last executing test programs:

9m48.285191686s ago: executing program 32 (id=843):
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x89d, 0x9010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0xb1}, 0xce6b9b20411c71d4, 0x800000000000ca, 0x0, 0x3, 0x4, 0x1, 0xf362, 0x0, 0x773a, 0x0, 0x3ff}, 0x0, 0xa, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB], 0x9a)

9m20.651801046s ago: executing program 33 (id=976):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180))

8m22.283303787s ago: executing program 34 (id=1648):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000070605f94e9cdebd146d24d10000000000000000030000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40c0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
socket$kcm(0x23, 0x5, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'batadv0\x00', @local})
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000002600090123ca9e4687eac3fa940000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

7m53.567826444s ago: executing program 5 (id=2007):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

7m53.373755746s ago: executing program 5 (id=2008):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x22002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x5, 0x0, 0x1, 0x6, 0x4, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000000400000004000000010000000000"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x116da, 0x4, 0x98, 0x0, 0x8, 0xfffff271, 0x7ff7, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180300003f0007012bbd700000000000017c0000e402fc80b00215806a4b4767ef29e5317dbe81cb7de0203ee72ec55ce049121c273120d45f7f360500109f58472b6d5371afc5ca2de5a1c14cbfedfa5363edd2ccc02813c08d1df81c7c15f732285519470ddf35cf5cf5fc8c71b4aa5351828f2f57af12e5d98e2eb4a849e4328e2cb8e61c024296f5ad2d351a5c7960dca8d98cc8fe8e8a48809ea287b746136d79be7cf397275f5d5cddc331f54ff9f7bc97dbc71329085b28dadfd8d25dc1b1f0036e96cef4a01d64e238c23e29774334769f32fe03806535641f5d37003d1d74881c9e9b73792b7c5f5871b49f3dac0ef126e466cb349bf67e5459bb69c6014780", @ANYRES32, @ANYBLOB="3d3668c91db02d5da40b867662c8238467dec63baa8faa428f086cdffaf2d95157392235c8aaff9de9dcb900a000a166ba80322accf55c0c767755bc1ab7084522b51d536b8940b4090df7caaef7907d665fcc01d1c05cd79956f7779696daafee87331484887e2bae20241cc6af0bef4b7c66968a77b38b22493aabf251316820cac664c5a63d9053fe1fc081f99f965d07a220117c951b534abc8fc79bea699d15e670a9d71eb71da6d56e976f907406551dfe19e03bfb092757792fa8228c28bab6f430cca7e930a1ea4a5dc03e5794e664ad34938ae1dc14440f12392832fff021000000c7002500b16659d73a3e415dfc3286bf8fee575ddc0ef3e6eef9505912b264644cecae2d0368668a5624ab70ae7a488178ff81d41e8c4e0f1b058f0d5e5eca09cf130422285017e5fa8451c635277015f246a6cbda429d5fa753de667ea24b34c7c6ed32fd74a9706e7a65ee41ddcb1ec19e3abf4c37d6c16d77f29d22e4ea088975b9b418b645d43e19a9738809987bcb185e3df3b4839330a01a7c62010c993e48569a225ac133ae44fe5270431128f74670ed7baf3f303d65377c4bbc7f82076cdfacdc1ed6000800e900ac1414bb000005006e000000000008000800", @ANYRES32, @ANYBLOB="0c00018008000600", @ANYRES32, @ANYBLOB="0c000280050023000000000008000500", @ANYRES32=r0], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

7m52.712685669s ago: executing program 5 (id=2020):
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x1e, 0x4, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000340)={r0})

7m52.608414691s ago: executing program 5 (id=2022):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008884)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x4000080)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x4008030)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
getpid()

7m52.491767788s ago: executing program 5 (id=2023):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m52.207895779s ago: executing program 5 (id=2024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4d71, 0x4042, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x5c00, 0x2, 0x103, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xe, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000b00040004"], 0x28}, 0x4004881)

7m52.058702776s ago: executing program 35 (id=2024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4d71, 0x4042, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x5c00, 0x2, 0x103, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xe, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000b00040004"], 0x28}, 0x4004881)

7m10.29099061s ago: executing program 0 (id=2486):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0xd0}, 0x480c4)

7m10.202056428s ago: executing program 0 (id=2487):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000000000455a378803f2cd0bc98ad8888d1e", 0xe6}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

7m10.201924425s ago: executing program 0 (id=2488):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2000, &(0x7f0000000040), 0x3b)

7m10.011978664s ago: executing program 0 (id=2490):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0)

7m9.832660956s ago: executing program 0 (id=2491):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547e3987dbdd0000cf000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m9.153340768s ago: executing program 0 (id=2496):
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x4, 0x4, 0x0, 0x0, 0x2901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0xf6f966c023977e93}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)

7m9.14101628s ago: executing program 36 (id=2496):
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x4, 0x4, 0x0, 0x0, 0x2901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340), 0xf6f966c023977e93}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)

6m27.818142311s ago: executing program 7 (id=2871):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe88000000000000000000000000000120010000000000ff273eb90000000000000107144e400000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000003c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0000000000000000000800000000000001000000000000000300000008000000000000002abd700004350000020002002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

6m27.737353931s ago: executing program 7 (id=2872):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600010125bd70000000801e3e0000000800030047"], 0x1c}}, 0x0)

6m27.736369592s ago: executing program 7 (id=2874):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x7a1b, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)='M', 0x1}], 0x2, 0x0, 0x0, 0x4000400}, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x33)

6m27.604771233s ago: executing program 7 (id=2875):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xb, 0x100000001}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x8001, 0x66901, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50)
write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33)

6m27.505236756s ago: executing program 7 (id=2878):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4da2, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0xc, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xff00, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)

6m27.057423778s ago: executing program 7 (id=2881):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x8, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50)

6m11.343216272s ago: executing program 37 (id=2881):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x8, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50)

4m29.921069876s ago: executing program 4 (id=3849):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)

4m29.851703704s ago: executing program 4 (id=3850):
r0 = socket(0x2, 0xa, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000800)

4m29.851436346s ago: executing program 4 (id=3851):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48)
socket$kcm(0xa, 0x922000000003, 0x11)
syz_open_procfs$namespace(0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)

4m29.527353187s ago: executing program 4 (id=3853):
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88450, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x1c}, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/129, 0x81}], 0x1, &(0x7f0000000340)=""/151, 0x97}, 0x40000120)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x48010)

4m29.326673621s ago: executing program 4 (id=3857):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x414a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000008000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc)

4m29.208113057s ago: executing program 4 (id=3858):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}, 0xfc40)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044004)

4m29.034584887s ago: executing program 38 (id=3858):
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x28}, 0xfc40)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044004)

3m26.851308621s ago: executing program 6 (id=4714):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050)

3m26.760453294s ago: executing program 6 (id=4718):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee"], 0x88}}, 0x20000000)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000004080108000000000000000003000009060002400a010000050003003a0000000900010073797a3000000000140004800800014008000005080001400000fd6a"], 0x44}, 0x1, 0x0, 0x0, 0x4004081}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$cgroup_subtree(r3, 0x0, 0x16)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x1)
socket$kcm(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864118781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)

3m24.380616709s ago: executing program 6 (id=4731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x80)

3m24.267385336s ago: executing program 6 (id=4732):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)

3m24.247032437s ago: executing program 6 (id=4733):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x114945, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006580)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

3m23.828753028s ago: executing program 6 (id=4740):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(0x0, 0x18b)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$sock_attach_bpf(r2, 0x6, 0xa, 0x0, 0x0)

3m23.551180419s ago: executing program 39 (id=4740):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(0x0, 0x18b)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$sock_attach_bpf(r2, 0x6, 0xa, 0x0, 0x0)

2m3.691280691s ago: executing program 9 (id=5832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a4000000002"], 0xb8}}, 0x0)

2m3.447236305s ago: executing program 9 (id=5834):
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x80000000}, [@generic={0x6b, 0x1, 0x1, 0x3e}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m3.363566905s ago: executing program 9 (id=5836):
socket$kcm(0x11, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4)
r2 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x40000000, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r6 = socket$kcm(0x2b, 0x1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @remote, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r6)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m3.147058662s ago: executing program 9 (id=5843):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

2m2.872204985s ago: executing program 9 (id=5854):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

2m2.777636796s ago: executing program 9 (id=5857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

2m2.647796177s ago: executing program 40 (id=5857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m18.389086467s ago: executing program 3 (id=6314):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m18.316966179s ago: executing program 3 (id=6316):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x94)

1m18.175979413s ago: executing program 3 (id=6318):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1m18.087817832s ago: executing program 3 (id=6319):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x80054)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x2082, 0x0)

1m17.863599131s ago: executing program 3 (id=6321):
r0 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, &(0x7f0000000180))

1m17.209641991s ago: executing program 3 (id=6327):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001b640)={0x20, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @nested={0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0)

1m17.090284588s ago: executing program 41 (id=6327):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001b640)={0x20, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0xf8}]}, @nested={0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0)

18.018025966s ago: executing program 2 (id=7178):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004"], 0x90}}, 0x4)

17.813799607s ago: executing program 2 (id=7179):
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8901, &(0x7f0000000080))

17.813240055s ago: executing program 2 (id=7180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c00002c000111000001f500010244132403b1fd606412c3258e3d67aa5b0001000000000600000000000000c1264d04000280040003"], 0x64}}, 0x0)

17.813057272s ago: executing program 2 (id=7181):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0xff, 0xfffffffffffffffb}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

16.084624296s ago: executing program 2 (id=7191):
r0 = socket$kcm(0x10, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x111be0, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r1, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x40000000)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0xa38, 0x0, 0x0, 0x0, 0x4b, 0x7fffff, 0x7, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
r2 = socket$kcm(0x23, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)={r3, r3})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000400)=@raw=[@tail_call], &(0x7f0000000440)='GPL\x00', 0x9, 0xbe, &(0x7f0000000500)=""/190, 0x41000, 0x4c, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0x2, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x305)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socket$nl_crypto(0x10, 0x3, 0x15)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)

15.75945926s ago: executing program 2 (id=7200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

15.709100318s ago: executing program 8 (id=7203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000c"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001a00)={r0, &(0x7f0000000a00)="df"}, 0x20)

15.637881798s ago: executing program 8 (id=7205):
r0 = socket$kcm(0xa, 0x2, 0x73)
close(r0)

15.637632665s ago: executing program 8 (id=7206):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x24dfdbf6, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050)

15.577216648s ago: executing program 8 (id=7208):
bpf$ITER_CREATE(0x21, &(0x7f0000000e40), 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=""/85, 0x55}, 0x0)

15.298705631s ago: executing program 8 (id=7212):
mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0)

15.219759071s ago: executing program 8 (id=7213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

2.869491488s ago: executing program 1 (id=7260):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8)

2.869371576s ago: executing program 1 (id=7261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000201030000000000000000000afaff030c0019800800020002000000300002"], 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052)

2.775092537s ago: executing program 1 (id=7262):
close(0x3)
socket$kcm(0x2, 0x1, 0x84)
r0 = getpid()
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a20, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0xb9, 0x5458f7664e16364d, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040)

1.867191s ago: executing program 1 (id=7263):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x20}}, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x16)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r2=>0x0}, 0x8)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10)

1.769389125s ago: executing program 1 (id=7264):
socket(0x10, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x105503, 0x4, 0xf, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x595}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, &(0x7f00000004c0))

1.48823802s ago: executing program 1 (id=7265):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010054}, 0x20040004)

49.321206ms ago: executing program 42 (id=7213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

0s ago: executing program 43 (id=7200):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

kernel console output (not intermixed with test programs):

etdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.248754][ T5636] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.248804][ T5636] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.327456][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.327507][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.370896][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.370948][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.436907][ T5338] 8021q: adding VLAN 0 to HW filter on device eth28
[  464.906056][T15907] netlink: 'syz.6.3922': attribute type 27 has an invalid length.
[  464.908996][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3922'.
[  464.909312][T15907] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  465.116552][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3927'.
[  465.116606][T15921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3927'.
[  465.125789][T15921] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3927'.
[  465.333922][T15936] tipc: Started in network mode
[  465.333995][T15936] tipc: Node identity 805e0004, cluster identity 4711
[  465.334507][T15936] tipc: Node number set to 2153644036
[  465.678442][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3937'.
[  465.793056][ T5604] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  465.964051][T15968] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3943'.
[  466.050490][T15974] netlink: 'syz.8.3945': attribute type 29 has an invalid length.
[  466.063777][T15975] netlink: 'syz.6.3946': attribute type 2 has an invalid length.
[  466.067501][T15975] netlink: 'syz.6.3946': attribute type 2 has an invalid length.
[  466.081283][T15974] netlink: 'syz.8.3945': attribute type 29 has an invalid length.
[  466.413137][T15988] openvswitch: netlink: Tunnel attr 347 out of range max 16
[  468.085924][T16026] __nla_validate_parse: 1 callbacks suppressed
[  468.087502][T16026] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3967'.
[  468.164536][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3967'.
[  468.174822][T16032] pim6reg1: entered promiscuous mode
[  468.174886][T16032] pim6reg1: entered allmulticast mode
[  469.114142][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3989'.
[  469.243880][T16063] netlink: 'syz.9.3983': attribute type 2 has an invalid length.
[  469.286479][T16063] netlink: 'syz.9.3983': attribute type 39 has an invalid length.
[  469.293287][T16063] hsr_slave_0: left promiscuous mode
[  469.375175][T16063] hsr_slave_1: left promiscuous mode
[  469.844605][T16087] sch_tbf: peakrate 2048 is lower than or equals to rate 4294967287 !
[  470.211458][T16115] netlink: 'syz.9.4005': attribute type 10 has an invalid length.
[  470.214105][T16115] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4005'.
[  470.470942][T16143] netlink: 144 bytes leftover after parsing attributes in process `syz.8.4017'.
[  470.759540][T16174] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4032'.
[  470.852687][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4036'.
[  471.119930][T16192] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4040'.
[  471.123630][T16192] openvswitch: netlink: Flow key attr not present in new flow.
[  475.624381][T16230] netlink: 'syz.9.4052': attribute type 1 has an invalid length.
[  475.865379][T16251] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4061'.
[  475.949698][T16261] netlink: 'syz.9.4066': attribute type 8 has an invalid length.
[  476.569498][T16285] netlink: 'syz.8.4072': attribute type 21 has an invalid length.
[  476.597586][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4073'.
[  476.819528][T16299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4077'.
[  476.819581][T16299] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4077'.
[  477.109872][T16321] netlink: 'syz.6.4085': attribute type 8 has an invalid length.
[  477.112923][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'.
[  477.120330][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4085'.
[  477.865470][T16348] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4095'.
[  478.423257][ T4993] Bluetooth: hci2: command 0x0406 tx timeout
[  478.450705][T16374] netlink: 'syz.8.4104': attribute type 29 has an invalid length.
[  478.454731][T16374] netlink: 'syz.8.4104': attribute type 29 has an invalid length.
[  478.463482][T16374] netlink: 'syz.8.4104': attribute type 29 has an invalid length.
[  478.550316][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4108'.
[  478.798382][T16397] netlink: 'syz.6.4114': attribute type 32 has an invalid length.
[  478.898415][T16405] netlink: 'syz.9.4117': attribute type 21 has an invalid length.
[  481.949918][T16421] netlink: 'syz.8.4124': attribute type 1 has an invalid length.
[  481.976790][T16423] netlink: 'syz.9.4126': attribute type 15 has an invalid length.
[  482.045335][T16429] netlink: 'syz.6.4129': attribute type 13 has an invalid length.
[  482.045392][T16429] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.4129'.
[  482.065522][T16431] netlink: 'syz.8.4130': attribute type 1 has an invalid length.
[  482.065570][T16431] netlink: 'syz.8.4130': attribute type 2 has an invalid length.
[  482.255874][T16446] ref_ctr_offset mismatch. inode: 0x226 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x10
[  482.546489][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4141'.
[  482.546654][T16454] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4141'.
[  482.616285][T16460] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4144'.
[  482.892839][T16474] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4150'.
[  482.930550][T16475] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4148'.
[  483.131227][T16482] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4150'.
[  483.306903][T16474] bond0: (slave bond_slave_0): Releasing backup interface
[  483.520894][T16474] bond_slave_0: entered promiscuous mode
[  483.521263][T16474] bond_slave_0: entered allmulticast mode
[  483.888155][T16478] veth0_vlan: entered allmulticast mode
[  483.891371][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'.
[  484.529207][T16505] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4159'.
[  484.661473][T16526] netlink: 'syz.8.4164': attribute type 2 has an invalid length.
[  484.869308][T16537] proc: Unknown parameter 'lP'
[  485.026070][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4173'.
[  485.489367][T16563] C: renamed from veth1_to_team (while UP)
[  485.499776][T16563] netlink: 'syz.9.4181': attribute type 3 has an invalid length.
[  485.503483][T16563] netlink: 'syz.9.4181': attribute type 1 has an invalid length.
[  485.503572][T16563] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  485.514437][T16570] xt_cgroup: path and classid specified
[  485.801115][T16598] netlink: 'syz.8.4198': attribute type 21 has an invalid length.
[  487.754937][T16704] __nla_validate_parse: 10 callbacks suppressed
[  487.757880][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4241'.
[  487.761649][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4241'.
[  488.368764][T16709] netlink: 'syz.8.4243': attribute type 6 has an invalid length.
[  488.368806][T16709] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4243'.
[  488.835563][T16728] netlink: 'syz.9.4253': attribute type 10 has an invalid length.
[  488.838500][T16728] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4253'.
[  488.842065][T16728] team0: entered promiscuous mode
[  488.843996][T16728] team_slave_0: entered promiscuous mode
[  488.848993][T16728] team_slave_1: entered promiscuous mode
[  488.853213][T16728] team0: entered allmulticast mode
[  488.855192][T16728] team_slave_0: entered allmulticast mode
[  488.857364][T16728] team_slave_1: entered allmulticast mode
[  488.863801][T16728] bridge0: port 3(team0) entered blocking state
[  488.867253][T16728] bridge0: port 3(team0) entered disabled state
[  488.906836][T16728] bridge0: port 3(team0) entered blocking state
[  488.908833][T16728] bridge0: port 3(team0) entered forwarding state
[  488.964307][T16729] netlink: 'syz.8.4252': attribute type 10 has an invalid length.
[  489.169963][T16729] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.231016][T16744] netlink: 'syz.6.4259': attribute type 10 has an invalid length.
[  489.294961][T16729] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.511842][T16729] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  489.932265][T16760] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4267'.
[  490.159966][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4277'.
[  490.163327][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4277'.
[  490.166464][T16782] netlink: 'syz.8.4277': attribute type 6 has an invalid length.
[  490.353679][T16796] netlink: 'syz.9.4284': attribute type 30 has an invalid length.
[  490.353732][T16796] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4284'.
[  490.830526][T16824] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4295'.
[  491.290905][T16868] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4315'.
[  491.320033][T16870] netlink: 'syz.8.4316': attribute type 1 has an invalid length.
[  491.370967][T16876] netlink: 'syz.9.4319': attribute type 21 has an invalid length.
[  491.371021][T16876] netlink: 'syz.9.4319': attribute type 20 has an invalid length.
[  491.569850][T16881] netlink: 'syz.9.4321': attribute type 4 has an invalid length.
[  491.622842][T16885] IPv6: NLM_F_CREATE should be specified when creating new route
[  492.900366][T16932] __nla_validate_parse: 2 callbacks suppressed
[  492.900431][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4346'.
[  492.928620][T16926] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4343'.
[  493.062528][T16940] syzkaller0: entered promiscuous mode
[  493.065263][T16940] syzkaller0: entered allmulticast mode
[  493.123379][T16954] nbd: must specify a device to reconfigure
[  495.057543][T16960] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  495.098125][T16964] nftables ruleset with unbound chain
[  495.207865][T16969] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4357'.
[  495.919627][T16993] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4366'.
[  496.006214][T16999] netlink: 140 bytes leftover after parsing attributes in process `syz.9.4368'.
[  496.658643][T17035] netlink: 'syz.9.4379': attribute type 5 has an invalid length.
[  496.700248][T17038] bpf: Bad value for 'mode'
[  496.712829][T17040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4382'.
[  497.246577][T17067] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4395'.
[  497.480681][T17084] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4403'.
[  498.433837][T17100] netlink: 'syz.9.4410': attribute type 32 has an invalid length.
[  498.681291][T17123] netlink: 'syz.8.4421': attribute type 1 has an invalid length.
[  498.894393][T17140] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4424'.
[  499.009452][T17153] netlink: 'syz.6.4428': attribute type 29 has an invalid length.
[  499.012933][T17153] netlink: 'syz.6.4428': attribute type 29 has an invalid length.
[  499.015311][T17153] netlink: 'syz.6.4428': attribute type 29 has an invalid length.
[  499.326454][T17172] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4436'.
[  499.418514][T17177] netlink: 'syz.9.4438': attribute type 1 has an invalid length.
[  499.418565][T17177] netlink: 'syz.9.4438': attribute type 2 has an invalid length.
[  499.418597][T17177] netlink: 'syz.9.4438': attribute type 2 has an invalid length.
[  499.418605][T17177] netlink: 108 bytes leftover after parsing attributes in process `syz.9.4438'.
[  499.480554][T17183] netlink: 'syz.9.4440': attribute type 10 has an invalid length.
[  499.484420][T17183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.499483][T17183] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.514299][T17183] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  499.625211][T17195] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4445'.
[  499.685997][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4447'.
[  499.724691][T17202] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4448'.
[  499.729363][T17202] .`: renamed from bond0 (while UP)
[  499.794749][T17204] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4449'.
[  500.128086][T17213] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4453'.
[  500.253760][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4457'.
[  500.280610][T17221] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  500.281087][T17221] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  501.065444][T17237] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4462'.
[  501.618344][T17278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.692830][T17283] validate_nla: 3 callbacks suppressed
[  501.695154][T17283] netlink: 'syz.9.4485': attribute type 1 has an invalid length.
[  501.705864][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  501.705961][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  501.721357][T17284] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  501.917971][T17299] netlink: 'syz.6.4492': attribute type 10 has an invalid length.
[  502.031382][T17306] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  502.125697][T17302] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode
[  502.128425][T17302] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  503.579524][ T5604] Bluetooth: hci0: Malformed LE Event: 0x02
[  504.201072][T17375] netlink: 'syz.6.4524': attribute type 2 has an invalid length.
[  504.201130][T17375] __nla_validate_parse: 3 callbacks suppressed
[  504.201181][T17375] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4524'.
[  504.357910][T17378] netlink: 'syz.6.4525': attribute type 10 has an invalid length.
[  504.959770][T17391] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4532'.
[  504.963757][T17391] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4532'.
[  504.971151][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4531'.
[  505.014834][   T34] audit: type=1107 audit(1789070183.120:5): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='('
[  505.450251][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4545'.
[  505.474685][T17424] syzkaller0: entered promiscuous mode
[  505.477086][T17424] syzkaller0: entered allmulticast mode
[  507.458257][T17436] netlink: 'syz.8.4552': attribute type 33 has an invalid length.
[  507.462028][T17436] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4552'.
[  507.543880][T17446] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4553'.
[  507.588217][T17440] netlink: 'syz.9.4554': attribute type 2 has an invalid length.
[  507.594732][T17440] netlink: 'syz.9.4554': attribute type 2 has an invalid length.
[  507.617233][T17440] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4554'.
[  507.661813][T17440] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4554'.
[  507.917336][   T34] audit: type=1107 audit(1789070186.030:6): pid=17459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  508.163045][T17485] netlink: 'syz.6.4570': attribute type 5 has an invalid length.
[  508.165679][T17485] netlink: 'syz.6.4570': attribute type 6 has an invalid length.
[  508.169032][T17485] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.4570'.
[  508.172772][T17485] netlink: 'syz.6.4570': attribute type 1 has an invalid length.
[  510.251545][T17529] __nla_validate_parse: 1 callbacks suppressed
[  510.251626][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4588'.
[  510.251661][T17529] openvswitch: netlink: Flow actions attr not present in new flow.
[  511.154109][T17564] netlink: 'syz.8.4603': attribute type 29 has an invalid length.
[  511.155433][T17564] netlink: 'syz.8.4603': attribute type 29 has an invalid length.
[  511.156038][T17564] netlink: 'syz.8.4603': attribute type 29 has an invalid length.
[  511.239227][T17570] netlink: 'syz.8.4606': attribute type 21 has an invalid length.
[  511.861782][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4622'.
[  512.082615][T17628] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.4629'.
[  512.265042][T17628] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  512.410659][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4631'.
[  512.468828][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4631'.
[  512.656682][ T8553] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  512.656777][ T8553] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  512.656834][ T8553] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  512.656869][ T8553] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.824443][T17679] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4651'.
[  514.255902][T17713] netlink: 65047 bytes leftover after parsing attributes in process `syz.8.4665'.
[  514.563499][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4668'.
[  515.519649][T17749] validate_nla: 1 callbacks suppressed
[  515.519853][T17749] netlink: 'syz.6.4680': attribute type 1 has an invalid length.
[  515.519893][T17749] netlink: 157116 bytes leftover after parsing attributes in process `syz.6.4680'.
[  515.829399][T17759] openvswitch: netlink: IP tunnel dst address not specified
[  515.863983][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4686'.
[  517.026058][T17831] netlink: 'syz.8.4710': attribute type 12 has an invalid length.
[  517.281030][T17844] netlink: 'syz.8.4716': attribute type 2 has an invalid length.
[  517.404070][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4721'.
[  517.430351][T17850] netlink: 'syz.6.4718': attribute type 3 has an invalid length.
