last executing test programs:

1m22.808952424s ago: executing program 2 (id=736):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

1m22.697586636s ago: executing program 2 (id=737):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r0, 0x0, 0xc000000}, 0x38)

1m21.829655551s ago: executing program 2 (id=739):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x345a7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x105503, 0x4, 0x80f, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x23, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

1m21.663869283s ago: executing program 2 (id=744):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400889c}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}, {0x4, 0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x28)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

1m21.520420883s ago: executing program 2 (id=751):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

1m19.74115122s ago: executing program 2 (id=766):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x26e1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080b0}, 0x404c000)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')

1m8.420306934s ago: executing program 0 (id=829):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x3a, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

1m8.359292228s ago: executing program 0 (id=830):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x0)

1m8.257255769s ago: executing program 0 (id=833):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x6, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

1m8.252345033s ago: executing program 0 (id=834):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x43, &(0x7f0000000000), 0x4)

1m8.149623896s ago: executing program 0 (id=835):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m8.148849614s ago: executing program 0 (id=836):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000000b010300000000000000000304000908000340000000010800034000000001f618b69482318c9258408238ad28f0d40e424780f6813dd21a6bee7abc27ae8186259b93196f732e338a1b46adc03b9285d91b091caa5cabc81148d11bc408bcf108f277f900c641c86505762d72b4eb04b7aef4e9240b9a444b4ad1a8f99bcac925cedb80a2c7363f9eae4e9a816d49ef0861446b0a1b8088ed8572a4ef890a91cfe24e48d9c5491903695b913479937dca69d66d72492c803842ad0f6b9109de42e33d40e55ed601aecb83d9415e2823938f43"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000018110000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006d000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000043000000b70000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)

1m4.632941577s ago: executing program 32 (id=766):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x10001, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x26e1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080b0}, 0x404c000)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')

52.641648813s ago: executing program 33 (id=836):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000003080)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000000b010300000000000000000304000908000340000000010800034000000001f618b69482318c9258408238ad28f0d40e424780f6813dd21a6bee7abc27ae8186259b93196f732e338a1b46adc03b9285d91b091caa5cabc81148d11bc408bcf108f277f900c641c86505762d72b4eb04b7aef4e9240b9a444b4ad1a8f99bcac925cedb80a2c7363f9eae4e9a816d49ef0861446b0a1b8088ed8572a4ef890a91cfe24e48d9c5491903695b913479937dca69d66d72492c803842ad0f6b9109de42e33d40e55ed601aecb83d9415e2823938f43"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="99", 0x1}], 0x1}, 0x24040080)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000018110000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006d000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000043000000b70000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)

2.125717068s ago: executing program 1 (id=1615):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

2.056126981s ago: executing program 1 (id=1617):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x2986, 0x12)

1.728117265s ago: executing program 1 (id=1618):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.658447341s ago: executing program 1 (id=1619):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.616975638s ago: executing program 3 (id=1620):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in=@rand_addr=0x64010102, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x5, 0x2, 0xfeffff7f00000001, 0x0, 0x60000, 0x0, 0x3}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x2, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e24, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x10c}}, 0x0)

1.547835989s ago: executing program 3 (id=1623):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000600)="d2ff03076003008cb89e08f086dd41cb0339e5ced42727d46f3a002105cadd09fc06518eb3a94f3f728dcef8cb6e26b364c28639af1b", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.547284469s ago: executing program 1 (id=1624):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000002c0), 0x8)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x1)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f80315420051379c86fcfd34f0bf334f466bc0f80bf5e242e8e9c25a12ccc88aece5bb4fcc6025e200"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x4a, 0x0, 0x0, 0xa5124f9}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)

1.407128837s ago: executing program 3 (id=1625):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e60803dc", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.406529127s ago: executing program 4 (id=1626):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"})

1.066069994s ago: executing program 4 (id=1627):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

1.065413395s ago: executing program 4 (id=1628):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
close(r0)

604.394293ms ago: executing program 4 (id=1629):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

105.569989ms ago: executing program 3 (id=1630):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000053c0001800c0002800500efa4010000002c00018014000300fe80000000000000000000000000003414000400000000000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100290000002c00018014000300"], 0xc8}}, 0x0)

31.225072ms ago: executing program 4 (id=1631):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x27)

30.820314ms ago: executing program 3 (id=1632):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x22, 0x0, 0x0)

30.324456ms ago: executing program 4 (id=1633):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xd, 0x0, 0x0, 0x10, &(0x7f0000000300), 0x0, 0x0, 0xe6, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x800})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000", @ANYRESDEC=r1, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
socketpair(0x28, 0x2, 0x28, &(0x7f0000001400))
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000680)='GPL\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e00", 0x22}], 0x1}, 0x0)

13.927153ms ago: executing program 3 (id=1634):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8c00, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10010, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x4040090)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
perf_event_open(0x0, 0x0, 0x9, r0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4004010)
r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18)
syz_clone(0x1821480, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)

