  124.994510][ T7298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.443'.
[  124.998516][ T7298] dummy0: entered promiscuous mode
[  125.009236][ T7298] bridge0: port 3(dummy0) entered blocking state
[  125.016194][ T7298] bridge0: port 3(dummy0) entered disabled state
[  125.018949][ T7298] dummy0: entered allmulticast mode
[  125.025463][ T7298] bridge0: port 3(dummy0) entered blocking state
[  125.028786][ T7298] bridge0: port 3(dummy0) entered forwarding state
[  125.148487][ T7302] netlink: 'syz.3.445': attribute type 10 has an invalid length.
[  125.153830][ T7302] netlink: 55 bytes leftover after parsing attributes in process `syz.3.445'.
[  125.188903][ T7313] openvswitch: netlink: IP tunnel dst address not specified
[  125.295908][ T7316] netlink: 72 bytes leftover after parsing attributes in process `syz.1.451'.
[  125.303713][ T7316] netlink: 72 bytes leftover after parsing attributes in process `syz.1.451'.
[  125.320425][ T7314] lo speed is unknown, defaulting to 1000
[  125.654514][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'.
[  125.927536][ T7363] netlink: 'syz.4.465': attribute type 2 has an invalid length.
[  125.930113][ T7363] netlink: 'syz.4.465': attribute type 8 has an invalid length.
[  125.932608][ T7363] netlink: 132 bytes leftover after parsing attributes in process `syz.4.465'.
[  126.642291][ T7363] lo speed is unknown, defaulting to 1000
[  128.958964][ T7406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.481'.
[  129.291909][ T7434] netlink: 'syz.4.493': attribute type 1 has an invalid length.
[  129.480469][ T7445] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.497'.
[  129.913024][ T7456] netlink: 'syz.3.502': attribute type 29 has an invalid length.
[  130.027496][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'.
[  130.965853][ T7489] netlink: 11382 bytes leftover after parsing attributes in process `syz.1.517'.
[  130.994457][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.186076][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.521'.
[  131.200982][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'.
[  131.471256][ T7511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  131.984662][ T7517] netlink: 492 bytes leftover after parsing attributes in process `syz.4.527'.
[  132.207419][ T7538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.537'.
[  132.213626][ T7538] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  132.489008][ T7567] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.551'.
[  132.492566][ T7567] tc_dump_action: action bad kind
[  132.548632][ T7573] netlink: 'syz.3.554': attribute type 9 has an invalid length.
[  132.551274][ T7573] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.554'.
[  132.784446][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.786579][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.370116][ T7591] bond_slave_0: entered promiscuous mode
[  133.372113][ T7591] bond_slave_1: entered promiscuous mode
[  133.734059][ T7602] netlink: 'syz.4.567': attribute type 29 has an invalid length.
[  133.994384][ T7617] __nla_validate_parse: 5 callbacks suppressed
[  133.994395][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'.
[  134.004774][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'.
[  134.007644][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'.
[  134.173860][ T7628] netlink: 'syz.4.576': attribute type 1 has an invalid length.
[  134.176771][ T7628] netlink: 'syz.4.576': attribute type 4 has an invalid length.
[  134.179594][ T7628] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.576'.
[  134.437760][ T7623] option changes via remount are deprecated (pid=7622 comm=syz.3.577)
[  134.784446][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'.
[  134.788049][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'.
[  135.345567][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'.
[  135.368077][ T7678] lo speed is unknown, defaulting to 1000
[  135.471053][ T7681] netlink: 'syz.3.600': attribute type 29 has an invalid length.
[  135.919493][ T7696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.607'.
[  136.225937][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.1.615'.
[  136.232707][ T7714] netlink: 60 bytes leftover after parsing attributes in process `syz.1.615'.
[  136.350171][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.353404][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.365406][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.368564][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.478358][ T7731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.499326][ T7733] netlink: 'syz.4.624': attribute type 10 has an invalid length.
[  136.505119][ T7733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.530551][ T7733] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.546706][ T7733] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  137.996066][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.742767][ T7815] rdma_rxe: rxe_newlink: failed to add lo
[  139.053669][ T7830] netlink: 'syz.1.665': attribute type 11 has an invalid length.