[  517.430547][T17850] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4718'.
[  517.574038][T17862] netlink: 'syz.9.4722': attribute type 21 has an invalid length.
[  517.599358][T17866] xt_hashlimit: size too large, truncated to 1048576
[  517.601692][T17866] xt_hashlimit: max too large, truncated to 1048576
[  517.604184][T17866] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  519.528016][T17876] netlink: 284 bytes leftover after parsing attributes in process `syz.8.4727'.
[  519.621675][ T5604] Bluetooth: hci1: unexpected subevent 0x10 length: 150 > 2
[  519.961981][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4737'.
[  519.962026][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4737'.
[  520.410404][T17896] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4738'.
[  520.540601][ T8553] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.638093][ T8553] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.649659][ T4993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  520.654646][ T4993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  520.660658][ T4993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  520.665750][ T4993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.672007][ T4993] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  520.732356][ T8553] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.953554][ T8553] bridge_slave_1: left allmulticast mode
[  520.960585][ T8553] bridge_slave_1: left promiscuous mode
[  520.965978][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.985421][ T8553] bridge_slave_0: left allmulticast mode
[  520.985464][ T8553] bridge_slave_0: left promiscuous mode
[  520.985607][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.025425][ T6185] smbdirect: ib_dev[syz0] removed
[  522.042242][ T8553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.051621][ T8553] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  522.056189][ T8553] bond0 (unregistering): Released all slaves
[  522.062108][ T5720] gretap0 speed is unknown, defaulting to 1000
[  522.062164][ T5720] infiniband syz0: ib_query_port failed (-19)
[  522.139453][ T8553] tipc: Left network mode
[  522.342534][ T5338] 8021q: adding VLAN 0 to HW filter on device eth29
[  522.403959][ T8553] hsr_slave_0: left promiscuous mode
[  522.405285][ T8553] hsr_slave_1: left promiscuous mode
[  522.520351][ T8553] team0 (unregistering): Port device team_slave_1 removed
[  522.524954][ T8553] team0 (unregistering): Port device team_slave_0 removed
[  522.534046][ T8553] team0 (unregistering): Port device bond_slave_0 removed
[  522.736766][ T4993] Bluetooth: hci0: command tx timeout
[  522.741391][T17917] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.753615][T17917] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.753758][T17917] bridge_slave_0: entered allmulticast mode
[  522.754549][T17917] bridge_slave_0: entered promiscuous mode
[  522.756055][T17917] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.756116][T17917] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.756201][T17917] bridge_slave_1: entered allmulticast mode
[  522.757238][T17917] bridge_slave_1: entered promiscuous mode
[  522.798193][T17917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.803711][T17917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.829115][T17917] team0: Port device team_slave_0 added
[  522.832876][T17917] team0: Port device team_slave_1 added
[  522.845604][T17917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.852645][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.861070][T17917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.866198][T17917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.869191][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.878187][T17917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.909040][T17917] hsr_slave_0: entered promiscuous mode
[  522.912521][T17917] hsr_slave_1: entered promiscuous mode
[  522.970107][ T5338] 8021q: adding VLAN 0 to HW filter on device eth30
[  523.180407][ T5338] 8021q: adding VLAN 0 to HW filter on device eth31
[  523.793735][ T5338] 8021q: adding VLAN 0 to HW filter on device eth32
[  524.002763][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003092][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003249][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003329][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003490][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003560][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003715][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003916][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.003986][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.004136][T18005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  524.819738][ T4993] Bluetooth: hci0: command tx timeout
[  525.559476][T18071] mac80211_hwsim hwsim37 ..c: renamed from wlan1
[  525.567985][T18074] netlink: 6208 bytes leftover after parsing attributes in process `syz.8.4769'.
[  525.719564][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4771'.
[  525.814910][T17917] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  525.834593][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  525.835257][T17917] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  525.850995][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  525.852295][T17917] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  525.875060][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  525.875504][T17917] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  525.881633][T17917] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  525.902630][T18078] IPv6: pim6reg1: Disabled Multicast RS
[  525.992513][T17917] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.005314][T17917] 8021q: adding VLAN 0 to HW filter on device team0
[  526.009557][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.009636][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.013839][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.013887][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  526.089069][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4773'.
[  526.448008][T17917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.524131][T17917] veth0_vlan: entered promiscuous mode
[  526.532100][T17917] veth1_vlan: entered promiscuous mode
[  526.585020][T17917] veth0_macvtap: entered promiscuous mode
[  526.599986][T17917] veth1_macvtap: entered promiscuous mode
[  526.642982][T17917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  526.666149][T17917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.756905][ T5636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.756976][ T5636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.757037][ T5636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.757083][ T5636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.894869][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.894932][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.906877][ T4993] Bluetooth: hci0: command tx timeout
[  527.026184][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.026256][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.519513][T18205] netlink: 'syz.1.4807': attribute type 21 has an invalid length.
[  528.976678][ T4993] Bluetooth: hci0: command tx timeout
[  531.103660][T18230] tmpfs: Unknown parameter 'smackfshat'
[  531.325156][T18249] netlink: 'syz.9.4818': attribute type 7 has an invalid length.
[  531.402983][T18246] netlink: 'syz.8.4817': attribute type 17 has an invalid length.
[  531.483518][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4817'.
[  531.524296][T18257] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4821'.
[  531.524367][T18257] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4821'.
[  531.529386][   T12] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  531.577200][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4822'.
[  531.585168][T18259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  531.585593][T18259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  531.627231][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4823'.
[  531.770364][T18276] netlink: 'syz.1.4828': attribute type 4 has an invalid length.
[  532.030693][T18283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4831'.
[  532.034093][T18283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4831'.
[  532.038092][T18283] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4831'.
[  532.060125][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4831'.
[  532.400574][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4839'.
[  532.734895][T18313] netlink: 'syz.1.4844': attribute type 6 has an invalid length.
[  532.780303][T18310] veth1_macvtap: left promiscuous mode
[  533.034577][T18335] netlink: 'syz.8.4853': attribute type 16 has an invalid length.
[  533.129899][T18344] netlink: 'syz.1.4857': attribute type 18 has an invalid length.
[  535.387864][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  536.360768][T18389] netlink: 'syz.1.4876': attribute type 1 has an invalid length.
[  537.228881][T18408] __nla_validate_parse: 5 callbacks suppressed
[  537.230191][T18410] net_ratelimit: 3322 callbacks suppressed
[  537.230200][T18410] openvswitch: netlink: IPv4 tunnel dst address is zero
[  537.235975][T18408] netlink: 9087 bytes leftover after parsing attributes in process `syz.9.4881'.
[  537.491510][T18418] netlink: NAT attribute has 5 unknown bytes
[  537.493702][T18418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.677054][T18426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4888'.
[  537.704937][T18431] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.4891'.
[  537.853321][T18441] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4895'.
[  537.890679][T18444] netlink: 'syz.9.4897': attribute type 4 has an invalid length.
[  537.890732][T18444] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4897'.
[  537.894418][T18446] netlink: 'syz.1.4898': attribute type 49 has an invalid length.
[  538.100355][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4905'.
[  538.168534][T18466] netlink: 144 bytes leftover after parsing attributes in process `syz.9.4907'.
[  538.172611][T18466] netlink: 144 bytes leftover after parsing attributes in process `syz.9.4907'.
[  538.485507][T18487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4916'.
[  538.487070][T18487] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4916'.
[  538.648246][T18497] netlink: 'syz.1.4921': attribute type 1 has an invalid length.
[  541.693032][T18532] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  542.408476][T18562] netlink: 'syz.8.4942': attribute type 29 has an invalid length.
[  542.408961][T18562] __nla_validate_parse: 1 callbacks suppressed
[  542.409721][T18562] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4942'.
[  542.651988][T18580] lo speed is unknown, defaulting to 1000
[  542.652099][T18580] lo speed is unknown, defaulting to 1000
[  542.655133][T18580] lo speed is unknown, defaulting to 1000
[  542.655557][T18580] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  542.655571][T18580] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  542.655586][T18580] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  542.661798][T18580] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  542.683986][T18580] lo speed is unknown, defaulting to 1000
[  542.684899][T18580] lo speed is unknown, defaulting to 1000
[  542.686103][T18580] lo speed is unknown, defaulting to 1000
[  542.805719][T18584] netlink: 'syz.9.4952': attribute type 27 has an invalid length.
[  542.827685][T18580] netlink: 'syz.8.4951': attribute type 4 has an invalid length.
[  542.827734][T18580] netlink: 'syz.8.4951': attribute type 17 has an invalid length.
[  542.831594][ T2272] lo speed is unknown, defaulting to 1000
[  542.982434][T18586] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4953'.
[  543.264698][T18577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4949'.
[  543.372661][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  543.737362][T18605] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4962'.
[  543.737750][T18605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.738124][T18605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.820869][T18605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.821253][T18605] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.195269][T18623] netlink: Failed to add  helper -22
[  544.198371][T18623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.239705][ T4993] Bluetooth: hci1: unexpected event 0x0b length: 151 > 11
[  544.306691][T18626] netlink: 'syz.8.4970': attribute type 49 has an invalid length.
[  544.541473][T18635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.561324][T18635] netlink: 'syz.9.4974': attribute type 13 has an invalid length.
[  544.873473][T18635] 8021q: adding VLAN 0 to HW filter on device .`
[  545.066261][T18654] netlink: 'syz.1.4983': attribute type 29 has an invalid length.
[  545.069664][T18654] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4983'.
[  545.153362][T18635] veth1_macvtap: entered promiscuous mode
[  545.281961][T18655] netlink: 'syz.1.4983': attribute type 29 has an invalid length.
[  545.282013][T18655] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4983'.
[  545.289406][T18656] netlink: 'syz.1.4983': attribute type 29 has an invalid length.
[  545.289418][T18656] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4983'.
[  545.382524][T18663] netlink: 'syz.8.4986': attribute type 29 has an invalid length.
[  545.422690][T18665] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.427914][T18665] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.501389][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4990'.
[  545.732518][T18665] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.742656][T18665] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.768638][T18665] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.779648][T18665] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.968786][T18665] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  546.306559][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.306819][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.307109][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.307319][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.307485][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.307677][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  546.308154][T18687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  547.040946][T18699] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  547.047913][T18699] netdevsim netdevsim9 netdevsim1: entered promiscuous mode
[  547.050853][T18699] netdevsim netdevsim9 netdevsim1: entered allmulticast mode
[  547.065138][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5001'.
[  547.093090][T18699] team0: Port device netdevsim1 added
[  547.096666][T18700] netdevsim netdevsim9 netdevsim1: left promiscuous mode
[  547.096833][T18700] netdevsim netdevsim9 netdevsim1: left allmulticast mode
[  547.123443][T18700] team0: Port device netdevsim1 removed
[  547.129487][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  547.144133][T18700] .`: (slave netdevsim1): Enslaving as an active interface with an up link
[  547.202312][   T34] audit: type=1107 audit(1789070225.310:7): pid=18705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  547.230976][T18706] netlink: 160 bytes leftover after parsing attributes in process `syz.8.5003'.
[  547.550932][T18734] __nla_validate_parse: 1 callbacks suppressed
[  547.553219][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'.
[  547.610194][T18736] validate_nla: 7 callbacks suppressed
[  547.612756][T18736] netlink: 'syz.8.5016': attribute type 10 has an invalid length.
[  547.619958][T18736] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  548.564472][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5021'.
[  548.642651][   T34] audit: type=1107 audit(1789070226.750:8): pid=18751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='A-ԃ>
[  548.642651][   T34] ;Rsۉ9'
[  548.923661][T18772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5031'.
[  549.195845][T18791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5040'.
[  549.765731][T18806] netlink: 763 bytes leftover after parsing attributes in process `syz.9.5047'.
[  549.937410][ T4993] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9
[  550.253420][T18855] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5070'.
[  550.325953][T18863] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5074'.
[  550.331759][T18863] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5074'.
[  551.330652][T18897] lo speed is unknown, defaulting to 1000
[  551.535982][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5094'.
[  551.539345][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5094'.
[  551.815248][T18916] netlink: 'syz.9.5096': attribute type 62 has an invalid length.
[  553.529002][T18932] netlink: 'syz.9.5101': attribute type 4 has an invalid length.
[  553.529047][T18932] netlink: 'syz.9.5101': attribute type 7 has an invalid length.
[  554.252229][T18944] netlink: 'syz.8.5105': attribute type 11 has an invalid length.
[  554.840181][T18975] netlink: 'syz.9.5120': attribute type 39 has an invalid length.
[  554.995521][T18980] netlink: 14568 bytes leftover after parsing attributes in process `syz.8.5118'.
[  555.362417][T18994] net_ratelimit: 3323 callbacks suppressed
[  555.365235][T18994] openvswitch: netlink: IP tunnel TTL not specified.