0s ago: executing program 1 (id=1635):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d0000000033"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48606' (ED25519) to the list of known hosts.
syzkaller login: [   55.551574][ T5817] cgroup: Unknown subsys name 'net'
[   55.676674][ T5817] cgroup: Unknown subsys name 'cpuset'
[   55.683178][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.985872][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.216485][ T5861] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.257452][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.260582][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.274074][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.279417][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.285370][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.377390][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.925556][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.929550][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.933928][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.937790][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.941028][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.955797][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.969299][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.974177][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.981002][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.987384][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.053693][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.057795][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.063340][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.067535][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.071465][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.351364][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   68.473886][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   68.510315][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.513955][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.516559][ T5875] bridge_slave_0: entered allmulticast mode
[   68.519627][ T5875] bridge_slave_0: entered promiscuous mode
[   68.529264][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.533488][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.536575][ T5875] bridge_slave_1: entered allmulticast mode
[   68.540505][ T5875] bridge_slave_1: entered promiscuous mode
[   68.546928][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   68.592714][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.634118][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.679111][ T5875] team0: Port device team_slave_0 added
[   68.734959][ T5875] team0: Port device team_slave_1 added
[   68.738104][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.741322][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.745085][ T5876] bridge_slave_0: entered allmulticast mode
[   68.748979][ T5876] bridge_slave_0: entered promiscuous mode
[   68.781868][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.785442][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.788963][ T5881] bridge_slave_0: entered allmulticast mode
[   68.795246][ T5881] bridge_slave_0: entered promiscuous mode
[   68.800210][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.803657][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.806495][ T5876] bridge_slave_1: entered allmulticast mode
[   68.809632][ T5876] bridge_slave_1: entered promiscuous mode
[   68.822376][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.825338][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.837882][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.845258][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.848335][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.861728][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.866811][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.869826][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.874412][ T5881] bridge_slave_1: entered allmulticast mode
[   68.877479][ T5881] bridge_slave_1: entered promiscuous mode
[   68.895397][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.903177][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.965532][ T5876] team0: Port device team_slave_0 added
[   68.983511][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.001032][ T5876] team0: Port device team_slave_1 added
[   69.006390][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.016673][ T5875] hsr_slave_0: entered promiscuous mode
[   69.020410][ T5875] hsr_slave_1: entered promiscuous mode
[   69.066623][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.069314][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.078520][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.088237][ T5881] team0: Port device team_slave_0 added
[   69.091270][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.094601][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.104274][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.111155][ T5881] team0: Port device team_slave_1 added
[   69.179154][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.181719][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.191271][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.197219][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.199816][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.209622][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.275183][ T5876] hsr_slave_0: entered promiscuous mode
[   69.278381][ T5876] hsr_slave_1: entered promiscuous mode
[   69.280862][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   69.284331][ T5876] Cannot create hsr debugfs directory
[   69.336422][ T5881] hsr_slave_0: entered promiscuous mode
[   69.340086][ T5881] hsr_slave_1: entered promiscuous mode
[   69.344260][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   69.346630][ T5881] Cannot create hsr debugfs directory
[   69.569674][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.597701][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.621271][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.649944][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.735530][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.749451][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.770796][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.794539][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.851068][ T5881] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.858354][ T5881] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.867040][ T5881] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.877781][ T5881] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.985918][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.005885][   T54] Bluetooth: hci0: command tx timeout
[   70.009576][ T5878] Bluetooth: hci1: command tx timeout