[  140.105897][ T7848] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  140.440171][ T7863] xt_l2tp: missing protocol rule (udp|l2tpip)
[  140.460159][ T5854] Bluetooth: hci1: Opcode 0x206a failed: -110
[  140.462266][ T5854] Bluetooth: hci1: command 0x206a tx timeout
[  140.559103][ T7867] netlink: 'syz.3.679': attribute type 21 has an invalid length.
[  140.562542][ T7867] __nla_validate_parse: 9 callbacks suppressed
[  140.562554][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'.
[  140.749736][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'.
[  140.874838][ T7883] netlink: 180 bytes leftover after parsing attributes in process `syz.1.687'.
[  141.073262][ T7897] : renamed from dummy0 (while UP)
[  141.125293][ T7900] netlink: 188 bytes leftover after parsing attributes in process `syz.4.693'.
[  141.440985][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'.
[  141.491335][ T7911] netlink: 'syz.4.698': attribute type 1 has an invalid length.
[  141.530634][ T7915] netlink: 'syz.4.700': attribute type 4 has an invalid length.
[  141.533502][ T7915] netlink: 168 bytes leftover after parsing attributes in process `syz.4.700'.
[  141.781802][ T7943] netlink: 'syz.4.713': attribute type 7 has an invalid length.
[  141.788083][ T7943] netlink: 'syz.4.713': attribute type 8 has an invalid length.
[  141.811806][ T7945] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.714'.
[  142.172715][ T7962] netlink: 'syz.1.721': attribute type 1 has an invalid length.
[  142.175098][ T7962] netlink: 15534 bytes leftover after parsing attributes in process `syz.1.721'.
[  142.559509][ T7974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.726'.
[  142.563282][ T7974] openvswitch: netlink: Missing key (keys=40, expected=100)
[  142.764985][ T7986] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.731'.
[  142.795399][ T7990] : entered promiscuous mode
[  142.862429][ T7996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.912540][ T8000] netlink: 'syz.4.739': attribute type 10 has an invalid length.
[  142.919263][ T8000] netlink: 'syz.4.739': attribute type 19 has an invalid length.
[  143.196169][ T8013] syzkaller0: entered promiscuous mode
[  143.207690][ T8013] syzkaller0: entered allmulticast mode
[  144.037618][ T8037] netlink: 'syz.3.755': attribute type 64 has an invalid length.
[  144.742902][ T8027] bridge0: port 3(dummy0) entered disabled state
[  144.757083][ T8027] dummy0 (unregistering): left allmulticast mode
[  144.759829][ T8027] bridge0: port 3(dummy0) entered disabled state
[  145.267577][ T8068] netlink: 'syz.4.770': attribute type 3 has an invalid length.
[  145.544519][ T8088] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  146.314108][ T8127] validate_nla: 1 callbacks suppressed
[  146.314147][ T8127] netlink: 'syz.3.795': attribute type 10 has an invalid length.
[  146.338003][ T8130] __nla_validate_parse: 7 callbacks suppressed
[  146.338022][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.796'.
[  146.804467][ T8154] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.806'.
[  146.974203][ T8170] netlink: 'syz.4.815': attribute type 21 has an invalid length.
[  146.976926][ T8170] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.815'.
[  147.019750][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'.
[  149.644366][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'.
[  149.647306][ T8180] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  149.651063][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.716843][ T8188] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.824'.
[  149.720363][ T8191] netlink: 'syz.1.825': attribute type 21 has an invalid length.
[  149.722712][ T8191] netlink: 128 bytes leftover after parsing attributes in process `syz.1.825'.
[  149.725749][ T8191] netlink: 'syz.1.825': attribute type 5 has an invalid length.
[  149.728507][ T8191] netlink: 3 bytes leftover after parsing attributes in process `syz.1.825'.
[  149.824443][ T8195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.826'.
[  150.198019][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'.
[  150.715039][ T8258] IPv6: Can't replace route, no match found
[  150.753683][ T8262] netlink: 'syz.3.855': attribute type 10 has an invalid length.
[  150.960832][ T8280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.237677][ T8303] netlink: 'syz.3.876': attribute type 21 has an invalid length.
[  151.257068][ T8303] netlink: 'syz.3.876': attribute type 4 has an invalid length.
[  151.262394][ T8303] netlink: 'syz.3.876': attribute type 5 has an invalid length.