[  555.523415][ T4993] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  555.525514][ T4993] Bluetooth: hci2: connection err: -111
[  555.802603][ T4993] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  555.861156][T19019] netlink: 830 bytes leftover after parsing attributes in process `syz.9.5138'.
[  555.954275][ T4993] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  555.957958][ T4993] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  556.075728][T19037] netlink: 165 bytes leftover after parsing attributes in process `syz.8.5146'.
[  556.192810][T19046] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5150'.
[  556.310034][T19043] netlink: zone id is out of range
[  556.321807][T19043] netlink: zone id is out of range
[  556.326613][T19043] netlink: zone id is out of range
[  556.326834][T19043] netlink: zone id is out of range
[  556.332049][T19043] netlink: zone id is out of range
[  556.334122][T19043] netlink: zone id is out of range
[  556.338213][T19043] netlink: zone id is out of range
[  556.340746][T19043] netlink: zone id is out of range
[  556.343886][T19043] netlink: zone id is out of range
[  556.462943][T19054] netlink: 'syz.1.5152': attribute type 29 has an invalid length.
[  556.463437][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5152'.
[  556.744865][T19067] netlink: 830 bytes leftover after parsing attributes in process `syz.9.5157'.
[  558.124099][T19109] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.5176'.
[  558.657737][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  558.856391][T19130] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5184'.
[  559.583649][T19132] netlink: 'syz.8.5185': attribute type 2 has an invalid length.
[  559.583727][T19132] netlink: 'syz.8.5185': attribute type 2 has an invalid length.
[  559.703151][T19138] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5188'.
[  559.703222][T19138] netlink: 43 bytes leftover after parsing attributes in process `syz.8.5188'.
[  559.703744][T19138] netlink: 'syz.8.5188': attribute type 6 has an invalid length.
[  559.703785][T19138] netlink: 'syz.8.5188': attribute type 5 has an invalid length.
[  560.608750][T19191] __nla_validate_parse: 3 callbacks suppressed
[  560.608852][T19191] netlink: 2100 bytes leftover after parsing attributes in process `syz.9.5213'.
[  560.765962][T19198] netlink: 'syz.9.5215': attribute type 21 has an invalid length.
[  560.766010][T19198] IPv6: NLM_F_CREATE should be specified when creating new route
[  560.766093][T19198] IPv6: Can't replace route, no match found
[  561.102452][T19209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5220'.
[  561.571315][T19219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5224'.
[  561.935888][T19235] lo speed is unknown, defaulting to 1000
[  562.024346][T19242] netlink: 'syz.8.5231': attribute type 1 has an invalid length.
[  562.506586][T19252] netlink: 'syz.8.5236': attribute type 2 has an invalid length.
[  562.516293][T19252] : entered promiscuous mode
[  563.138775][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  563.138873][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  563.300743][T19276] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5238'.
[  563.300809][T19276] netlink: 'syz.8.5238': attribute type 1 has an invalid length.
[  563.300862][T19276] netlink: 'syz.8.5238': attribute type 2 has an invalid length.
[  563.300872][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5238'.
[  563.750622][T19292] netlink: 762 bytes leftover after parsing attributes in process `syz.1.5253'.
[  563.805472][T19294] syzkaller0: entered promiscuous mode
[  563.805545][T19294] syzkaller0: entered allmulticast mode
[  564.045896][T19304] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5259'.
[  564.279235][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5267'.
[  564.510359][T19328] tipc: Started in network mode
[  564.513496][T19328] tipc: Node identity 805e0004, cluster identity 4711
[  564.517085][T19328] tipc: Node number set to 2153644036
[  564.896218][T19344] netlink: 'syz.9.5274': attribute type 10 has an invalid length.
[  564.948101][T19344] bridge0: port 3(team0) entered disabled state
[  564.958162][T19344] bridge0: port 3(team0) entered disabled state
[  564.962600][T19344] team_slave_0: left promiscuous mode
[  564.964554][T19344] team_slave_0: left allmulticast mode
[  564.973525][T19344] team0 (unregistering): Port device team_slave_0 removed
[  564.976107][T19344] team_slave_1: left promiscuous mode
[  564.980588][T19344] team_slave_1: left allmulticast mode
[  564.990003][T19344] team0 (unregistering): Port device team_slave_1 removed
[  565.293285][T19362] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5285'.
[  565.345547][T19368] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5288'.
[  565.483079][T19378] netlink: 'syz.8.5292': attribute type 2 has an invalid length.
[  565.644215][T19389] netlink: 'syz.8.5297': attribute type 2 has an invalid length.
[  565.647707][T19389] netlink: 'syz.8.5297': attribute type 1 has an invalid length.
[  565.650937][T19389] __nla_validate_parse: 1 callbacks suppressed
[  565.654035][T19389] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.5297'.
[  565.719574][T19384] netlink: 'syz.9.5295': attribute type 39 has an invalid length.
[  565.746037][ T4993] Bluetooth: hci2: Malformed Event: 0x02
[  566.718968][T19409] net_ratelimit: 170 callbacks suppressed
[  566.721815][T19409] netlink: Only one type of NAT may be specified
[  566.724706][T19409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.839337][T19420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5312'.
[  566.899448][T19420] netlink: 'syz.1.5312': attribute type 11 has an invalid length.
[  566.904212][T19420] netlink: 'syz.1.5312': attribute type 4 has an invalid length.
[  568.254178][T19489] netlink: 'syz.1.5336': attribute type 10 has an invalid length.
[  568.279958][T19491] openvswitch: netlink: Port 856954028 exceeds max allowable 65535
[  568.342857][T19489] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  569.042778][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5347'.
[  569.119422][T19507] netlink: 'syz.1.5347': attribute type 27 has an invalid length.
[  569.148520][T19518] netlink: 'syz.8.5352': attribute type 10 has an invalid length.
[  569.148586][T19518] netlink: 65015 bytes leftover after parsing attributes in process `syz.8.5352'.
[  569.209781][T19524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5355'.
[  569.379700][T19540] IPv6: NLM_F_CREATE should be specified when creating new route
[  569.382957][T19540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.383034][T19540] IPv6: NLM_F_CREATE should be set when creating new route
[  569.402058][T19540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.402106][T19540] IPv6: NLM_F_CREATE should be set when creating new route
[  570.047775][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5380'.
[  570.105185][T19581] netlink: 'syz.9.5381': attribute type 1 has an invalid length.
[  570.975018][T19593] netlink: 830 bytes leftover after parsing attributes in process `syz.8.5387'.
[  570.975092][T19593] : entered promiscuous mode
[  571.110527][T19602] netlink: 'syz.9.5391': attribute type 11 has an invalid length.
[  571.173109][T19607] xt_nfacct: accounting object `' does not exist
[  571.520017][T19624] netlink: 'syz.1.5400': attribute type 1 has an invalid length.
[  571.520084][T19624] netlink: 'syz.1.5400': attribute type 1 has an invalid length.
[  571.521758][T19626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  572.150154][T19644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5407'.
[  572.861361][T19668] netlink: 'syz.8.5417': attribute type 7 has an invalid length.
[  572.875963][T19670] netlink: 'syz.9.5416': attribute type 2 has an invalid length.
[  572.876028][T19670] netlink: 'syz.9.5416': attribute type 5 has an invalid length.
[  572.876078][T19670] netlink: 'syz.9.5416': attribute type 2 has an invalid length.
[  572.876089][T19670] netlink: 'syz.9.5416': attribute type 5 has an invalid length.
[  573.145627][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5419'.
[  573.154572][T19676] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  573.159575][T19676] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  573.312569][T19684] netlink: 'syz.1.5422': attribute type 61 has an invalid length.
[  573.700788][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5425'.
[  575.172246][T19751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.206727][T19751] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  575.236867][T19759] ovs-s: entered promiscuous mode
[  575.241487][T19759] openvswitch: ovs-s: Dropping previously announced user features
[  575.409393][T19780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5467'.
[  575.457108][T19782] netlink: 703 bytes leftover after parsing attributes in process `syz.8.5468'.
[  575.898765][ T4993] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  577.597383][T19822] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.599218][T19822] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.603993][T19822] bridge0: entered allmulticast mode
[  577.783797][T19829] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5488'.
[  577.940469][ T4993] Bluetooth: hci1: command 0x2016 tx timeout
[  578.227983][T19851] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5495'.
[  578.275823][T19854] validate_nla: 1 callbacks suppressed
[  578.281500][T19854] netlink: 'syz.9.5500': attribute type 3 has an invalid length.
[  580.018191][ T4993] Bluetooth: hci1: command 0x2016 tx timeout
[  580.172883][T19911] netlink: 'syz.8.5519': attribute type 6 has an invalid length.
[  580.175619][T19911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5519'.
[  580.217137][T19900] tun0: tun_chr_ioctl cmd 1074025677
[  580.219541][T19900] tun0: linktype set to 1
[  580.233241][T19900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5515'.
[  580.240511][T19900] netlink: 'syz.1.5515': attribute type 4 has an invalid length.
[  580.648515][T19942] netlink: 'syz.1.5529': attribute type 1 has an invalid length.
[  580.667860][T19943] netlink: 844 bytes leftover after parsing attributes in process `syz.9.5530'.
[  580.667913][T19943] netlink: 844 bytes leftover after parsing attributes in process `syz.9.5530'.
[  580.794932][T19951] netlink: 'syz.9.5534': attribute type 13 has an invalid length.
[  580.794994][T19951] netlink: 14532 bytes leftover after parsing attributes in process `syz.9.5534'.
[  581.532172][T19966] netlink: 'syz.9.5540': attribute type 16 has an invalid length.
[  581.532222][T19966] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5540'.
[  581.619723][T19975] netlink: 'syz.8.5546': attribute type 6 has an invalid length.
[  581.619772][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5546'.
[  581.675019][T19981] netlink: 188 bytes leftover after parsing attributes in process `syz.9.5549'.
[  582.106553][ T4993] Bluetooth: hci1: command 0x2016 tx timeout
[  582.123780][T19995] netlink: 'syz.9.5556': attribute type 29 has an invalid length.
[  582.130982][T19995] netlink: 'syz.9.5556': attribute type 29 has an invalid length.
[  582.134882][T19995] netlink: 'syz.9.5556': attribute type 29 has an invalid length.
[  582.738285][ T5604] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  583.875597][T20038] sock: sock_set_timeout: `syz.1.5576' (pid 20038) tries to set negative timeout
[  584.192765][ T5604] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11
[  587.177016][T20090] netlink: 'syz.9.5599': attribute type 1 has an invalid length.
[  587.180430][T20090] netlink: 'syz.9.5599': attribute type 3 has an invalid length.
[  587.183794][T20090] __nla_validate_parse: 3 callbacks suppressed
[  587.186617][T20090] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5599'.
[  587.230076][T20096] netlink: 'syz.8.5603': attribute type 7 has an invalid length.
[  587.271123][T20103] netlink: 'syz.8.5606': attribute type 15 has an invalid length.
[  587.271174][T20103] netlink: 'syz.8.5606': attribute type 7 has an invalid length.
[  587.304841][ T4993] Bluetooth: hci0: Malformed LE Event: 0x0f
[  587.404013][T20109] netlink: 'syz.8.5609': attribute type 2 has an invalid length.
[  587.530560][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5613'.
[  587.752875][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5612'.
[  588.035123][T20142] syzkaller0: entered promiscuous mode
[  588.035217][T20142] syzkaller0: entered allmulticast mode
[  588.095231][T20146] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  588.245354][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5629'.
[  588.609062][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5639'.
[  588.609141][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5639'.
[  588.611477][T20175] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5638'.
[  588.747385][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  588.896707][ T4993] Bluetooth: hci1: command 0x0406 tx timeout
[  590.664828][T20178] netlink: 'syz.8.5640': attribute type 12 has an invalid length.
[  590.664875][T20178] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5640'.
[  590.783918][T20209] netlink: 'syz.8.5651': attribute type 6 has an invalid length.
[  590.802061][T20211] x_tables: ip_tables: udp match: only valid for protocol 17
[  590.838114][T20214] netlink: 'syz.9.5653': attribute type 2 has an invalid length.
[  590.910524][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5658'.
[  590.959315][T20234] netlink: 'syz.1.5662': attribute type 1 has an invalid length.
[  590.975496][T20235] netlink: 348 bytes leftover after parsing attributes in process `syz.8.5663'.
[  590.998610][T20232] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  591.139110][T20253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  592.352370][T20317] __nla_validate_parse: 2 callbacks suppressed
[  592.352430][T20317] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5697'.
[  592.673656][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5716'.
[  592.713797][T20353] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5715'.
[  592.808063][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5720'.
[  592.965295][T20370] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5722'.
[  593.757917][T20361] infiniband syz: set active
[  593.757964][T20361] infiniband syz: added ipvlan0
[  593.759656][T20361] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  593.762689][T20361] infiniband syz: Couldn't open port 1
[  593.762785][T20361] smbdirect: ib_dev[syz]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  593.762797][T20361] smbdirect: ib_dev[syz]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  593.762811][T20361] smbdirect: ib_dev[syz]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  593.781425][T20361] RDS/IB: syz: added
[  593.781633][T20361] smc: adding ib device syz with port count 1
[  593.781677][T20361] smc:    ib device syz port 1 has no pnetid
[  593.883385][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5729'.
[  593.883459][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5729'.
[  594.049739][T20391] netlink: 1135 bytes leftover after parsing attributes in process `syz.9.5730'.
[  594.141521][T20393] netlink: 348 bytes leftover after parsing attributes in process `syz.9.5731'.
[  594.141627][T20393] netlink: 348 bytes leftover after parsing attributes in process `syz.9.5731'.
[  595.375983][T20445] netlink: get zone limit has 8 unknown bytes
[  596.355714][T20455] nbd: must specify a device to reconfigure
[  596.735658][T20483] validate_nla: 1 callbacks suppressed
[  596.738634][T20483] netlink: 'syz.9.5773': attribute type 39 has an invalid length.
[  596.850792][T20495] bond_slave_0: entered promiscuous mode
[  597.252874][T20521] netlink: 'syz.9.5788': attribute type 39 has an invalid length.
[  597.536969][T20529] veth2: entered promiscuous mode
[  597.537020][T20529] veth2: entered allmulticast mode
[  597.572809][T20535] netlink: 'syz.1.5796': attribute type 4 has an invalid length.
[  597.677159][T20539] __nla_validate_parse: 7 callbacks suppressed
[  597.677315][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5798'.
[  597.681549][T20539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  597.681623][T20539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  597.693120][T20542] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5800'.
[  598.193589][T20554] netlink: 256 bytes leftover after parsing attributes in process `syz.9.5803'.
[  598.527016][T20572] netlink: 45 bytes leftover after parsing attributes in process `syz.8.5809'.
[  598.749356][T20585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.052000][ T5604] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8
[  599.134844][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5817'.
[  599.927577][T20613] netlink: 'syz.1.5822': attribute type 3 has an invalid length.
[  599.972750][T20619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5825'.
[  600.302578][T20628] netlink: 328 bytes leftover after parsing attributes in process `syz.9.5829'.
[  600.305637][T20628] netlink: 328 bytes leftover after parsing attributes in process `syz.9.5829'.
[  600.695787][T20644] netlink: 'syz.1.5835': attribute type 1 has an invalid length.
[  600.699760][T20644] nbd: illegal input index 393222
[  600.729628][T20648] netlink: 'syz.8.5837': attribute type 2 has an invalid length.
[  600.898806][T20660] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5840'.