[   70.010235][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   70.035577][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.039492][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.055107][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.058214][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.066439][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.113975][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   70.135289][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.138273][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.159658][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.162519][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.166266][   T54] Bluetooth: hci2: command tx timeout
[   70.186245][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.214169][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   70.241491][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.252061][  T982] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.255179][  T982] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.262201][  T982] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.265145][  T982] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.390160][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.471755][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.496327][ T5875] veth0_vlan: entered promiscuous mode
[   70.505560][ T5875] veth1_vlan: entered promiscuous mode
[   70.575079][ T5875] veth0_macvtap: entered promiscuous mode
[   70.585167][ T5875] veth1_macvtap: entered promiscuous mode
[   70.589316][ T5876] veth0_vlan: entered promiscuous mode
[   70.594568][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.615325][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.630031][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.636748][ T5876] veth1_vlan: entered promiscuous mode
[   70.675629][ T5902] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.684528][ T5902] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.691434][ T5887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.698701][ T5887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.728449][ T5876] veth0_macvtap: entered promiscuous mode
[   70.757536][ T5876] veth1_macvtap: entered promiscuous mode
[   70.801567][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.809495][ T5881] veth0_vlan: entered promiscuous mode
[   70.830591][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.854704][ T5881] veth1_vlan: entered promiscuous mode
[   70.860752][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.870171][ T5902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.875672][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.883710][ T5902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.901797][ T5902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.907165][ T5902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.935572][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.942800][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.947319][ T5881] veth0_macvtap: entered promiscuous mode
[   70.974438][ T5881] veth1_macvtap: entered promiscuous mode
[   71.020290][  T977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.025513][  T977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.030096][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.065706][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.092907][  T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.095149][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.101012][  T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.109921][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.127964][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.164735][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.304821][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.308425][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.351242][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.369438][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.371337][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.375510][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.823625][ T5963] netlink: 'syz.2.20': attribute type 4 has an invalid length.
[   71.865898][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.889447][ T5964] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   71.942281][    C1] hrtimer: interrupt took 444052 ns
[   72.019393][ T5971] Zero length message leads to an empty skb
[   72.098391][ T5878] Bluetooth: hci1: command tx timeout
[   72.098521][   T54] Bluetooth: hci0: command tx timeout
[   72.239423][ T5978] netlink: 112 bytes leftover after parsing attributes in process `syz.2.27'.
[   72.242691][   T54] Bluetooth: hci2: command tx timeout
[   72.272330][ T5980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.780922][ T5985] netlink: 'syz.1.30': attribute type 2 has an invalid length.
[   72.797040][ T5985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.30'.
[   73.027232][ T6001] netlink: 'syz.2.38': attribute type 2 has an invalid length.
[   73.030826][ T6001] netlink: 119 bytes leftover after parsing attributes in process `syz.2.38'.
[   73.155286][ T6011] netlink: 'syz.0.43': attribute type 10 has an invalid length.
[   73.158652][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43'.
[   73.171311][ T6011] veth0_vlan: entered allmulticast mode
[   73.183577][ T6011] bridge0: port 3(veth0_vlan) entered blocking state
[   73.186301][ T6011] bridge0: port 3(veth0_vlan) entered disabled state
[   73.199066][ T6011] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   73.558779][ T6031] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.803334][ T6046] =======================================================
[   73.803334][ T6046] WARNING: The mand mount option has been deprecated and
[   73.803334][ T6046]          and is ignored by this kernel. Remove the mand
[   73.803334][ T6046]          option from the mount to silence this warning.
[   73.803334][ T6046] =======================================================
[   74.097073][ T6054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.162766][ T5878] Bluetooth: hci1: command tx timeout
[   74.165504][   T54] Bluetooth: hci0: command tx timeout
[   74.323229][   T54] Bluetooth: hci2: command tx timeout
[   74.664130][ T6056] netlink: 143 bytes leftover after parsing attributes in process `syz.0.61'.
[   74.668619][ T6056] netlink: 512 bytes leftover after parsing attributes in process `syz.0.61'.
[   74.768203][ T6062] netlink: 'syz.0.64': attribute type 13 has an invalid length.
[   74.773906][ T6062] netlink: 'syz.0.64': attribute type 17 has an invalid length.
[   74.876129][ T6062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.970457][ T6073] netlink: 7 bytes leftover after parsing attributes in process `syz.0.69'.
[   74.983291][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'.
[   75.037237][ T6081] openvswitch: netlink: ct_state flags 0000e7cd unsupported
[   75.108022][ T6082] netlink: 'syz.1.70': attribute type 10 has an invalid length.
[   75.136428][ T6082] macvlan0: entered allmulticast mode
[   75.239640][ T6082] veth1_vlan: entered allmulticast mode
[   75.312238][ T6082] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   75.316728][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'.
[   75.330602][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'.
[   75.557782][ T6089] debugfs: '!' already exists in 'ieee80211'
[   76.365020][   T54] Bluetooth: hci0: command tx timeout
[   76.366314][ T5878] Bluetooth: hci1: command tx timeout
[   76.403926][ T5878] Bluetooth: hci2: command tx timeout