[  151.783958][ T8355] syzkaller0: entered promiscuous mode
[  151.786195][ T8355] syzkaller0: entered allmulticast mode
[  152.152777][ T8372] __nla_validate_parse: 9 callbacks suppressed
[  152.152792][ T8372] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.909'.
[  153.321779][ T8399] netlink: 92 bytes leftover after parsing attributes in process `syz.3.914'.
[  153.324782][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'.
[  153.327964][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'.
[  153.358587][ T8399] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.914'.
[  153.410896][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'.
[  153.433735][ T8396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.914'.
[  154.121329][ T8427] lo speed is unknown, defaulting to 1000
[  154.304777][ T5234] Bluetooth: hci3: Malformed LE Event: 0x0d
[  154.578139][ T8461] netlink: 'syz.3.942': attribute type 21 has an invalid length.
[  154.585553][ T8461] netlink: 'syz.3.942': attribute type 20 has an invalid length.
[  155.365342][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'.
[  155.368815][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.951'.
[  155.378536][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'.
[  155.678159][ T8495] netlink: 'syz.3.958': attribute type 10 has an invalid length.
[  156.706550][ T8495] dummy0: entered promiscuous mode
[  156.709609][ T8495] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  157.035678][ T8518] : renamed from team_slave_1
[  157.513784][ T8530] netlink: 'syz.3.973': attribute type 4 has an invalid length.
[  157.517036][ T8530] __nla_validate_parse: 3 callbacks suppressed
[  157.517051][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'.
[  157.574490][ T8534] netlink: 'syz.3.975': attribute type 3 has an invalid length.
[  157.577549][ T8534] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.975'.
[  157.722441][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'.
[  157.773341][ T5234] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4
[  157.893718][ T8552] netlink: 'syz.1.984': attribute type 1 has an invalid length.
[  157.954987][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'.
[  158.059292][ T8548] netlink: 60 bytes leftover after parsing attributes in process `syz.3.982'.
[  158.133564][ T8560] netlink: 'syz.3.987': attribute type 27 has an invalid length.
[  158.136056][ T8560] netlink: 'syz.3.987': attribute type 4 has an invalid length.
[  158.138449][ T8560] netlink: 144 bytes leftover after parsing attributes in process `syz.3.987'.
[  158.316846][ T8574] xt_l2tp: missing protocol rule (udp|l2tpip)
[  158.592515][ T8584] netlink: 'syz.1.999': attribute type 2 has an invalid length.
[  158.607784][ T8582] netlink: 10 bytes leftover after parsing attributes in process `syz.3.998'.
[  158.827939][ T5234] Bluetooth: hci4: unexpected event 0x36 length: 15 > 7
[  159.232004][ T8601] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1006'.
[  159.601540][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1010'.
[  159.706734][ T8616] delete_channel: no stack
[  159.754460][ T8614] netlink: 'syz.4.1011': attribute type 4 has an invalid length.
[  159.758355][ T8614] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1011'.
[  160.184329][ T8614] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.341745][ T8629] netlink: 'syz.1.1017': attribute type 21 has an invalid length.
[  160.666609][ T8642] netlink: 'syz.4.1022': attribute type 2 has an invalid length.
[  160.670149][ T8642] netlink: 'syz.4.1022': attribute type 1 has an invalid length.
[  160.674258][ T8642] nbd: must specify at least one socket
[  167.342767][ T8712] netlink: 'syz.4.1049': attribute type 2 has an invalid length.
[  168.430952][ T8725] __nla_validate_parse: 11 callbacks suppressed
[  168.430971][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'.
[  168.447846][ T8724] netlink: 'syz.1.1054': attribute type 10 has an invalid length.
[  168.451300][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'.
[  168.523012][ T5234] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4
[  169.217017][ T8724] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  169.350812][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'.
[  169.354387][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'.
[  169.532023][ T8745] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1060'.
[  169.537204][ T8744] netlink: 64019 bytes leftover after parsing attributes in process `syz.1.1062'.
[  169.560388][ T8739] lo speed is unknown, defaulting to 1000
[  170.598483][ T8796] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1081'.
[  170.931102][ T8811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  171.236609][ T8815] netlink: 'syz.4.1090': attribute type 1 has an invalid length.
[  171.646975][ T8831] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1097'.