[  601.395258][ T5636] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.395333][ T5636] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.465173][ T5636] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.465242][ T5636] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.522591][ T4993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  601.530991][ T4993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  601.534741][ T4993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  601.539100][ T4993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  601.548898][ T4993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  601.599706][T20699] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5861'.
[  601.601646][ T5636] .`: (slave netdevsim1): Releasing backup interface
[  601.621561][ T5636] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.621630][ T5636] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.783810][ T5636] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  601.783883][ T5636] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  601.880355][ T4993] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  601.889824][T20693] lo speed is unknown, defaulting to 1000
[  602.092058][ T5636] bridge_slave_1: left allmulticast mode
[  602.092107][ T5636] bridge_slave_1: left promiscuous mode
[  602.092254][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.105651][ T5636] bridge_slave_0: left allmulticast mode
[  602.105714][ T5636] bridge_slave_0: left promiscuous mode
[  602.105904][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.765915][ T5636] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  602.779673][ T5636] .` (unregistering): (slave batadv_slave_1): Releasing backup interface
[  602.785144][ T5636] .` (unregistering): Released all slaves
[  602.795761][T20723] bridge0: port 3(gretap0) entered blocking state
[  602.800453][T20723] bridge0: port 3(gretap0) entered disabled state
[  602.805373][T20723] gretap0: entered allmulticast mode
[  602.885515][T20723] gretap0: entered promiscuous mode
[  602.959003][T20730] netlink: 'syz.1.5869': attribute type 10 has an invalid length.
[  602.995159][ T5636] ovs-s: left promiscuous mode
[  603.249842][ T5338] 8021q: adding VLAN 0 to HW filter on device eth1
[  603.322757][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5872'.
[  603.616446][ T5604] Bluetooth: hci1: command tx timeout
[  605.696717][ T5604] Bluetooth: hci1: command tx timeout
[  606.645804][T20780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5882'.
[  606.689948][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.690021][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_0
[  606.728518][ T5636] veth1_macvtap: left promiscuous mode
[  606.728610][ T5636] veth0_macvtap: left promiscuous mode
[  606.729599][ T5636] veth1_vlan: left promiscuous mode
[  606.729687][ T5636] veth0_vlan: left promiscuous mode
[  607.129371][ T5338] 8021q: adding VLAN 0 to HW filter on device eth3
[  607.132369][T20693] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.132412][T20693] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.132471][T20693] bridge_slave_0: entered allmulticast mode
[  607.133264][T20693] bridge_slave_0: entered promiscuous mode
[  607.136907][T20693] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.137506][T20693] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.137591][T20693] bridge_slave_1: entered allmulticast mode
[  607.140011][T20693] bridge_slave_1: entered promiscuous mode
[  607.238029][T20693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  607.263274][T20693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  607.344154][T20811] syzkaller0: entered promiscuous mode
[  607.344207][T20811] syzkaller0: entered allmulticast mode
[  607.398359][T20817] netlink: 'syz.8.5897': attribute type 27 has an invalid length.
[  607.401707][T20817] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5897'.
[  607.776688][ T5604] Bluetooth: hci1: command tx timeout
[  607.809530][T20826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.501504][T20693] team0: Port device team_slave_0 added
[  609.508387][T20693] team0: Port device team_slave_1 added
[  609.578816][T20693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.578875][T20693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.582400][T20693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.591587][T20693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.591598][T20693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.591616][T20693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  609.668439][T20693] hsr_slave_0: entered promiscuous mode
[  609.670566][T20693] hsr_slave_1: entered promiscuous mode
[  609.670890][T20693] debugfs: 'hsr0' already exists in 'hsr'
[  609.670900][T20693] Cannot create hsr debugfs directory
[  609.689291][ T5338] 8021q: adding VLAN 0 to HW filter on device eth4
[  609.856804][ T5604] Bluetooth: hci1: command tx timeout
[  609.978937][ T5338] 8021q: adding VLAN 0 to HW filter on device eth2
[  609.992021][T20871] openvswitch: netlink: Missing key (keys=40, expected=100)
[  610.104866][T20876] syzkaller0: entered promiscuous mode
[  610.106826][T20876] syzkaller0: entered allmulticast mode
[  613.312624][T20693] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  613.321117][T20693] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  613.322081][T20693] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  613.342487][T20693] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  613.343554][T20693] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  613.353432][T20693] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  613.354629][T20693] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  613.373553][T20693] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  613.479893][T20939] xt_IDLETIMER: timeout value is zero
[  613.483761][T20936] -1O2~: renamed from syzkaller0
[  613.677493][T20693] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.714980][T20693] 8021q: adding VLAN 0 to HW filter on device team0
[  613.725107][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.725230][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  613.731575][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.731706][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.775226][T20949] openvswitch: netlink: IP tunnel dst address not specified
[  613.809305][T20952] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  614.282854][T20693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  614.327036][T20693] veth0_vlan: entered promiscuous mode
[  614.334111][T20693] veth1_vlan: entered promiscuous mode
[  614.368679][T20693] veth0_macvtap: entered promiscuous mode
[  614.371721][T20693] veth1_macvtap: entered promiscuous mode
[  614.382387][T20693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.386686][T20693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.420388][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  614.420546][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.420651][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.420850][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.421225][T20988] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5936'.
[  614.483259][T20906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.483309][T20906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.512320][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  614.512370][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  614.778121][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5941'.
[  615.224586][T21046] sctp: [Deprecated]: syz.3.5952 (pid 21046) Use of int in max_burst socket option deprecated.
[  615.224586][T21046] Use struct sctp_assoc_value instead
[  615.238792][T21047] netlink: 'syz.1.5953': attribute type 10 has an invalid length.
[  615.241773][T21047] netlink: 'syz.1.5953': attribute type 19 has an invalid length.
[  615.244939][T21047] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5953'.
[  615.375015][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5958'.
[  616.980869][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5974'.
[  616.983918][T21121] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  617.412194][T21125] netlink: 'syz.8.5976': attribute type 10 has an invalid length.
[  617.430230][T21125] team0: Device veth0_vlan failed to register rx_handler
[  617.486604][ T5583] syz: Port: 1 Link DOWN
[  617.602528][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5983'.
[  617.896695][T21161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.941465][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5993'.
[  617.945652][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5993'.
[  618.807976][T21177] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5998'.
[  619.671379][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6010'.
[  620.130235][T21229] sch_tbf: peakrate 188 is lower than or equals to rate 4644974590640938312 !
[  620.545393][T21274] tun0: tun_chr_ioctl cmd 1074025677
[  620.547939][T21274] tun0: linktype set to 773
[  620.583505][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'.
[  620.619582][T21278] netlink: 'syz.1.6038': attribute type 21 has an invalid length.
[  620.679081][T21286] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6039'.
[  620.888003][T21301] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6046'.
[  620.930015][T21305] netlink: 'syz.3.6049': attribute type 3 has an invalid length.
[  620.930061][T21305] tc_dump_action: action bad kind
[  620.953629][ T5604] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  620.953681][ T5604] Bluetooth: hci0: Malformed LE Event: 0x0d
[  621.062537][T21309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  621.062824][T21309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  621.139399][T21322] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6056'.
[  621.144257][T21322] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6056'.
[  621.328699][T21331] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6060'.
[  623.416027][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'.
[  624.066003][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6082'.
[  624.070656][T21386] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6082'.
[  624.529292][T21420] syzkaller0: entered promiscuous mode
[  624.531160][T21420] syzkaller0: entered allmulticast mode
[  624.577720][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  624.577773][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  624.639205][T21421] netlink: 'syz.8.6092': attribute type 39 has an invalid length.
[  624.797326][T21421] __nla_validate_parse: 3 callbacks suppressed
[  624.801324][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6092'.
[  624.845145][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6092'.
[  624.845191][T21421] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  624.916466][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6099'.
[  627.016050][T21430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6099'.
[  627.016112][T21430] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6099'.
[  627.016128][T21430] veth1_to_bridge: entered allmulticast mode
[  627.016750][T21430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6099'.
[  627.016765][T21430] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6099'.
[  627.438524][T21465] netlink: 'syz.3.6112': attribute type 10 has an invalid length.
[  627.438574][T21465] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.6112'.
[  627.470348][T21462] netlink: 'syz.8.6110': attribute type 16 has an invalid length.
[  627.470542][T21462] netlink: 'syz.8.6110': attribute type 3 has an invalid length.
[  627.470611][T21462] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6110'.
[  627.932031][T21487] netlink: 'syz.1.6116': attribute type 10 has an invalid length.
[  629.723385][T21478] vcan0: entered allmulticast mode
[  629.739956][T21487] veth1_macvtap: left promiscuous mode
[  629.936887][T21495] netlink: 'syz.3.6122': attribute type 2 has an invalid length.
[  629.936951][T21495] netlink: 'syz.3.6122': attribute type 7 has an invalid length.
[  629.937070][T21495] netlink: 'syz.3.6122': attribute type 5 has an invalid length.
[  630.543867][T21505] netlink: 199808 bytes leftover after parsing attributes in process `syz.3.6125'.
[  630.545655][T21505] netlink: 'syz.3.6125': attribute type 1 has an invalid length.
[  632.165399][ T5604] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6
[  632.331347][T21550] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6143'.
[  632.450433][T21550] bond0 (unregistering): (slave 42): Releasing backup interface
[  632.462950][T21550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.483221][T21550] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface
[  632.522821][T21550] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  632.547466][T21550] bond0 (unregistering): Released all slaves
[  632.680592][T21560] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6149'.
[  632.684390][T21560] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  632.718150][T21561] macvlan1: entered allmulticast mode
[  632.893855][T21570] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6153'.
[  633.080189][T21574] IPv6: Can't replace route, no match found
[  633.194624][ T5604] Bluetooth: hci0: unknown advertising packet type: 0x06
[  633.293640][T21588] netlink: 'syz.1.6162': attribute type 2 has an invalid length.
[  633.299605][T21588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6162'.
[  633.331920][T21594] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6165'.
[  633.335036][T21594] xt_IDLETIMER: label is empty or not nul-terminated
[  634.173788][T21623] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6177'.
[  634.199567][T21623] netlink: 'syz.1.6177': attribute type 10 has an invalid length.
[  634.200001][T21623] netlink: 'syz.1.6177': attribute type 8 has an invalid length.
[  634.342847][T21633] xt_nfacct: accounting object `s' does not exist
[  634.396679][T21627] syzkaller0: entered promiscuous mode
[  634.398763][T21627] syzkaller0: entered allmulticast mode
[  634.480266][T21639] netlink: 'syz.3.6183': attribute type 29 has an invalid length.
[  635.353067][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6185'.
[  635.353133][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6185'.
[  635.391055][T21647] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6186'.
[  637.160240][ T5604] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  637.163670][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  637.163685][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: kworker/u11:4 Not tainted syzkaller #0 PREEMPT(full) 
[  637.163695][ T5604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  637.163701][ T5604] Workqueue: hci0 hci_rx_work
[  637.163757][ T5604] Call Trace:
[  637.163763][ T5604]  <TASK>
[  637.163769][ T5604]  dump_stack_lvl+0xe8/0x150
[  637.163789][ T5604]  sysfs_create_dir_ns+0x271/0x2a0
[  637.163803][ T5604]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  637.163817][ T5604]  ? do_raw_spin_unlock+0x4d/0x200
[  637.163831][ T5604]  kobject_add_internal+0x622/0xcd0
[  637.163848][ T5604]  kobject_add+0x163/0x240
[  637.163860][ T5604]  ? __pfx_kobject_add+0x10/0x10
[  637.163872][ T5604]  ? get_device_parent+0x366/0x3a0
[  637.163882][ T5604]  device_add+0x3fa/0xb80
[  637.163891][ T5604]  hci_conn_add_sysfs+0xd5/0x210
[  637.163903][ T5604]  le_conn_complete_evt+0xfe3/0x16d0
[  637.163913][ T5604]  ? le_conn_complete_evt+0x1b1/0x16d0
[  637.163922][ T5604]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  637.163931][ T5604]  ? __mutex_unlock_slowpath+0x731/0x900
[  637.163941][ T5604]  ? skb_pull_data+0xf0/0x200
[  637.163954][ T5604]  hci_le_enh_conn_complete_evt+0x189/0x490
[  637.163962][ T5604]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  637.163972][ T5604]  hci_event_packet+0x67a/0xf10
[  637.163985][ T5604]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  637.163992][ T5604]  ? __pfx_hci_event_packet+0x10/0x10
[  637.164005][ T5604]  ? audit_filter_rules+0x4ba0/0x5d10
[  637.164018][ T5604]  ? hci_send_to_monitor+0xe2/0x590
[  637.164029][ T5604]  hci_rx_work+0x3ee/0x1020
[  637.164045][ T5604]  ? process_scheduled_works+0x97a/0x1630
[  637.164055][ T5604]  process_scheduled_works+0xc3d/0x1630
[  637.164076][ T5604]  ? __pfx_process_scheduled_works+0x10/0x10
[  637.164088][ T5604]  ? assign_work+0x3cf/0x5d0
[  637.164099][ T5604]  worker_thread+0xa47/0xfb0
[  637.164114][ T5604]  ? __kthread_parkme+0x71/0x1f0
[  637.164128][ T5604]  kthread+0x38b/0x480
[  637.164135][ T5604]  ? __pfx_worker_thread+0x10/0x10
[  637.164145][ T5604]  ? __pfx_kthread+0x10/0x10
[  637.164154][ T5604]  ret_from_fork+0x514/0xb70
[  637.164163][ T5604]  ? __pfx_ret_from_fork+0x10/0x10
[  637.164170][ T5604]  ? __switch_to+0xc89/0x1420
[  637.164181][ T5604]  ? __pfx_kthread+0x10/0x10
[  637.164189][ T5604]  ret_from_fork_asm+0x1a/0x30
[  637.164205][ T5604]  </TASK>
[  637.164218][ T5604] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  637.164234][ T5604] Bluetooth: hci0: failed to register connection device
[  637.348777][T21673] netlink: 'syz.1.6197': attribute type 9 has an invalid length.
[  637.355562][T21672] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6198'.
[  637.730378][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6203'.
[  637.817572][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6209'.
[  637.968083][T21708] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6213'.
[  638.191895][T21728] netlink: 'syz.8.6223': attribute type 21 has an invalid length.