[   77.425301][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   77.429426][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   77.436315][ T6121] netlink: 19 bytes leftover after parsing attributes in process `syz.2.89'.
[   77.540596][ T6123] netlink: 348 bytes leftover after parsing attributes in process `syz.2.90'.
[   77.585517][ T6127] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.92'.
[   77.595876][ T6123] lo speed is unknown, defaulting to 1000
[   77.598669][ T6123] lo speed is unknown, defaulting to 1000
[   77.609414][ T6123] lo speed is unknown, defaulting to 1000
[   77.620559][ T6123] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.628950][ T6123] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   77.651839][ T6123] lo speed is unknown, defaulting to 1000
[   77.657963][ T6123] lo speed is unknown, defaulting to 1000
[   77.672682][ T6123] lo speed is unknown, defaulting to 1000
[   78.409898][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[   78.542984][ T5878] Bluetooth: hci1: unexpected event 0x18 length: 151 > 23
[   78.786383][ T6179] netlink: 'syz.1.114': attribute type 2 has an invalid length.
[   78.793014][ T6179] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   78.796361][ T6179] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.114'.
[   78.803208][ T6179] nbd: couldn't find a device at index 149
[   79.190690][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.120'.
[   79.259819][ T6195] netlink: 10 bytes leftover after parsing attributes in process `syz.1.121'.
[   79.454070][ T6201] openvswitch: netlink: IP tunnel dst address not specified
[   79.651889][ T6207] netlink: 'syz.2.127': attribute type 11 has an invalid length.
[   79.655420][ T6207] netlink: 8420 bytes leftover after parsing attributes in process `syz.2.127'.
[   80.478756][ T5878] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5
[   80.646596][ T6244] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[   80.829090][ T6255] netlink: 'syz.2.147': attribute type 10 has an invalid length.
[   80.945272][ T6255] team0 (unregistering): Port device team_slave_0 removed
[   80.956088][ T6255] team0 (unregistering): Port device team_slave_1 removed
[   81.796702][ T6287] netlink: 'syz.1.162': attribute type 13 has an invalid length.
[   82.718532][ T6323] netlink: 'syz.1.178': attribute type 10 has an invalid length.
[   82.876766][ T6331] __nla_validate_parse: 9 callbacks suppressed
[   82.876785][ T6331] netlink: 10 bytes leftover after parsing attributes in process `syz.1.181'.
[   85.606227][ T6384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.205'.
[   85.865085][ T6398] netlink: 67 bytes leftover after parsing attributes in process `syz.1.211'.
[   86.206812][ T6414] netlink: 48 bytes leftover after parsing attributes in process `syz.2.219'.
[   86.213764][ T6414] netlink: 76 bytes leftover after parsing attributes in process `syz.2.219'.
[   86.401135][ T6421] netlink: 64 bytes leftover after parsing attributes in process `syz.1.222'.
[   86.740363][   T10] cfg80211: failed to load regulatory.db
[   87.285946][ T5878] Bluetooth: hci1: ACL packet too small
[   87.344031][ T6457] netlink: 68 bytes leftover after parsing attributes in process `syz.0.239'.
[   87.443697][ T6461] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   87.481527][ T6457] netlink: 'syz.0.239': attribute type 21 has an invalid length.
[   87.555303][ T6462] netlink: 'syz.0.239': attribute type 10 has an invalid length.
[   88.030838][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'.
[   88.040015][ T6487] netlink: 2408 bytes leftover after parsing attributes in process `syz.2.247'.
[   88.045055][ T6487] netlink: 6052 bytes leftover after parsing attributes in process `syz.2.247'.
[   88.671618][ T6525] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.260'.
[   88.679633][ T6522] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.260'.
[   88.818458][ T6534] netlink: 428 bytes leftover after parsing attributes in process `syz.1.264'.
[   88.930759][ T6539] netlink: 124 bytes leftover after parsing attributes in process `syz.0.267'.
[   89.197706][ T6553] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   89.544096][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'.
[   89.594973][ T6560] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   90.016452][ T6570] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   92.945201][ T6636] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[   93.028506][ T6640] syzkaller0: entered promiscuous mode
[   93.030853][ T6640] syzkaller0: entered allmulticast mode
[   93.383527][ T6652] syz.2.317 uses obsolete (PF_INET,SOCK_PACKET)
[   94.361100][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.326'.
[   94.416416][ T6674] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.327'.
[   94.420644][ T6674] openvswitch: netlink: Message has 5588 unknown bytes.
[   94.424743][ T6674] openvswitch: netlink: Actions may not be safe on all matching packets
[   94.469295][ T6676] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.328'.
[   94.906396][ T5878] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   95.057263][ T6705] netlink: 196 bytes leftover after parsing attributes in process `syz.0.342'.
[   95.057639][ T6707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.343'.
[   95.251149][ T6718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.348'.
[   95.433200][ T6736] netlink: 'syz.0.355': attribute type 17 has an invalid length.
[   95.436557][ T6736] netlink: 148 bytes leftover after parsing attributes in process `syz.0.355'.
[   95.516655][ T6740] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.357'.
[   95.667944][ T6750] netlink: 'syz.0.361': attribute type 39 has an invalid length.
[   95.709583][ T6753] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   95.713947][ T6753] netlink: 198176 bytes leftover after parsing attributes in process `syz.1.362'.
[   95.718459][ T6753] nbd: must specify a size in bytes for the device
[   96.977524][   T54] Bluetooth: hci2: command tx timeout
[   97.274563][ T6790] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.379'.
[   97.454729][ T6800] netlink: 'syz.2.383': attribute type 10 has an invalid length.
[   97.609349][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.090810][ T6877] bpf: Bad value for 'gid'
[  100.388016][ T6913] netlink: 'syz.2.428': attribute type 21 has an invalid length.
[  100.428150][ T6918] __nla_validate_parse: 7 callbacks suppressed
[  100.428162][ T6918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.431'.
[  100.436859][ T6919] netlink: 628 bytes leftover after parsing attributes in process `syz.2.430'.
[  100.537453][   T54] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  100.538653][   T54] Bluetooth: hci0: connection err: -111
[  100.666270][ T6928] netlink: 182 bytes leftover after parsing attributes in process `syz.0.434'.
[  100.699370][ T6928] netlink: 14 bytes leftover after parsing attributes in process `syz.0.434'.
[  100.736407][ T6928] netlink: 'syz.0.434': attribute type 10 has an invalid length.
[  100.757923][ T6928] veth0_vlan: left allmulticast mode
[  100.839038][ T6936] netlink: 216 bytes leftover after parsing attributes in process `syz.0.434'.