[  171.703058][ T8833] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1098'.
[  171.943849][ T8844] netlink: 'syz.3.1103': attribute type 41 has an invalid length.
[  171.946522][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1103'.
[  174.881023][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'.
[  175.064014][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1114'.
[  175.395752][ T8898] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1127'.
[  175.422855][ T8898] bond0: (slave dummy0): Releasing backup interface
[  175.922520][ T8931] sctp: [Deprecated]: syz.3.1141 (pid 8931) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.922520][ T8931] Use struct sctp_sack_info instead
[  176.017438][ T8939] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1130'.
[  176.490451][ T8957] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1147'.
[  176.494458][ T8957] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1147'.
[  176.795546][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'.
[  176.810129][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'.
[  176.916694][ T8980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1156'.
[  177.003034][ T8978] netlink: 'syz.1.1155': attribute type 6 has an invalid length.
[  177.005490][ T8978] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1155'.
[  177.021356][ T8986] netlink: 'syz.3.1159': attribute type 19 has an invalid length.
[  177.480685][ T8997] sit0: entered allmulticast mode
[  177.506406][ T8997] sit0: entered promiscuous mode
[  177.714169][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  178.687423][ T9035] : renamed from veth0_to_bond (while UP)
[  178.857681][ T9048] netlink: 'syz.3.1186': attribute type 6 has an invalid length.
[  179.384294][ T9066] netlink: 'syz.1.1192': attribute type 10 has an invalid length.
[  179.391367][ T9066] ipvlan1: entered promiscuous mode
[  179.393151][ T9066] ipvlan1: entered allmulticast mode
[  179.426987][ T9066] bridge0: port 3(ipvlan1) entered blocking state
[  179.430461][ T9066] bridge0: port 3(ipvlan1) entered disabled state
[  179.459032][ T9066] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  180.685271][ T9101] __nla_validate_parse: 6 callbacks suppressed
[  180.685285][ T9101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1206'.
[  180.691458][ T9099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1206'.
[  181.396928][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'.
[  181.536138][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'.
[  181.539130][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1220'.
[  181.542244][ T9131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1220'.
[  181.593078][ T5234] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3
[  181.879104][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1223'.
[  182.618848][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'.
[  182.733920][ T9164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1232'.
[  182.927553][ T5234] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  183.472727][ T9223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1261'.
[  183.509373][ T9224] netlink: 'syz.3.1257': attribute type 1 has an invalid length.
[  183.674296][ T5234] Bluetooth: hci1: command 0x206a tx timeout
[  185.049387][ T9308] netlink: 'syz.3.1294': attribute type 1 has an invalid length.
[  185.798045][ T9335] netlink: 'syz.3.1311': attribute type 2 has an invalid length.
[  185.817350][ T9337] IPv6: NLM_F_CREATE should be specified when creating new route
[  185.892657][ T9340] __nla_validate_parse: 4 callbacks suppressed
[  185.892668][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'.
[  185.898051][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'.
[  186.878875][ T9356] raw_sendmsg: syz.3.1316 forgot to set AF_INET. Fix it!
[  186.909683][ T9357] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  186.982588][ T9356] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1316'.
[  187.323188][ T9383] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1331'.
[  187.429094][ T9394] netlink: 'syz.4.1337': attribute type 3 has an invalid length.
[  187.533382][ T9406] netlink: 'syz.1.1343': attribute type 1 has an invalid length.
[  187.536780][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'.
[  187.826591][ T9426] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1352'.
[  187.829814][ T9426] unsupported nlmsg_type 40
[  187.871676][ T9430] netlink: 'syz.4.1354': attribute type 3 has an invalid length.
[  187.874160][ T9430] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1354'.
[  188.094500][ T9456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1367'.
[  188.098411][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1366'.
[  188.108296][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1366'.
[  188.455326][ T9484] netlink: 'syz.3.1380': attribute type 8 has an invalid length.
[  188.626518][ T9493] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  188.632514][ T9493] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.636893][ T9531] netlink: 'syz.4.1397': attribute type 4 has an invalid length.
[  189.639561][ T9531] .`: renamed from bond0
[  190.195062][ T9561] openvswitch: netlink: IPv6 tunnel dst address is zero
[  190.672034][ T9590] netlink: 'syz.1.1422': attribute type 33 has an invalid length.