[  638.191992][T21728] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6223'.
[  638.235531][T21732] netlink: 763 bytes leftover after parsing attributes in process `syz.8.6225'.
[  638.442657][T21743] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6230'.
[  638.630778][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6222'.
[  638.766223][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6237'.
[  638.973841][T21778] syzkaller0: entered promiscuous mode
[  638.976206][T21778] syzkaller0: entered allmulticast mode
[  639.216597][ T4993] Bluetooth: hci0: command 0x2016 tx timeout
[  640.499988][T21792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6251'.
[  640.976113][ T4993] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  641.119947][T21817] netlink: 'syz.3.6261': attribute type 21 has an invalid length.
[  641.165876][T21821] openvswitch: netlink: IP tunnel dst address not specified
[  641.296489][ T5604] Bluetooth: hci0: command 0x2016 tx timeout
[  643.413933][T21834] netlink: 'syz.3.6268': attribute type 10 has an invalid length.
[  643.440978][T21834] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  643.550508][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6277'.
[  643.605712][T21858] netlink: 'syz.1.6280': attribute type 29 has an invalid length.
[  643.610256][T21858] netlink: 'syz.1.6280': attribute type 29 has an invalid length.
[  643.613863][T21858] netlink: 'syz.1.6280': attribute type 29 has an invalid length.
[  643.637476][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6276'.
[  643.649808][T21861] netlink: 'syz.1.6281': attribute type 25 has an invalid length.
[  643.708741][T21865] netlink: 762 bytes leftover after parsing attributes in process `syz.1.6282'.
[  643.711924][T21865] bridge: RTM_NEWNEIGH with unconfigured vlan 2048 on bridge0
[  643.794985][T21872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6284'.
[  643.798123][T21872] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  644.021740][T17922] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12
[  644.264214][T21891] netlink: 'syz.1.6294': attribute type 3 has an invalid length.
[  644.396197][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6296'.
[  644.556169][T21902] netlink: 'syz.3.6298': attribute type 10 has an invalid length.
[  644.560367][T21902] netlink: 'syz.3.6298': attribute type 19 has an invalid length.
[  644.560384][T21902] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.6298'.
[  644.602619][T21906] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  644.763133][T21915] netlink: 'syz.3.6305': attribute type 10 has an invalid length.
[  644.788805][T21915] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  645.482398][T21934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6313'.
[  645.728773][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6315'.
[  645.796215][T21944] C: renamed from veth1_to_team (while UP)
[  645.801335][T21944] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6318'.
[  646.098178][ T5604] Bluetooth: hci0: command 0x2016 tx timeout
[  646.600533][T21955] syzkaller0: entered promiscuous mode
[  646.600593][T21955] syzkaller0: entered allmulticast mode
[  647.087262][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  647.127876][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  647.144273][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  647.167204][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  647.181508][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  648.180662][T17922] Bluetooth: hci0: command 0x2016 tx timeout
[  649.003275][ T5636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.138413][ T5636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.164917][T21963] lo speed is unknown, defaulting to 1000
[  649.196024][T21981] validate_nla: 3 callbacks suppressed
[  649.198762][T21981] netlink: 'syz.1.6331': attribute type 3 has an invalid length.
[  649.261013][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6331'.
[  649.297949][T17922] Bluetooth: hci1: command tx timeout
[  649.302254][ T5636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.312053][T21986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  649.315126][T21986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  649.342734][T21985] netlink: NAT attribute has 5 unknown bytes
[  649.345438][T21985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  649.400718][ T5636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.752619][T21963] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.752744][T21963] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.752842][T21963] bridge_slave_0: entered allmulticast mode
[  649.753574][T21963] bridge_slave_0: entered promiscuous mode
[  649.765375][T21963] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.769397][T21963] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.771846][T21963] bridge_slave_1: entered allmulticast mode
[  649.774707][T21963] bridge_slave_1: entered promiscuous mode
[  649.804810][T21963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.813948][T21963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.843686][ T5338] 8021q: adding VLAN 0 to HW filter on device eth5
[  649.852572][T21963] team0: Port device team_slave_0 added
[  649.858118][T21963] team0: Port device team_slave_1 added
[  649.885460][T21963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  649.896481][T21963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.896551][T21963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  649.899146][T21963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  649.899157][T21963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.899172][T21963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  650.181421][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  650.238778][T21963] hsr_slave_0: entered promiscuous mode
[  650.239277][T21963] hsr_slave_1: entered promiscuous mode
[  650.239960][T21963] debugfs: 'hsr0' already exists in 'hsr'
[  650.239975][T21963] Cannot create hsr debugfs directory
[  650.248868][ T5636] bridge_slave_1: left allmulticast mode
[  650.248916][ T5636] bridge_slave_1: left promiscuous mode
[  650.249046][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.254838][ T5636] bridge_slave_0: left allmulticast mode
[  650.254850][ T5636] bridge_slave_0: left promiscuous mode
[  650.254939][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.385746][ T5636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  650.391902][ T5636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  650.404154][ T5636] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  650.412787][ T5636] bond0 (unregistering): Released all slaves
[  650.419324][ T5338] 8021q: adding VLAN 0 to HW filter on device eth6
[  650.577476][T22017] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  650.583439][T22017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.598087][T22017] netlink: 'syz.1.6339': attribute type 13 has an invalid length.
[  650.699543][T22029] netlink: 'syz.8.6342': attribute type 1 has an invalid length.
[  651.376507][T17922] Bluetooth: hci1: command tx timeout
[  651.403716][ T5338] 8021q: adding VLAN 0 to HW filter on device eth7
[  651.857477][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6352'.
[  652.022268][ T5338] 8021q: adding VLAN 0 to HW filter on device eth8
[  652.301418][ T5636] hsr_slave_0: left promiscuous mode
[  652.383813][ T5636] hsr_slave_1: left promiscuous mode
[  652.390422][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.390490][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.394647][ T5636] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.394662][ T5636] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.432179][ T5636] veth1_macvtap: left promiscuous mode
[  652.432265][ T5636] veth0_macvtap: left promiscuous mode
[  652.432752][ T5636] veth1_vlan: left promiscuous mode
[  652.432810][ T5636] veth0_vlan: left promiscuous mode
[  652.688492][T22072] netlink: 'syz.8.6357': attribute type 16 has an invalid length.
[  652.691988][T22072] netlink: 'syz.8.6357': attribute type 3 has an invalid length.
[  652.695901][T22072] netlink: 'syz.8.6357': attribute type 1 has an invalid length.
[  652.699481][T22072] netlink: 112 bytes leftover after parsing attributes in process `syz.8.6357'.
[  652.968057][ T5636] team0 (unregistering): Port device team_slave_1 removed
[  652.990066][ T5636] team0 (unregistering): Port device team_slave_0 removed
[  653.399519][T22064] lo speed is unknown, defaulting to 1000
[  653.401635][T22064] lo speed is unknown, defaulting to 1000
[  653.406244][T22064] lo speed is unknown, defaulting to 1000
[  653.459400][T17922] Bluetooth: hci1: command tx timeout
[  653.704849][T22064] infiniband sz1: set active
[  653.705576][T22064] infiniband sz1: added lo
[  653.709617][T22064] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  653.710839][T22064] infiniband sz1: Couldn't open port 1
[  653.711339][T22064] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  653.711353][T22064] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  653.711366][T22064] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  653.757749][ T5656] lo speed is unknown, defaulting to 1000
[  653.768881][T22064] RDS/IB: sz1: added
[  653.768946][T22064] smc: adding ib device sz1 with port count 1
[  653.768979][T22064] smc:    ib device sz1 port 1 has no pnetid
[  653.808566][ T5656] lo speed is unknown, defaulting to 1000
[  653.827948][T22064] lo speed is unknown, defaulting to 1000
[  653.909790][T21963] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  653.930587][T21963] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  653.933010][T21963] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  653.942706][T21963] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  653.947613][T21963] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  653.962462][T21963] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  653.964762][T21963] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  653.972601][T21963] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  653.995694][T22103] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6365'.
[  654.163916][T22107] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6366'.
[  654.170449][T21963] 8021q: adding VLAN 0 to HW filter on device bond0
[  654.189148][T21963] 8021q: adding VLAN 0 to HW filter on device team0
[  654.198249][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.198377][ T6182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  654.217177][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.217296][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  654.320583][T22064] lo speed is unknown, defaulting to 1000
[  654.470653][T22117] openvswitch: netlink: IPv4 tunnel dst address is zero
[  654.493069][T22117] Cannot find set identified by id 0 to match
[  654.501084][T22064] lo speed is unknown, defaulting to 1000
[  654.785303][T21963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.841935][T21963] veth0_vlan: entered promiscuous mode
[  654.849239][T21963] veth1_vlan: entered promiscuous mode
[  654.875052][T21963] veth0_macvtap: entered promiscuous mode
[  654.879231][T21963] veth1_macvtap: entered promiscuous mode
[  654.898008][T21963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.905646][T21963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  655.038169][T22035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.042171][T22035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.117674][T22035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.117724][T22035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.156522][ T6182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.156598][ T6182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.190637][T22142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  655.201893][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.201950][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.365503][T22155] lo speed is unknown, defaulting to 1000
[  655.519105][T22163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6375'.
[  655.542075][T22163] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6375'.
[  655.546567][T17922] Bluetooth: hci1: command tx timeout
[  655.671521][T22155] lo speed is unknown, defaulting to 1000
[  656.139509][T22201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6386'.
[  656.267399][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6391'.
[  656.409983][T22223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6395'.
[  656.483378][T22231] netlink: 'syz.2.6398': attribute type 4 has an invalid length.
[  656.486006][T22231] netlink: 'syz.2.6398': attribute type 7 has an invalid length.
[  656.569369][   T34] audit: type=1107 audit(1789070334.670:9): pid=22230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0w^pA~V768nc5.^MPz)eR'
[  656.742024][T22243] netlink: 'syz.8.6401': attribute type 10 has an invalid length.
[  656.884681][T22243] team0 (unregistering): Port device team_slave_0 removed
[  656.894912][T22243] team0 (unregistering): Port device team_slave_1 removed
[  657.065363][T22248] netlink: 'syz.2.6400': attribute type 15 has an invalid length.
[  657.065411][T22248] netlink: 'syz.2.6400': attribute type 7 has an invalid length.
[  657.153937][T22268] netlink: 'syz.2.6406': attribute type 41 has an invalid length.
[  657.641640][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6414'.
[  658.139359][T22343] sctp: [Deprecated]: syz.2.6430 (pid 22343) Use of int in maxseg socket option.
[  658.139359][T22343] Use struct sctp_assoc_value instead
[  658.283060][T22345] netlink: 'syz.1.6436': attribute type 29 has an invalid length.
[  658.723537][T22346] netlink: 'syz.1.6436': attribute type 29 has an invalid length.
[  658.727237][T22349] netlink: 'syz.1.6436': attribute type 29 has an invalid length.
[  658.955623][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6441'.
[  658.955689][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6441'.
[  659.048575][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6441'.
[  659.048645][T22359] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6441'.
[  659.249851][T22372] netlink: zone id is out of range
[  659.250035][T22372] netlink: zone id is out of range
[  659.250299][T22372] netlink: zone id is out of range
[  659.250305][T22372] netlink: zone id is out of range
[  659.250372][T22372] netlink: zone id is out of range
[  659.250376][T22372] netlink: zone id is out of range
[  659.250443][T22372] netlink: zone id is out of range
[  659.250582][T22372] netlink: zone id is out of range
[  659.250586][T22372] netlink: zone id is out of range
[  659.277606][T22385] netlink: 'syz.1.6449': attribute type 6 has an invalid length.
[  660.581437][T22462] __nla_validate_parse: 14 callbacks suppressed
[  660.582135][T22462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6481'.
[  665.498500][T22539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6507'.
[  665.939761][T22552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6511'.
[  665.939817][T22552] netlink: 90 bytes leftover after parsing attributes in process `syz.8.6511'.
[  665.940045][T22552] netlink: 90 bytes leftover after parsing attributes in process `syz.8.6511'.
[  666.044201][T22557] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6514'.
[  666.050861][T22557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6514'.
[  666.099968][T22560] x_tables: ip6_tables: mark.1 match: invalid size 16 (kernel) != (user) 24
[  666.364079][T17922] Bluetooth: hci0: Unknown advertising packet type: 0x76
[  666.364115][T17922] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  666.369923][T17922] Bluetooth: hci0: Malformed LE Event: 0x0d
[  666.455592][T22580] net_ratelimit: 116 callbacks suppressed
[  666.458623][T22580] openvswitch: netlink: IP tunnel dst address not specified
[  666.485336][T22582] validate_nla: 9 callbacks suppressed
[  666.487722][T22582] netlink: 'syz.1.6525': attribute type 5 has an invalid length.
[  666.490508][T22582] netlink: 'syz.1.6525': attribute type 5 has an invalid length.
[  667.557475][T22610] netlink: 'syz.2.6535': attribute type 2 has an invalid length.
[  667.557544][T22610] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.6535'.
[  667.557605][T22610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6535'.
[  668.450021][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6542'.
[  668.544789][T22643] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6544'.
[  668.736171][T22653] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  668.884677][T22662] netlink: 'syz.1.6553': attribute type 1 has an invalid length.
[  668.922894][T22662] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6553'.
[  669.055281][T22671] netlink: 'syz.1.6557': attribute type 10 has an invalid length.
[  669.143726][T22671] team0: Device wg2 is of different type
[  669.433888][T22681] tc_dump_action: action bad kind
[  670.083518][T22711] netlink: 'syz.2.6576': attribute type 1 has an invalid length.
[  670.175692][T22707] netlink: 'syz.8.6573': attribute type 39 has an invalid length.
[  671.723150][T22781] __nla_validate_parse: 3 callbacks suppressed
[  671.723481][T22781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6609'.
[  672.326213][T22825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  672.749273][T22839] wg0 speed is unknown, defaulting to 1000
[  672.753298][T22839] wg0 speed is unknown, defaulting to 1000
[  672.862244][T22839] wg0 speed is unknown, defaulting to 1000