[  100.847050][ T6928] veth0_vlan: left promiscuous mode
[  100.886821][ T6928] veth0_vlan: entered promiscuous mode
[  101.155372][ T6928] team0: Device veth0_vlan failed to register rx_handler
[  101.433225][ T6928] syz.0.434 (6928) used greatest stack depth: 17272 bytes left
[  101.643866][ T6944] netlink: 'syz.0.438': attribute type 1 has an invalid length.
[  101.648146][ T6944] netlink: 'syz.0.438': attribute type 2 has an invalid length.
[  102.835935][ T6991] netlink: 'syz.1.459': attribute type 7 has an invalid length.
[  102.911163][ T6997] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.462'.
[  102.915490][ T6996] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[  102.919447][ T6996] netlink: 'syz.0.461': attribute type 4 has an invalid length.
[  102.932987][ T6996] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.461'.
[  102.946724][ T6996] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[  102.951059][ T6996] netlink: 'syz.0.461': attribute type 4 has an invalid length.
[  102.963052][ T6996] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.461'.
[  103.149079][ T7010] netlink: 96 bytes leftover after parsing attributes in process `syz.0.467'.
[  103.298173][ T7014] netlink: 'syz.0.469': attribute type 3 has an invalid length.
[  103.301129][ T7014] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.469'.
[  105.158992][ T7083] xt_socket: unknown flags 0x6
[  105.634129][ T7188] __nla_validate_parse: 4 callbacks suppressed
[  105.634189][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.504'.
[  105.669168][ T7191] netlink: 277 bytes leftover after parsing attributes in process `syz.2.506'.
[  105.761740][ T7197] validate_nla: 3 callbacks suppressed
[  105.761755][ T7197] netlink: 'syz.1.509': attribute type 5 has an invalid length.
[  105.767178][ T7197] netlink: 176 bytes leftover after parsing attributes in process `syz.1.509'.
[  105.819499][ T7201] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.511'.
[  106.582366][ T7233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.585802][ T7233] IPv6: NLM_F_CREATE should be set when creating new route
[  106.588952][ T7233] IPv6: NLM_F_CREATE should be set when creating new route
[  106.591916][ T7233] IPv6: NLM_F_CREATE should be set when creating new route
[  106.629068][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'.
[  106.890453][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'.
[  107.559274][ T7246] netlink: 'syz.1.527': attribute type 27 has an invalid length.
[  107.563141][ T7246] netlink: 'syz.1.527': attribute type 3 has an invalid length.
[  107.566128][ T7246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.527'.
[  108.306171][ T7290] delete_channel: no stack
[  108.346847][ T7293] netlink: 132 bytes leftover after parsing attributes in process `syz.1.550'.
[  108.466013][ T7306] netlink: 703 bytes leftover after parsing attributes in process `syz.2.556'.
[  108.516934][ T7310] openvswitch: netlink: Tunnel attr 7 has unexpected len 12 expected 0
[  109.076163][ T7337] netlink: 'syz.1.569': attribute type 1 has an invalid length.
[  109.079633][ T7337] netlink: 'syz.1.569': attribute type 2 has an invalid length.
[  109.083935][ T7337] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.569'.
[  109.381088][ T7344] netlink: 'syz.1.572': attribute type 21 has an invalid length.
[  109.516644][   T54] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  109.886098][ T7360] netlink: 'syz.1.580': attribute type 16 has an invalid length.
[  109.913410][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.083815][ T7371] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  111.051207][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.055111][ T7390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.061265][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.066951][ T7390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.281817][ T7405] netlink: 'syz.2.599': attribute type 6 has an invalid length.
[  111.286743][ T7405] __nla_validate_parse: 2 callbacks suppressed
[  111.286758][ T7405] netlink: 168 bytes leftover after parsing attributes in process `syz.2.599'.
[  111.467951][ T7415] netlink: 'syz.0.602': attribute type 2 has an invalid length.
[  111.665037][ T7427] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.607'.
[  111.964753][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'.
[  112.076857][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'.
[  112.151746][ T7449] netlink: 'syz.0.616': attribute type 11 has an invalid length.
[  112.173271][ T7449] netlink: 'syz.0.616': attribute type 11 has an invalid length.
[  112.375887][ T7470] netlink: 92 bytes leftover after parsing attributes in process `syz.2.627'.
[  112.379529][ T7470] netlink: 92 bytes leftover after parsing attributes in process `syz.2.627'.
[  113.059242][ T7508] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  116.154190][ T7540] netlink: 14 bytes leftover after parsing attributes in process `syz.2.659'.
[  116.266895][ T7540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.277140][ T7540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.283949][ T7540] bond0 (unregistering): Released all slaves
[  116.566851][ T7549] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.571121][ T7549] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.620588][   T54] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10
[  116.901066][ T7558] lo speed is unknown, defaulting to 1000
[  116.907597][ T7558] lo speed is unknown, defaulting to 1000
[  116.914244][ T7558] lo speed is unknown, defaulting to 1000
[  117.190631][ T7569] netlink: 76 bytes leftover after parsing attributes in process `syz.1.670'.
[  117.769010][ T7558] infiniband syz2: set active
[  117.772503][ T7558] infiniband syz2: added lo
[  117.774797][ T7558] syz2: rxe_create_cq: returned err = -12
[  117.776842][ T7558] infiniband syz2: Couldn't create ib_mad CQ
[  117.778799][ T7558] infiniband syz2: Couldn't open port 1
[  117.782545][ T5922] lo speed is unknown, defaulting to 1000
[  117.795661][ T7558] RDS/IB: syz2: added
[  117.797570][ T7558] smc: adding ib device syz2 with port count 1
[  117.800374][ T7558] smc:    ib device syz2 port 1 has pnetid 
[  117.803723][ T5922] lo speed is unknown, defaulting to 1000
[  117.808137][ T7558] lo speed is unknown, defaulting to 1000
[  118.090148][ T7558] lo speed is unknown, defaulting to 1000
[  118.259100][ T7591] netlink: 'syz.1.680': attribute type 46 has an invalid length.
[  118.270409][ T7591] netlink: 55 bytes leftover after parsing attributes in process `syz.1.680'.
[  118.314772][ T7593] netlink: 'syz.1.681': attribute type 21 has an invalid length.
[  118.317670][ T7593] netlink: 'syz.1.681': attribute type 11 has an invalid length.
[  118.382377][ T7558] lo speed is unknown, defaulting to 1000
[  118.708042][   T54] Bluetooth: hci1: command tx timeout
[  118.898264][ T7612] siw: device registration error -23
[  119.441211][ T7627] netlink: 'syz.0.694': attribute type 15 has an invalid length.
[  119.903003][ T7644] netlink: 'syz.0.702': attribute type 10 has an invalid length.
[  119.906506][ T7644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.925806][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.940643][ T7644] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  120.170080][ T7654] @: renamed from bond_slave_0 (while UP)