[  191.043070][ T9610] TCP: TCP_TX_DELAY enabled
[  191.180046][ T5234] Bluetooth: hci1: command 0x206a tx timeout
[  191.205862][ T9618] lo speed is unknown, defaulting to 1000
[  191.234038][ T5854] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  191.237615][ T5854] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  191.643012][ T9632] netlink: 'syz.3.1441': attribute type 26 has an invalid length.
[  191.879067][ T5854] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3
[  192.537242][ T9668] lo speed is unknown, defaulting to 1000
[  192.565797][ T9673] __nla_validate_parse: 8 callbacks suppressed
[  192.565820][ T9673] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.1459'.
[  192.668136][ T9647] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  193.026139][ T9678] openvswitch: netlink: Unknown key attributes 1
[  193.304225][ T9690] netlink: 'syz.3.1466': attribute type 4 has an invalid length.
[  193.533517][ T9697] syzkaller0: entered promiscuous mode
[  193.543388][ T9697] syzkaller0: entered allmulticast mode
[  193.742254][ T9695] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1468'.
[  194.173061][ T9704] netlink: 'syz.3.1472': attribute type 3 has an invalid length.
[  194.176096][ T9704] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1472'.
[  194.234334][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.236297][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.268297][ T9710] netlink: 'syz.1.1474': attribute type 2 has an invalid length.
[  194.272303][ T9710] netlink: 'syz.1.1474': attribute type 1 has an invalid length.
[  194.275183][ T9710] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1474'.
[  194.278267][ T9710] nbd: couldn't find a device at index 16
[  194.313805][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'.
[  195.431267][ T9746] netlink: 4764 bytes leftover after parsing attributes in process `syz.3.1488'.
[  195.437514][ T9746] netlink: 4764 bytes leftover after parsing attributes in process `syz.3.1488'.
[  195.517007][ T9752] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1491'.
[  195.531537][ T9754] netdevsim netdevsim4: Direct firmware load for  failed with error -2
[  195.534248][ T9754] netdevsim netdevsim4: Falling back to sysfs fallback for: 
[  195.599290][ T9763] netlink: 'syz.1.1494': attribute type 27 has an invalid length.
[  195.602046][ T9763] netlink: 'syz.1.1494': attribute type 4 has an invalid length.
[  195.604513][ T9763] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1494'.
[  195.669658][ T9768] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1496'.
[  195.673956][ T9768] netlink: 'syz.1.1496': attribute type 1 has an invalid length.
[  195.709681][ T9770] netlink: 'syz.1.1497': attribute type 2 has an invalid length.
[  195.713158][ T9770] netlink: 'syz.1.1497': attribute type 8 has an invalid length.
[  196.155106][ T5854] Bluetooth: hci3: Malformed LE Event: 0x1d
[  196.252314][ T9803] netlink: 'syz.3.1512': attribute type 2 has an invalid length.
[  196.547685][ T9831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.748445][ T9869] siw: device registration error -23
[  197.755079][ T9865] syzkaller0: entered promiscuous mode
[  197.757403][ T9865] syzkaller0: entered allmulticast mode
[  197.781930][ T9872] netlink: 'syz.3.1543': attribute type 5 has an invalid length.
[  199.274335][ T9906] netlink: 'syz.1.1558': attribute type 29 has an invalid length.
[  199.278600][ T9906] netlink: 'syz.1.1558': attribute type 29 has an invalid length.
[  199.460615][ T9918] netlink: 'syz.3.1564': attribute type 10 has an invalid length.
[  200.569069][ T9943] __nla_validate_parse: 4 callbacks suppressed
[  200.569087][ T9943] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1572'.
[  201.520414][ T9946] netlink: 8153 bytes leftover after parsing attributes in process `syz.3.1574'.
[  201.524319][ T9946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.796225][ T9949] validate_nla: 2 callbacks suppressed
[  201.796249][ T9949] netlink: 'syz.1.1573': attribute type 10 has an invalid length.
[  201.836558][ T9949] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.852495][ T9949] team0: Port device bond0 added
[  206.383287][ T9964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.415088][ T9965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1580'.
[  210.848228][ T9981] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1589'.