[  672.879689][T22839] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  672.886982][T22839] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  672.894639][T22839] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  673.126133][T22839] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  673.322564][T22864] netlink: 'syz.2.6644': attribute type 10 has an invalid length.
[  673.323902][T22864] batman_adv: batadv0: Adding interface: netdevsim1
[  673.323910][T22864] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.323922][T22864] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active
[  673.419526][T22839] wg0 speed is unknown, defaulting to 1000
[  673.421740][T22839] wg0 speed is unknown, defaulting to 1000
[  673.422547][T22839] wg0 speed is unknown, defaulting to 1000
[  674.370201][T22898] netlink: 'syz.2.6655': attribute type 21 has an invalid length.
[  674.517234][  T943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.517446][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.550336][T22906] openvswitch: netlink: Actions may not be safe on all matching packets
[  674.634889][T22921] netlink: 'syz.2.6666': attribute type 6 has an invalid length.
[  674.634940][T22921] netlink: 360 bytes leftover after parsing attributes in process `syz.2.6666'.
[  674.685431][T22925] lo speed is unknown, defaulting to 1000
[  674.742677][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6667'.
[  674.747655][T22930] netlink: 30 bytes leftover after parsing attributes in process `syz.2.6667'.
[  674.859330][T22925] lo speed is unknown, defaulting to 1000
[  674.862971][T22932] netlink: 'syz.1.6671': attribute type 11 has an invalid length.
[  675.019831][T22925] wg0 speed is unknown, defaulting to 1000
[  675.051719][T17922] Bluetooth: hci2: Unknown advertising packet type: 0x76
[  675.051770][T17922] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  675.051806][T17922] Bluetooth: hci2: Malformed LE Event: 0x0d
[  675.134176][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6676'.
[  675.279877][T22952] IPv6: Can't replace route, no match found
[  675.401635][T22959] netlink: 'syz.2.6683': attribute type 29 has an invalid length.
[  675.402152][T22959] netlink: 'syz.2.6683': attribute type 29 has an invalid length.
[  675.402579][T22959] netlink: 'syz.2.6683': attribute type 29 has an invalid length.
[  675.934119][T17922] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  676.282961][T22990] lo speed is unknown, defaulting to 1000
[  676.288376][T22990] lo speed is unknown, defaulting to 1000
[  676.294680][T22990] lo speed is unknown, defaulting to 1000
[  676.301868][T22990] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  676.307405][T22990] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  676.314503][T22990] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  676.395520][T22990] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  676.436092][T16952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.440655][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.445017][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.445128][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.445623][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.541239][T22990] lo speed is unknown, defaulting to 1000
[  676.553034][T22990] lo speed is unknown, defaulting to 1000
[  676.570219][T22990] lo speed is unknown, defaulting to 1000
[  676.801126][T23020] syzkaller0: entered promiscuous mode
[  676.801178][T23020] syzkaller0: entered allmulticast mode
[  677.039643][T23036] netlink: 164 bytes leftover after parsing attributes in process `syz.8.6718'.
[  677.186488][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6719'.
[  677.190323][T23044] openvswitch: netlink: Flow actions attr not present in new flow.
[  677.490600][T23055] lo speed is unknown, defaulting to 1000
[  677.788954][T23055] lo speed is unknown, defaulting to 1000
[  677.833853][T23069] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6732'.
[  677.941404][T23055] wg0 speed is unknown, defaulting to 1000
[  677.945959][T23055] lo speed is unknown, defaulting to 1000
[  678.027150][T23078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.183474][T23085] pimreg: tun_chr_ioctl cmd 1074025676
[  678.183517][T23085] pimreg: owner set to 0
[  678.444158][T23099] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6742'.
[  678.842249][T23118] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.6752'.
[  678.912797][T23124] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6754'.
[  678.912854][T23124] netlink: 'syz.8.6754': attribute type 1 has an invalid length.
[  679.559181][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.658770][T17922] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11
[  679.875836][T23164] syzkaller0: entered promiscuous mode
[  679.875903][T23164] syzkaller0: entered allmulticast mode
[  679.972409][T23182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6778'.
[  680.268015][T16952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.268198][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.465788][T23192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6784'.
[  682.584806][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.053785][T23232] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.6798'.
[  683.503823][T23249] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6803'.
[  683.979657][T23265] netlink: 'syz.8.6811': attribute type 16 has an invalid length.
[  683.979720][T23265] netlink: 156 bytes leftover after parsing attributes in process `syz.8.6811'.
[  684.459873][T23286] netlink: 'syz.2.6820': attribute type 2 has an invalid length.
[  684.459928][T23286] netlink: 'syz.2.6820': attribute type 4 has an invalid length.
[  684.459979][T23286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6820'.
[  684.614400][T23295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6823'.
[  684.622855][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6825'.
[  685.399044][T23313] 1: renamed from gre0 (while UP)
[  685.424564][ T1112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.424697][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.455497][T23313] A link change request failed with some changes committed already. Interface 1 may have been left with an inconsistent configuration, please check.
[  685.951000][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.966462][ T5636] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  685.993483][T23315] netlink: 'syz.1.6834': attribute type 17 has an invalid length.
[  686.020292][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  686.020391][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  686.061801][ T5583] wg0 speed is unknown, defaulting to 1000
[  686.069322][T18228] lo speed is unknown, defaulting to 1000
[  686.927326][T23356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6850'.
[  687.139044][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6855'.
[  687.381148][T23381] openvswitch: netlink: ct_state flags 0000c1ff unsupported
[  687.636172][T23398] netlink: 'syz.8.6868': attribute type 12 has an invalid length.
[  687.642422][T23398] netlink: 172 bytes leftover after parsing attributes in process `syz.8.6868'.
[  687.673528][T23400] netlink: 'syz.8.6869': attribute type 1 has an invalid length.
[  687.756036][T23404] netlink: 'syz.1.6872': attribute type 4 has an invalid length.
[  687.779718][T23408] netlink: 'syz.2.6873': attribute type 21 has an invalid length.
[  687.784926][T23408] IPv6: NLM_F_CREATE should be specified when creating new route
[  687.785061][T23408] netlink: 'syz.2.6873': attribute type 1 has an invalid length.
[  687.924526][T23416] veth0_vlan: entered allmulticast mode
[  688.136716][T23425] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.6879'.
[  688.424346][T23438] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6881'.
[  688.976573][T18228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.953191][T23469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.039532][T23475] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6890'.
[  691.139533][T20906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.139769][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.850939][T23497] netlink: 'syz.2.6899': attribute type 11 has an invalid length.
[  691.850996][T23497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6899'.
[  692.022693][T18228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.091511][T23508] netlink: 'syz.2.6904': attribute type 4 has an invalid length.
[  693.239814][T23516] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6906'.
[  693.320574][T23525] netlink: 'syz.2.6911': attribute type 3 has an invalid length.
[  693.767199][T23538] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.6909'.
[  693.864235][T23538] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.917872][T23545] netlink: 'syz.8.6919': attribute type 40 has an invalid length.
[  694.292275][ T5338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  694.403438][T23564] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6926'.
[  694.717477][T23603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6942'.
[  695.056930][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.228706][T23637] siw: device registration error -23
[  695.269372][T23639] openvswitch: netlink: IPv4 tun info is not correct
[  695.463594][T23649] netlink: 'syz.2.6965': attribute type 2 has an invalid length.
[  695.463649][T23649] netlink: 'syz.2.6965': attribute type 2 has an invalid length.
[  695.578419][T23653] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  695.978406][T23674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  696.085748][T23676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6978'.
[  696.263897][T23687] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6983'.
[  696.412939][T23692] netlink: 'syz.2.6985': attribute type 10 has an invalid length.
[  696.413007][T23692] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6985'.
[  696.808065][T23711] openvswitch: netlink: Missing valid actions attribute.
[  696.808583][T23711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  696.898282][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  696.898439][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.189334][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7000'.
[  697.783928][T23759] nbd: couldn't find a device at index 46
[  697.901401][T17922] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4
[  698.169459][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  698.398390][T23776] nbd: must specify at least one socket
[  699.535454][T23801] netlink: 'syz.8.7032': attribute type 1 has an invalid length.
[  699.535517][T23801] netlink: 'syz.8.7032': attribute type 2 has an invalid length.
[  699.535551][T23801] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7032'.
[  700.428891][T23826] netlink: 'syz.1.7044': attribute type 29 has an invalid length.
[  700.432134][T23826] netlink: 'syz.1.7044': attribute type 29 has an invalid length.
[  701.240011][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.278046][T23871] netlink: 'syz.2.7063': attribute type 21 has an invalid length.
[  701.304852][T23874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7064'.
[  701.446056][T23882] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7068'.
[  701.506722][T23884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7069'.
[  701.506887][T23884] openvswitch: netlink: Invalid VLAN frame
[  701.544868][T23885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7068'.
[  701.549224][T23885] netlink: 'syz.1.7068': attribute type 39 has an invalid length.
[  701.843070][T23907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7077'.
[  701.871203][T23914] netlink: 'syz.1.7078': attribute type 4 has an invalid length.
[  701.943163][T23918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.943452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.016836][T23910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.017039][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.146527][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.150520][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.153350][T23917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.153488][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  702.281374][T23948] netlink: 'syz.8.7094': attribute type 27 has an invalid length.
[  702.676610][T23975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7107'.
[  703.200438][T23997] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7116'.
[  703.405413][T24006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7121'.
[  703.592381][ T5656] lo speed is unknown, defaulting to 1000
[  703.592438][ T5656] syz2: Port: 1 Link DOWN
[  703.593156][ T5583] lo speed is unknown, defaulting to 1000
[  703.637787][T23999] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7118'.
[  703.882252][T24025] netlink: 'syz.8.7131': attribute type 10 has an invalid length.
[  703.883023][T24025] netlink: 'syz.8.7131': attribute type 16 has an invalid length.
[  704.619187][T24016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  704.715317][T24057] netlink: 'syz.8.7142': attribute type 10 has an invalid length.
[  704.759551][T24057] netlink: 'syz.8.7142': attribute type 1 has an invalid length.
[  704.761645][T24057] netlink: 'syz.8.7142': attribute type 4 has an invalid length.
[  704.764715][T24057] __nla_validate_parse: 3 callbacks suppressed
[  704.764835][T24057] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.7142'.
[  704.789823][T24066] pim6reg1: entered promiscuous mode
[  704.789862][T24066] pim6reg1: entered allmulticast mode
[  704.946671][ T5338] veth0_vlan: left promiscuous mode
[  704.964234][  T806] veth0_vlan: entered promiscuous mode
[  705.099954][   T34] audit: type=1107 audit(1789070383.210:10): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  705.317303][T24099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7156'.
[  705.423001][T24101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7154'.
[  705.511727][T24107] netlink: 'syz.2.7159': attribute type 32 has an invalid length.
[  705.564622][T24112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7161'.
[  705.635700][T24117] block nbd0: not configured, cannot reconfigure
[  706.053916][T24151] netlink: 15 bytes leftover after parsing attributes in process `syz.2.7178'.
[  706.488199][T24145] option changes via remount are deprecated (pid=24142 comm=syz.8.7175)
[  706.720798][T24173] netlink: 'syz.8.7185': attribute type 29 has an invalid length.
[  706.907896][T24178] netlink: 'syz.8.7187': attribute type 9 has an invalid length.
[  707.142308][T23910] net_ratelimit: 65 callbacks suppressed
[  707.142392][T23910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.142647][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.296719][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  708.191782][T24201] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7196'.
[  708.191833][T24201] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7196'.
[  708.207550][T24202] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7195'.
[  708.287510][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7198'.
[  708.362236][T24216] netlink: 'syz.1.7202': attribute type 10 has an invalid length.
[  708.362302][T24216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7202'.
[  708.362401][T24216] ip6_vti0: entered promiscuous mode
[  708.362413][T24216] ip6_vti0: entered allmulticast mode
[  708.363188][T24216] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  708.638240][T24233] proc: Unknown parameter 'fowner<00000000000000000000'
[  708.662375][T24233] netlink: 'syz.1.7211': attribute type 13 has an invalid length.
[  708.808738][T24236] netlink: 'syz.1.7211': attribute type 1 has an invalid length.
[  710.338536][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.409919][T24243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7216'.
[  712.284253][T24259] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7221'.
[  712.510163][T24263] netlink: 'syz.1.7223': attribute type 9 has an invalid length.
[  712.902515][T23910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.902739][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.010702][T24273] netlink: 774 bytes leftover after parsing attributes in process `syz.1.7228'.
[  713.014619][T24273] netlink: 'syz.1.7228': attribute type 1 has an invalid length.
[  713.127266][T24277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7230'.
[  713.380209][ T5583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.901541][T24300] openvswitch: netlink: Unknown key attributes 2
[  714.056672][T24304] sctp: [Deprecated]: syz.1.7236 (pid 24304) Use of int in max_burst socket option deprecated.
[  714.056672][T24304] Use struct sctp_assoc_value instead
[  714.129700][T24304] syzkaller0: entered promiscuous mode
[  714.129770][T24304] syzkaller0: entered allmulticast mode
[  716.419896][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.661393][  T943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  718.661581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  719.459907][T11146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.221448][T24348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7250'.
[  720.225824][T24348] openvswitch: netlink: EtherType 500 is less than min 600
[  721.222093][T24378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7261'.
[  721.304140][T24380] netlink: 'syz.1.7262': attribute type 11 has an invalid length.