[  120.210688][ T7654] netlink: 'syz.1.705': attribute type 21 has an invalid length.
[  120.220658][ T7654] netlink: 128 bytes leftover after parsing attributes in process `syz.1.705'.
[  120.230162][ T7654] netlink: 'syz.1.705': attribute type 4 has an invalid length.
[  120.626459][ T7668] netlink: 'syz.2.713': attribute type 13 has an invalid length.
[  120.629718][ T7668] macvtap0: entered promiscuous mode
[  120.636759][ T7668] macvtap0: refused to change device tx_queue_len
[  122.576617][ T7726] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.733'.
[  122.593327][ T7726] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.733'.
[  123.527339][ T7736] netlink: 'syz.2.739': attribute type 5 has an invalid length.
[  123.530186][ T7736] netlink: 'syz.2.739': attribute type 5 has an invalid length.
[  123.834818][ T7760] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[  123.838078][ T7760] netlink: 17 bytes leftover after parsing attributes in process `syz.1.752'.
[  124.211468][ T7767] netlink: 46603 bytes leftover after parsing attributes in process `syz.1.755'.
[  126.144226][ T7794] netlink: 'syz.0.767': attribute type 4 has an invalid length.
[  126.463577][ T7803] netlink: 2 bytes leftover after parsing attributes in process `syz.0.771'.
[  126.468007][ T7803] batadv_slave_1: entered promiscuous mode
[  126.497512][ T7805] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.595255][ T7813] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.776'.
[  127.604351][ T7829] netlink: 26 bytes leftover after parsing attributes in process `syz.1.783'.
[  127.676690][ T7833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.784'.
[  127.955993][ T7851] netlink: 'syz.0.794': attribute type 4 has an invalid length.
[  127.958716][ T7851] netlink: 'syz.0.794': attribute type 3 has an invalid length.
[  127.961344][ T7851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.794'.
[  132.842784][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.845567][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  135.033607][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  135.057776][ T7887] netlink: 'syz.0.809': attribute type 4 has an invalid length.
[  135.061150][ T7887] netlink: 152 bytes leftover after parsing attributes in process `syz.0.809'.
[  135.825143][ T7887] .`: renamed from bond0 (while UP)
[  135.880387][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'.
[  135.889362][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  136.190664][ T7908] netlink: 'syz.1.819': attribute type 27 has an invalid length.
[  136.193590][ T7908] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  136.196337][ T7908] netlink: 152 bytes leftover after parsing attributes in process `syz.1.819'.
[  136.408213][ T7917] netlink: 'syz.1.823': attribute type 10 has an invalid length.
[  136.713714][ T7928] netlink: 26 bytes leftover after parsing attributes in process `syz.0.826'.
[  136.859413][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'.
[  136.873135][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'.
[  136.876963][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'.
[  136.926138][ T7932] netlink: 'syz.0.830': attribute type 10 has an invalid length.
[  136.929047][ T7932] netlink: 2 bytes leftover after parsing attributes in process `syz.0.830'.
[  136.933550][ T7932] .`: entered promiscuous mode
[  136.935248][ T7932] bond_slave_0: entered promiscuous mode
[  136.937256][ T7932] bond_slave_1: entered promiscuous mode
[  136.939478][ T7932] batadv_slave_0: entered promiscuous mode
[  136.945515][ T7932] 8021q: adding VLAN 0 to HW filter on device .`
[  136.948997][ T7932] bridge0: port 3(.`) entered blocking state
[  136.951184][ T7932] bridge0: port 3(.`) entered disabled state
[  136.954315][ T7932] .`: entered allmulticast mode
[  136.955999][ T7932] bond_slave_0: entered allmulticast mode
[  136.957895][ T7932] bond_slave_1: entered allmulticast mode
[  136.960041][ T7932] batadv_slave_0: entered allmulticast mode
[  136.965370][ T7932] bridge0: port 3(.`) entered blocking state
[  136.967445][ T7932] bridge0: port 3(.`) entered forwarding state
[  136.974519][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'.
[  140.519598][ T7985] __nla_validate_parse: 2 callbacks suppressed
[  140.519671][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'.
[  140.533816][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.856'.
[  141.011075][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  141.018393][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  141.023150][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  141.027205][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  141.031228][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  141.111628][ T7987] lo speed is unknown, defaulting to 1000
[  141.299233][ T5696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.416807][ T5696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.489217][ T5696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.563558][ T5696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.598053][ T7987] chnl_net:caif_netlink_parms(): no params data found
[  141.792808][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.795774][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.798889][ T7987] bridge_slave_0: entered allmulticast mode
[  141.806117][ T7987] bridge_slave_0: entered promiscuous mode
[  141.824098][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.828308][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.833449][ T7987] bridge_slave_1: entered allmulticast mode
[  141.837670][ T7987] bridge_slave_1: entered promiscuous mode
[  141.842441][ T5696] bridge_slave_1: left allmulticast mode
[  141.845071][ T5696] bridge_slave_1: left promiscuous mode
[  141.851505][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.864343][ T5696] bridge_slave_0: left allmulticast mode
[  141.866756][ T5696] bridge_slave_0: left promiscuous mode
[  141.869478][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.362921][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.393045][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.440522][ T7987] team0: Port device team_slave_0 added
[  142.464339][ T7987] team0: Port device team_slave_1 added
[  142.546849][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.549769][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.570368][ T7987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.650197][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.662977][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.691179][ T7987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.830772][ T7987] hsr_slave_0: entered promiscuous mode
[  142.834975][ T7987] hsr_slave_1: entered promiscuous mode
[  142.837992][ T7987] debugfs: 'hsr0' already exists in 'hsr'
[  142.840453][ T7987] Cannot create hsr debugfs directory
[  143.054315][ T5878] Bluetooth: hci3: command tx timeout
[  143.337372][ T8030] netlink: 'syz.1.866': attribute type 12 has an invalid length.
[  143.340830][ T8030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.866'.
[  143.423780][ T5696] hsr_slave_0: left promiscuous mode
[  143.430080][ T5696] hsr_slave_1: left promiscuous mode