[  211.663338][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  211.666103][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  213.325913][    C0] ==================================================================
[  213.328958][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  213.331972][    C0] Write of size 8 at addr ffff888026f2a430 by task swapper/0/0
[  213.335517][    C0] 
[  213.336871][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  213.336887][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.336895][    C0] Call Trace:
[  213.336904][    C0]  <IRQ>
[  213.336910][    C0]  dump_stack_lvl+0x189/0x250
[  213.336930][    C0]  ? rcu_is_watching+0x15/0xb0
[  213.336944][    C0]  ? __kasan_check_byte+0x12/0x40
[  213.336963][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.336976][    C0]  ? rcu_is_watching+0x15/0xb0
[  213.336987][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  213.337004][    C0]  ? lock_release+0x4b/0x3e0
[  213.337025][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  213.337040][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  213.337082][    C0]  print_report+0xca/0x240
[  213.337095][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  213.337113][    C0]  kasan_report+0x118/0x150
[  213.337131][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  213.337153][    C0]  __xfrm_state_delete+0x696/0xca0
[  213.337177][    C0]  xfrm_timer_handler+0x18f/0xa00
[  213.337195][    C0]  ? __hrtimer_run_queues+0x408/0xc60
[  213.337211][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  213.337227][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  213.337244][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.337263][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.337277][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.337296][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  213.337313][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  213.337330][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  213.337352][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  213.337367][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  213.337384][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  213.337400][    C0]  handle_softirqs+0x286/0x870
[  213.337414][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  213.337428][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  213.337443][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  213.337461][    C0]  __irq_exit_rcu+0xca/0x1f0
[  213.337473][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  213.337489][    C0]  irq_exit_rcu+0x9/0x30
[  213.337499][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.337516][    C0]  </IRQ>
[  213.337520][    C0]  <TASK>
[  213.337529][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.337545][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  213.337562][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  213.337572][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  213.337584][    C0] RAX: e4b19cbec9fd0500 RBX: ffffffff819683a8 RCX: e4b19cbec9fd0500
[  213.337594][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6a7d RDI: ffffffff8be33300
[  213.337603][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  213.337612][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38030
[  213.337621][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  213.337631][    C0]  ? do_idle+0x1e8/0x510
[  213.337647][    C0]  default_idle+0x13/0x20
[  213.337657][    C0]  default_idle_call+0x74/0xb0
[  213.337669][    C0]  do_idle+0x1e8/0x510
[  213.337683][    C0]  ? __pfx_do_idle+0x10/0x10
[  213.337703][    C0]  cpu_startup_entry+0x44/0x60
[  213.337714][    C0]  rest_init+0x2de/0x300
[  213.337727][    C0]  start_kernel+0x3a9/0x410
[  213.337743][    C0]  x86_64_start_reservations+0x24/0x30
[  213.337760][    C0]  x86_64_start_kernel+0x143/0x1c0
[  213.337776][    C0]  common_startup_64+0x13e/0x147
[  213.337803][    C0]  </TASK>
[  213.337807][    C0] 
[  213.467611][    C0] Allocated by task 8920:
[  213.469252][    C0]  kasan_save_track+0x3e/0x80
[  213.471028][    C0]  __kasan_slab_alloc+0x6c/0x80
[  213.472892][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  213.474960][    C0]  xfrm_state_alloc+0x24/0x2f0
[  213.476786][    C0]  __find_acq_core+0x8a7/0x1c00
[  213.478638][    C0]  xfrm_find_acq+0x78/0xa0
[  213.480340][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  213.482250][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.484141][    C0]  netlink_rcv_skb+0x208/0x470
[  213.485946][    C0]  xfrm_netlink_rcv+0x79/0x90
[  213.487722][    C0]  netlink_unicast+0x82f/0x9e0
[  213.489531][    C0]  netlink_sendmsg+0x805/0xb30
[  213.491368][    C0]  __sock_sendmsg+0x21c/0x270
[  213.493133][    C0]  ____sys_sendmsg+0x505/0x830