[  722.497846][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.247398][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  724.252370][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  724.255614][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  724.259255][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  724.262747][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  724.288660][T24394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  724.304074][T24394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  724.307954][T24394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  724.315502][T24394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  724.319052][T24394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  724.430532][ T1114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.430705][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  724.630229][T24390] lo speed is unknown, defaulting to 1000
[  724.782501][T22035] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.817991][T24389] lo speed is unknown, defaulting to 1000
[  724.834330][T24390] lo speed is unknown, defaulting to 1000
[  724.891110][T22035] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.038722][T22035] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.068635][T24390] wg0 speed is unknown, defaulting to 1000
[  725.069708][T24390] lo speed is unknown, defaulting to 1000
[  725.183036][T22035] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.213411][T24389] lo speed is unknown, defaulting to 1000
[  725.463557][T24389] wg0 speed is unknown, defaulting to 1000
[  725.521256][T24389] lo speed is unknown, defaulting to 1000
[  725.545223][T18228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  725.559469][T22035] gretap0: left allmulticast mode
[  725.559533][T22035] gretap0: left promiscuous mode
[  725.559725][T22035] bridge0: port 3(gretap0) entered disabled state
[  725.570932][T22035] bridge_slave_1: left allmulticast mode
[  725.570994][T22035] bridge_slave_1: left promiscuous mode
[  725.572327][T22035] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.581486][T22035] bridge_slave_0: left allmulticast mode
[  725.581545][T22035] bridge_slave_0: left promiscuous mode
[  725.581983][T22035] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.811394][ T5338] 8021q: adding VLAN 0 to HW filter on device eth9
[  725.864828][T22035] ovs-s!!: left promiscuous mode
[  725.902722][T22035] : left promiscuous mode
[  725.963426][T22035] tipc: Left network mode
[  725.981449][T24390] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.981520][T24390] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.981611][T24390] bridge_slave_0: entered allmulticast mode
[  725.982366][T24390] bridge_slave_0: entered promiscuous mode
[  726.004742][T24390] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.008886][T24390] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.011350][T24390] bridge_slave_1: entered allmulticast mode
[  726.014944][T24390] bridge_slave_1: entered promiscuous mode
[  726.091573][T24390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.114006][T24390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.155123][T24390] team0: Port device team_slave_0 added
[  726.158309][T24390] team0: Port device team_slave_1 added
[  726.229027][T24390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.229062][T24390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.229099][T24390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.232010][T24390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.232035][T24390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.232070][T24390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  726.322683][ T5338] 8021q: adding VLAN 0 to HW filter on device eth10
[  726.345621][T24390] hsr_slave_0: entered promiscuous mode
[  726.348227][T24394] Bluetooth: hci3: command tx timeout
[  726.348326][T24390] hsr_slave_1: entered promiscuous mode
[  726.348808][T24390] debugfs: 'hsr0' already exists in 'hsr'
[  726.348820][T24390] Cannot create hsr debugfs directory
[  726.418487][T24394] Bluetooth: hci4: command tx timeout
[  726.684839][T24389] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.684998][T24389] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.685146][T24389] bridge_slave_0: entered allmulticast mode
[  726.687113][T24389] bridge_slave_0: entered promiscuous mode
[  726.703262][T24389] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.703464][T24389] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.703555][T24389] bridge_slave_1: entered allmulticast mode
[  726.734551][T24389] bridge_slave_1: entered promiscuous mode
[  726.835008][ T5338] 8021q: adding VLAN 0 to HW filter on device eth11
[  726.999236][T24389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.027821][T24389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.135174][T24389] team0: Port device team_slave_0 added
[  727.142959][T24389] team0: Port device team_slave_1 added
[  727.234493][T24389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.234555][T24389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.240084][T24389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.260266][T22035] hsr_slave_0: left promiscuous mode
[  727.262438][T22035] hsr_slave_1: left promiscuous mode
[  727.263361][T22035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  727.263374][T22035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.279606][T22035] veth1_macvtap: left promiscuous mode
[  727.281878][T22035] veth1_vlan: left promiscuous mode
[  727.396216][T16952] smc: removing ib device syz
[  727.777645][ T1114] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  727.779579][T24389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.779590][T24389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.779607][T24389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.973195][T18228] ==================================================================
[  727.973221][T18228] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250
[  727.973238][T18228] Read of size 1 at addr ffff8881bd2c8e09 by task kworker/0:10/18228
[  727.973245][T18228] 
[  727.973251][T18228] CPU: 0 UID: 0 PID: 18228 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) 
[  727.973260][T18228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  727.973265][T18228] Workqueue: events smc_ib_port_event_work
[  727.973278][T18228] Call Trace:
[  727.973286][T18228]  <TASK>
[  727.973290][T18228]  dump_stack_lvl+0xe8/0x150
[  727.973308][T18228]  print_address_description+0x55/0x1e0
[  727.973323][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  727.973333][T18228]  print_report+0x58/0x70
[  727.973348][T18228]  kasan_report+0x117/0x150
[  727.973364][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  727.973377][T18228]  __ethtool_get_link_ksettings+0x230/0x250
[  727.973391][T18228]  __ethtool_get_link_ksettings+0x11f/0x250
[  727.973404][T18228]  ib_get_eth_speed+0x180/0x7f0
[  727.973418][T18228]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  727.973428][T18228]  ? do_raw_spin_unlock+0x4d/0x200
[  727.973439][T18228]  ? rxe_query_port+0x6b/0x3d0
[  727.973450][T18228]  rxe_query_port+0x93/0x3d0
[  727.973460][T18228]  ib_query_port+0x16e/0x830
[  727.973472][T18228]  smc_ib_port_event_work+0x147/0x920
[  727.973483][T18228]  ? rcu_is_watching+0x16/0xb0
[  727.973492][T18228]  ? process_scheduled_works+0x97a/0x1630
[  727.973501][T18228]  process_scheduled_works+0xc3d/0x1630
[  727.973514][T18228]  ? __pfx_process_scheduled_works+0x10/0x10
[  727.973524][T18228]  ? assign_work+0x3cf/0x5d0
[  727.973532][T18228]  worker_thread+0xa47/0xfb0
[  727.973544][T18228]  ? __kthread_parkme+0x71/0x1f0
[  727.973554][T18228]  kthread+0x38b/0x480
[  727.973561][T18228]  ? __pfx_worker_thread+0x10/0x10
[  727.973570][T18228]  ? __pfx_kthread+0x10/0x10
[  727.973576][T18228]  ret_from_fork+0x514/0xb70
[  727.973583][T18228]  ? __pfx_ret_from_fork+0x10/0x10
[  727.973589][T18228]  ? __switch_to+0xc89/0x1420
[  727.973600][T18228]  ? __pfx_kthread+0x10/0x10
[  727.973606][T18228]  ret_from_fork_asm+0x1a/0x30
[  727.973619][T18228]  </TASK>
[  727.973621][T18228] 
[  727.973623][T18228] Allocated by task 13365:
[  727.973627][T18228]  kasan_save_track+0x3e/0x80
[  727.973634][T18228]  __kasan_kmalloc+0x93/0xb0
[  727.973641][T18228]  __kvmalloc_node_noprof+0x50f/0x820
[  727.973648][T18228]  alloc_netdev_mqs+0xa9/0x12a0
[  727.973658][T18228]  rtnl_create_link+0x321/0xd70
[  727.973668][T18228]  rtnl_newlink_create+0x258/0x7b0
[  727.973676][T18228]  rtnl_newlink+0x166d/0x1c30
[  727.973682][T18228]  rtnetlink_rcv_msg+0x802/0xc00
[  727.973688][T18228]  netlink_rcv_skb+0x226/0x4a0
[  727.973696][T18228]  netlink_unicast+0x7bd/0x940
[  727.973703][T18228]  netlink_sendmsg+0x813/0xb40
[  727.973711][T18228]  sock_sendmsg_nosec+0x13a/0x180
[  727.973721][T18228]  __sys_sendto+0x408/0x5a0
[  727.973727][T18228]  __x64_sys_sendto+0xde/0x100
[  727.973733][T18228]  do_syscall_64+0x166/0x520
[  727.973740][T18228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.973747][T18228] 
[  727.973748][T18228] Freed by task 22035:
[  727.973752][T18228]  kasan_save_track+0x3e/0x80
[  727.973758][T18228]  kasan_save_free_info+0x40/0x50
[  727.973767][T18228]  __kasan_slab_free+0x5c/0x80
[  727.973773][T18228]  kfree+0x1c5/0x650
[  727.973784][T18228]  device_release+0xc4/0x1f0
[  727.973794][T18228]  kobject_put+0x222/0x550
[  727.973801][T18228]  netdev_run_todo+0xeee/0x1060
[  727.973809][T18228]  default_device_exit_batch+0x6d9/0x760
[  727.973816][T18228]  ops_undo_list+0x4b4/0x8d0
[  727.973823][T18228]  cleanup_net+0x572/0x810
[  727.973829][T18228]  process_scheduled_works+0xc3d/0x1630
[  727.973836][T18228]  worker_thread+0xa47/0xfb0
[  727.973872][T18228]  kthread+0x38b/0x480
[  727.973879][T18228]  ret_from_fork+0x514/0xb70
[  727.973884][T18228]  ret_from_fork_asm+0x1a/0x30
[  727.973893][T18228] 
[  727.973895][T18228] The buggy address belongs to the object at ffff8881bd2c8000
[  727.973895][T18228]  which belongs to the cache kmalloc-cg-4k of size 4096
[  727.973902][T18228] The buggy address is located 3593 bytes inside of
[  727.973902][T18228]  freed 4096-byte region [ffff8881bd2c8000, ffff8881bd2c9000)
[  727.973909][T18228] 
[  727.973911][T18228] The buggy address belongs to the physical page:
[  727.973915][T18228] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bd2c8
[  727.973923][T18228] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  727.973928][T18228] memcg:ffff8881764ff241
[  727.973932][T18228] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  727.973939][T18228] page_type: f5(slab)
[  727.973946][T18228] raw: 057ff00000000040 ffff88810004b500 dead000000000100 dead000000000122
[  727.973952][T18228] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff8881764ff241
[  727.973958][T18228] head: 057ff00000000040 ffff88810004b500 dead000000000100 dead000000000122
[  727.973963][T18228] head: 0000000000000000 0000000200040004 00000000f5000000 ffff8881764ff241
[  727.973969][T18228] head: 057ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  727.973974][T18228] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  727.973978][T18228] page dumped because: kasan: bad access detected
[  727.973981][T18228] page_owner tracks the page as allocated
[  727.973984][T18228] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5597, tgid 5597 (syz-executor), ts 55161278030
[  727.973996][T18228]  post_alloc_hook+0x1f9/0x250
[  727.974006][T18228]  get_page_from_freelist+0x2209/0x2280
[  727.974013][T18228]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  727.974020][T18228]  allocate_slab+0x7d/0x620
[  727.974028][T18228]  refill_objects+0x2d5/0x350
[  727.974036][T18228]  __pcs_replace_empty_main+0x2c8/0x6c0
[  727.974043][T18228]  __kmalloc_noprof+0x47b/0x720
[  727.974048][T18228]  __register_sysctl_table+0x6f/0x1370
[  727.974056][T18228]  __addrconf_sysctl_register+0x31c/0x4b0
[  727.974064][T18228]  addrconf_init_net+0x4f1/0x790
[  727.974070][T18228]  ops_init+0x35d/0x5d0
[  727.974075][T18228]  setup_net+0x118/0x350
[  727.974081][T18228]  copy_net_ns+0x53b/0x780
[  727.974086][T18228]  create_new_namespaces+0x3f0/0x6b0
[  727.974095][T18228]  unshare_nsproxy_namespaces+0x149/0x190
[  727.974103][T18228]  ksys_unshare+0x5a7/0x950
[  727.974113][T18228] page last free pid 5591 tgid 5591 ts 55138321634 stack trace:
[  727.974121][T18228]  __free_frozen_pages+0xc93/0xd90
[  727.974135][T18228]  __slab_free+0x274/0x2c0
[  727.974144][T18228]  qlist_free_all+0x99/0x100
[  727.974154][T18228]  kasan_quarantine_reduce+0x148/0x160
[  727.974164][T18228]  __kasan_slab_alloc+0x22/0x80
[  727.974177][T18228]  __kmalloc_node_track_caller_noprof+0x44b/0x720
[  727.974187][T18228]  kvasprintf+0xeb/0x1a0
[  727.974200][T18228]  kasprintf+0xe2/0x140
[  727.974210][T18228]  alloc_workqueue_noprof+0x12e/0x210
[  727.974220][T18228]  bond_init+0xd4/0x8b0
[  727.974232][T18228]  register_netdevice+0x6a1/0x1eb0
[  727.974245][T18228]  bond_newlink+0x48/0xd0
[  727.974256][T18228]  rtnl_newlink_create+0x305/0x7b0
[  727.974264][T18228]  rtnl_newlink+0x166d/0x1c30
[  727.974270][T18228]  rtnetlink_rcv_msg+0x802/0xc00
[  727.974276][T18228]  netlink_rcv_skb+0x226/0x4a0
[  727.974290][T18228] 
[  727.974292][T18228] Memory state around the buggy address:
[  727.974296][T18228]  ffff8881bd2c8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  727.974301][T18228]  ffff8881bd2c8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  727.974306][T18228] >ffff8881bd2c8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  727.974309][T18228]                       ^
[  727.974312][T18228]  ffff8881bd2c8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  727.974317][T18228]  ffff8881bd2c8f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  727.974320][T18228] ==================================================================
[  727.977592][T18228] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  728.232641][T18228] CPU: 0 UID: 0 PID: 18228 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) 
[  728.235637][T18228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  728.238762][T18228] Workqueue: events smc_ib_port_event_work
[  728.240638][T18228] Call Trace:
[  728.241702][T18228]  <TASK>
[  728.242668][T18228]  vpanic+0x56d/0xa60
[  728.243973][T18228]  ? __pfx_vpanic+0x10/0x10
[  728.245404][T18228]  panic+0xc5/0xd0
[  728.246598][T18228]  ? __pfx_panic+0x10/0x10
[  728.248025][T18228]  ? preempt_schedule_thunk+0x16/0x40
[  728.249739][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  728.251641][T18228]  ? preempt_schedule_thunk+0x16/0x40
[  728.253360][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  728.255310][T18228]  check_panic_on_warn+0x89/0xb0
[  728.256912][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  728.258820][T18228]  end_report+0x73/0x170
[  728.260184][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  728.262094][T18228]  kasan_report+0x128/0x150
[  728.263542][T18228]  ? __ethtool_get_link_ksettings+0x230/0x250
[  728.265462][T18228]  __ethtool_get_link_ksettings+0x230/0x250
[  728.267345][T18228]  __ethtool_get_link_ksettings+0x11f/0x250
[  728.269266][T18228]  ib_get_eth_speed+0x180/0x7f0
[  728.270824][T18228]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  728.272554][T18228]  ? do_raw_spin_unlock+0x4d/0x200
[  728.274163][T18228]  ? rxe_query_port+0x6b/0x3d0
[  728.275713][T18228]  rxe_query_port+0x93/0x3d0
[  728.277241][T18228]  ib_query_port+0x16e/0x830
[  728.279000][T18228]  smc_ib_port_event_work+0x147/0x920
[  728.281137][T18228]  ? rcu_is_watching+0x16/0xb0
[  728.283041][T18228]  ? process_scheduled_works+0x97a/0x1630
[  728.285137][T18228]  process_scheduled_works+0xc3d/0x1630
[  728.287169][T18228]  ? __pfx_process_scheduled_works+0x10/0x10
[  728.289154][T18228]  ? assign_work+0x3cf/0x5d0
[  728.290662][T18228]  worker_thread+0xa47/0xfb0
[  728.292279][T18228]  ? __kthread_parkme+0x71/0x1f0
[  728.294098][T18228]  kthread+0x38b/0x480
[  728.295410][T18228]  ? __pfx_worker_thread+0x10/0x10
[  728.296948][T18228]  ? __pfx_kthread+0x10/0x10
[  728.298361][T18228]  ret_from_fork+0x514/0xb70
[  728.299838][T18228]  ? __pfx_ret_from_fork+0x10/0x10
[  728.301480][T18228]  ? __switch_to+0xc89/0x1420
[  728.302990][T18228]  ? __pfx_kthread+0x10/0x10
[  728.304455][T18228]  ret_from_fork_asm+0x1a/0x30
[  728.305960][T18228]  </TASK>
[  728.307535][T18228] Kernel Offset: disabled
[  728.309248][T18228] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:00:06  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff35a6c05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc90007b3ef90 RSP=ffffc90007b3ee38
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8572a050
R12=dffffc0000000000 R13=1ffffffff35a6c22 R14=ffffffff9ad36100 R15=0000000000000000
RIP=ffffffff8572a0c7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d6d5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5ede7e0000 CR3=0000000117cb8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff943b6a48 RBX=0000000000000000 RCX=0000000000000007 RDX=0000000000020000
RSI=0000000000020000 RDI=9500000000000000 RBP=ffff88817a0029b0 RSP=ffffc9000323f198
R8 =ffffffff8177f1df R9 =0000000000000000 R10=ffffc9000323f478 R11=ffffffff81b29190
R12=0000000000000007 R13=ffff88817a0029b0 R14=ffff88817a001e00 R15=ffff88817a001e00
RIP=ffffffff81a33d77 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3cf2d6b380 ffffffff 00c00000
GS =0000 ffff8882a8cd5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ad9f376048 CR3=000000010d506000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000200000000300 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