[  143.467351][ T5696] veth1_macvtap: left promiscuous mode
[  143.470364][ T5696] veth0_macvtap: left promiscuous mode
[  143.476313][ T5696] veth1_vlan: left promiscuous mode
[  143.478749][ T5696] veth0_vlan: left promiscuous mode
[  144.547708][ T8046] netlink: 'syz.1.871': attribute type 20 has an invalid length.
[  145.122192][ T5878] Bluetooth: hci3: command tx timeout
[  145.125874][  T977] smc: removing ib device syz2
[  145.144549][  T972] lo speed is unknown, defaulting to 1000
[  145.146896][  T972] syz2: Port: 1 Link DOWN
[  145.286492][ T7987] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.317609][ T7987] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.337258][ T7987] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.358792][ T7987] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.450811][ T8060] bridge_slave_1: left allmulticast mode
[  145.453983][ T8060] bridge_slave_1: left promiscuous mode
[  145.461070][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.488164][ T8060] bridge_slave_0: left promiscuous mode
[  145.493867][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.761189][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.821684][ T7987] 8021q: adding VLAN 0 to HW filter on device team0
[  145.847256][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.850373][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.889112][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.892367][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.929891][ T7987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.947094][ T7987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.149910][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.201526][ T7987] veth0_vlan: entered promiscuous mode
[  146.208513][ T7987] veth1_vlan: entered promiscuous mode
[  146.245503][ T7987] veth0_macvtap: entered promiscuous mode
[  146.250501][ T7987] veth1_macvtap: entered promiscuous mode
[  146.267649][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.284705][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.300384][ T5887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.326429][ T5887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.337354][ T5887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.584970][ T5887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.701659][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.708133][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.746617][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'.
[  146.760519][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.768732][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.862249][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'.
[  146.865395][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'.
[  146.868692][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'.
[  147.203398][ T5878] Bluetooth: hci3: command tx timeout
[  147.496919][ T8112] netlink: 830 bytes leftover after parsing attributes in process `syz.1.888'.
[  147.561720][ T8116] netlink: 104 bytes leftover after parsing attributes in process `syz.1.890'.
[  148.962298][ T5878] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15
[  148.965605][ T5878] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  149.237475][ T8174] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.914'.
[  149.245093][ T8174] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.914'.
[  149.283082][ T5878] Bluetooth: hci3: command tx timeout
[  149.606795][ T8190] netlink: 'syz.1.922': attribute type 64 has an invalid length.
[  149.784665][ T8196] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.925'.
[  150.179516][ T8212] netlink: 'syz.1.932': attribute type 10 has an invalid length.
[  150.290128][ T8216] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  150.445309][ T8229] netlink: 'syz.1.941': attribute type 2 has an invalid length.
[  150.448084][ T8229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.941'.
[  150.724124][   T33] audit: type=1107 audit(1759350189.910:2): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  151.216444][ T8277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  151.220571][ T8277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  152.818903][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.822717][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.825577][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.829078][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.831904][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.053556][ T8291] chnl_net:caif_netlink_parms(): no params data found
[  154.757137][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.759874][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.767700][ T8291] bridge_slave_0: entered allmulticast mode
[  154.771824][ T8291] bridge_slave_0: entered promiscuous mode
[  154.805225][ T5696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.821842][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.825153][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.828506][ T8291] bridge_slave_1: entered allmulticast mode
[  154.834273][ T8291] bridge_slave_1: entered promiscuous mode
[  154.845411][ T8316] netlink: 'syz.3.973': attribute type 10 has an invalid length.
[  154.865448][ T8318] tc_dump_action: action bad kind
[  154.889605][   T54] Bluetooth: hci1: command tx timeout
[  154.899278][ T8320] __nla_validate_parse: 1 callbacks suppressed
[  154.899296][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'.
[  154.907811][ T8320] netlink: 'syz.3.975': attribute type 3 has an invalid length.
[  154.981024][ T5696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.998022][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.007346][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.142468][ T5696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.156382][ T8291] team0: Port device team_slave_0 added
[  155.161336][ T8291] team0: Port device team_slave_1 added
[  155.214553][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.217613][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.239894][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.395671][ T5696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.456461][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.459369][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.468864][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.504159][ T8291] hsr_slave_0: entered promiscuous mode
[  155.506660][ T8291] hsr_slave_1: entered promiscuous mode
[  155.508871][ T8291] debugfs: 'hsr0' already exists in 'hsr'
[  155.511076][ T8291] Cannot create hsr debugfs directory
[  155.737645][ T8344] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.985'.
[  155.797555][ T5696] .`: left allmulticast mode
[  155.799577][ T5696] bond_slave_0: left allmulticast mode
[  155.801859][ T5696] bond_slave_1: left allmulticast mode
[  155.819388][ T5696] batadv_slave_0: left allmulticast mode
[  155.822685][ T5696] bridge0: port 3(.`) entered disabled state
[  155.828744][ T5696] bridge_slave_1: left allmulticast mode
[  155.831167][ T5696] bridge_slave_1: left promiscuous mode
[  155.835119][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.844890][ T5696] bridge_slave_0: left allmulticast mode