[  213.494935][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  213.496711][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  213.498535][    C0]  do_syscall_64+0xfa/0x3b0
[  213.500247][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.502438][    C0] 
[  213.503323][    C0] Freed by task 794:
[  213.504771][    C0]  kasan_save_track+0x3e/0x80
[  213.506547][    C0]  kasan_save_free_info+0x46/0x50
[  213.508411][    C0]  __kasan_slab_free+0x5b/0x80
[  213.510214][    C0]  kmem_cache_free+0x18f/0x400
[  213.512024][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  213.513901][    C0]  process_scheduled_works+0xae1/0x17b0
[  213.515949][    C0]  worker_thread+0x8a0/0xda0
[  213.517688][    C0]  kthread+0x711/0x8a0
[  213.519303][    C0]  ret_from_fork+0x3fc/0x770
[  213.521009][    C0]  ret_from_fork_asm+0x1a/0x30
[  213.522778][    C0] 
[  213.523691][    C0] The buggy address belongs to the object at ffff888026f2a400
[  213.523691][    C0]  which belongs to the cache xfrm_state of size 928
[  213.528821][    C0] The buggy address is located 48 bytes inside of
[  213.528821][    C0]  freed 928-byte region [ffff888026f2a400, ffff888026f2a7a0)
[  213.533816][    C0] 
[  213.534750][    C0] The buggy address belongs to the physical page:
[  213.537126][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026f2b180 pfn:0x26f28
[  213.540834][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  213.543947][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  213.546769][    C0] page_type: f5(slab)
[  213.548257][    C0] raw: 00fff00000000040 ffff888104fad640 dead000000000122 0000000000000000
[  213.551420][    C0] raw: ffff888026f2b180 00000000800e0007 00000000f5000000 0000000000000000
[  213.554584][    C0] head: 00fff00000000040 ffff888104fad640 dead000000000122 0000000000000000
[  213.557754][    C0] head: ffff888026f2b180 00000000800e0007 00000000f5000000 0000000000000000
[  213.561054][    C0] head: 00fff00000000002 ffffea00009bca01 00000000ffffffff 00000000ffffffff
[  213.564345][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  213.567641][    C0] page dumped because: kasan: bad access detected
[  213.570129][    C0] page_owner tracks the page as allocated
[  213.572275][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5920, tgid 5916 (syz.2.5), ts 68784591752, free_ts 68660985700
[  213.579161][    C0]  post_alloc_hook+0x240/0x2a0
[  213.580967][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  213.583087][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  213.585236][    C0]  alloc_pages_mpol+0x232/0x4a0
[  213.587064][    C0]  allocate_slab+0x8a/0x370
[  213.588765][    C0]  ___slab_alloc+0xbeb/0x1410
[  213.590519][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  213.592559][    C0]  xfrm_state_alloc+0x24/0x2f0
[  213.594371][    C0]  xfrm_add_sa+0x17d1/0x4070
[  213.596105][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.597971][    C0]  netlink_rcv_skb+0x208/0x470
[  213.599757][    C0]  xfrm_netlink_rcv+0x79/0x90
[  213.601509][    C0]  netlink_unicast+0x82f/0x9e0
[  213.603311][    C0]  netlink_sendmsg+0x805/0xb30
[  213.605130][    C0]  __sock_sendmsg+0x21c/0x270
[  213.606906][    C0]  ____sys_sendmsg+0x505/0x830
[  213.608721][    C0] page last free pid 5852 tgid 5852 stack trace:
[  213.611056][    C0]  __free_frozen_pages+0xbc4/0xd30
[  213.612945][    C0]  __put_partials+0x156/0x1a0
[  213.614705][    C0]  put_cpu_partial+0x17c/0x250
[  213.616511][    C0]  __slab_free+0x2d5/0x3c0
[  213.618197][    C0]  qlist_free_all+0x97/0x140
[  213.619885][    C0]  kasan_quarantine_reduce+0x148/0x160
[  213.621907][    C0]  __kasan_slab_alloc+0x22/0x80
[  213.623730][    C0]  __kmalloc_cache_noprof+0x1be/0x3d0
[  213.625706][    C0]  nsim_fib_event_work+0x835/0x3180
[  213.627698][    C0]  process_scheduled_works+0xae1/0x17b0
[  213.629770][    C0]  worker_thread+0x8a0/0xda0
[  213.631492][    C0]  kthread+0x711/0x8a0
[  213.633004][    C0]  ret_from_fork+0x3fc/0x770
[  213.634755][    C0]  ret_from_fork_asm+0x1a/0x30
[  213.636529][    C0] 
[  213.637442][    C0] Memory state around the buggy address:
[  213.639517][    C0]  ffff888026f2a300: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  213.642467][    C0]  ffff888026f2a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  213.645416][    C0] >ffff888026f2a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.648356][    C0]                                      ^
[  213.650409][    C0]  ffff888026f2a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.653354][    C0]  ffff888026f2a500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  213.656278][    C0] ==================================================================
[  213.659327][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  213.661981][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  213.665314][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.669082][    C0] Call Trace:
[  213.670335][    C0]  <IRQ>
[  213.671418][    C0]  dump_stack_lvl+0x99/0x250
[  213.673146][    C0]  ? __asan_memcpy+0x40/0x70
[  213.674872][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.676885][    C0]  ? __pfx__printk+0x10/0x10
[  213.678696][    C0]  vpanic+0x281/0x750
[  213.680229][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  213.682160][    C0]  ? __pfx_vpanic+0x10/0x10
[  213.683917][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.686321][    C0]  panic+0xb9/0xc0
[  213.687789][    C0]  ? __pfx_panic+0x10/0x10
[  213.689495][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  213.691736][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.694173][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  213.696135][    C0]  check_panic_on_warn+0x89/0xb0
[  213.697977][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  213.699923][    C0]  end_report+0x78/0x160
[  213.701519][    C0]  kasan_report+0x129/0x150
[  213.703240][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  213.705299][    C0]  __xfrm_state_delete+0x696/0xca0
[  213.707239][    C0]  xfrm_timer_handler+0x18f/0xa00
[  213.709139][    C0]  ? __hrtimer_run_queues+0x408/0xc60
[  213.711145][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  213.713229][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  213.715409][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.717432][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.719647][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.721993][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  213.724157][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  213.726240][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  213.728203][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  213.730413][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  213.732615][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  213.734571][    C0]  handle_softirqs+0x286/0x870
[  213.736369][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  213.738146][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  213.740094][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  213.742068][    C0]  __irq_exit_rcu+0xca/0x1f0
[  213.743800][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  213.745740][    C0]  irq_exit_rcu+0x9/0x30
[  213.747360][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.749444][    C0]  </IRQ>
[  213.750546][    C0]  <TASK>
[  213.751654][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.754014][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  213.756152][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  213.763257][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  213.765583][    C0] RAX: e4b19cbec9fd0500 RBX: ffffffff819683a8 RCX: e4b19cbec9fd0500
[  213.768522][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6a7d RDI: ffffffff8be33300
[  213.771607][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  213.774650][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38030
[  213.777619][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  213.780627][    C0]  ? do_idle+0x1e8/0x510
[  213.782243][    C0]  default_idle+0x13/0x20
[  213.783900][    C0]  default_idle_call+0x74/0xb0
[  213.785730][    C0]  do_idle+0x1e8/0x510
[  213.787338][    C0]  ? __pfx_do_idle+0x10/0x10
[  213.789121][    C0]  cpu_startup_entry+0x44/0x60
[  213.790912][    C0]  rest_init+0x2de/0x300
[  213.792523][    C0]  start_kernel+0x3a9/0x410
[  213.794250][    C0]  x86_64_start_reservations+0x24/0x30
[  213.796255][    C0]  x86_64_start_kernel+0x143/0x1c0
[  213.798298][    C0]  common_startup_64+0x13e/0x147
[  213.800179][    C0]  </TASK>
[  213.801990][    C0] Kernel Offset: disabled
[  213.803558][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:29:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000070 RBX=0000000000000070 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888108808237 R9 =1ffff11021101046 R10=dffffc0000000000 R11=ffffffff854f0ab0
R12=dffffc0000000000 R13=ffffffff99af990c R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0b2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32416ff8 CR3=000000010e182000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fedd3c12e53
XMM06=0000000000000000 00007fedd3c12e4d XMM07=0000000000000000 00007fedd3c12e61
XMM08=0000000000000000 00007fedd3c12ee7 XMM09=0000000000000000 00007fedd3c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003e RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000003e RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0068
R8 =0000000000000000 R9 =ffffffff81ae033e R10=0000000000000003 R11=ffffffff81703490
R12=0000000010003c65 R13=dffffc0000000000 R14=000000000000003e R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff23f8c16c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff7d021b8c CR3=000000011f548000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