[  155.847297][ T5696] bridge_slave_0: left promiscuous mode
[  155.849766][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.140728][ T5696] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.145033][ T5696] bond_slave_0: left promiscuous mode
[  156.149397][ T5696] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.153064][ T5696] bond_slave_1: left promiscuous mode
[  156.156380][ T5696] .` (unregistering): (slave batadv_slave_0): Releasing backup interface
[  156.159945][ T5696] batadv_slave_0: left promiscuous mode
[  156.163305][ T5696] .` (unregistering): Released all slaves
[  156.234645][ T8344] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.242655][ T8344] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.260708][ T8291] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  156.549765][ T8291] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  156.565653][ T8291] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  156.571036][ T8291] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  156.637058][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.989'.
[  156.776053][ T5696] hsr_slave_0: left promiscuous mode
[  156.778477][ T5696] hsr_slave_1: left promiscuous mode
[  156.782754][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.785562][ T5696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.799129][ T5696] veth1_macvtap: left promiscuous mode
[  156.800930][ T5696] veth0_macvtap: left promiscuous mode
[  156.810301][ T5696] veth1_vlan: left promiscuous mode
[  156.858881][ T8384] xt_HMARK: proto mask must be zero with L3 mode
[  156.867876][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.991'.
[  156.871311][ T8384] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  156.874657][ T8384] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  156.965004][   T54] Bluetooth: hci1: command tx timeout
[  159.042494][   T54] Bluetooth: hci1: command tx timeout
[  160.889953][ T5696] team0 (unregistering): Port device team_slave_1 removed
[  161.005233][ T5696] team0 (unregistering): Port device team_slave_0 removed
[  161.124091][   T54] Bluetooth: hci1: command tx timeout
[  161.264572][ T8406] netlink: 'syz.3.999': attribute type 13 has an invalid length.
[  161.396274][ T8389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.992'.
[  161.489483][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.559105][ T8291] 8021q: adding VLAN 0 to HW filter on device team0
[  161.579828][  T977] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.582373][  T977] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.600909][  T977] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.603771][  T977] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.679193][ T8291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.810774][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.818958][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.821458][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.884310][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.888360][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.367944][ T8291] veth0_vlan: entered promiscuous mode
[  162.386301][ T8291] veth1_vlan: entered promiscuous mode
[  162.518872][ T8291] veth0_macvtap: entered promiscuous mode
[  162.544438][ T8291] veth1_macvtap: entered promiscuous mode
[  162.589075][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.603424][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.623596][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.630036][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.653536][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.663850][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.695577][ T8460] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.1007'.
[  162.699467][ T8460] openvswitch: netlink: Message has 6 unknown bytes.
[  162.748694][ T8460] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  162.761285][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.766860][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.788630][ T8460] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  162.796852][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.800293][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.818257][ T8466] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1007'.
[  163.227581][ T8486] delete_channel: no stack
[  163.231290][ T8486] delete_channel: no stack
[  163.567436][ T8501] netlink: 'syz.1.1019': attribute type 21 has an invalid length.
[  163.570882][ T8501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1019'.
[  163.770357][ T8513] netlink: 'syz.1.1023': attribute type 21 has an invalid length.
[  163.850792][ T8519] netlink: 'syz.4.1027': attribute type 10 has an invalid length.
[  163.859411][ T8519] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1027'.
[  163.985354][ T8527] netlink: 'syz.3.1031': attribute type 10 has an invalid length.
[  163.988844][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'.
[  164.067051][ T8527] dummy0: entered promiscuous mode
[  164.074393][ T8527] bridge0: port 3(dummy0) entered blocking state
[  164.077760][ T8527] bridge0: port 3(dummy0) entered disabled state
[  164.081017][ T8527] dummy0: entered allmulticast mode
[  164.089944][ T8527] bridge0: port 3(dummy0) entered blocking state
[  164.093034][ T8527] bridge0: port 3(dummy0) entered forwarding state
[  164.198701][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'.
[  164.427678][ T8539] netlink: 'syz.3.1035': attribute type 3 has an invalid length.
[  164.431390][ T8539] netlink: 'syz.3.1035': attribute type 1 has an invalid length.
[  164.439344][ T8539] netlink: 191264 bytes leftover after parsing attributes in process `syz.3.1035'.
[  166.078703][ T8573] netlink: 'syz.3.1048': attribute type 10 has an invalid length.
[  166.083904][ T8573] bridge0: port 3(dummy0) entered disabled state
[  166.086913][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.090362][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.102640][ T8573] bridge0: port 3(dummy0) entered blocking state
[  166.105462][ T8573] bridge0: port 3(dummy0) entered forwarding state
[  166.108457][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.111434][ T8573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.114595][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.117606][ T8573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.125946][ T8573] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  166.677677][ T8585] netlink: 'syz.1.1054': attribute type 2 has an invalid length.
[  166.681026][ T8585] netlink: 110008 bytes leftover after parsing attributes in process `syz.1.1054'.
[  166.924889][ T8594] netlink: 116572 bytes leftover after parsing attributes in process `syz.4.1055'.
[  167.627627][ T8618] C: renamed from team_slave_0 (while UP)
[  167.634615][ T8618] netlink: 'syz.3.1067': attribute type 3 has an invalid length.
[  167.637281][ T8618] netlink: 'syz.3.1067': attribute type 1 has an invalid length.
[  167.639887][ T8618] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1067'.
[  168.392415][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'.
[  168.395719][ T8634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'.
[  168.398838][ T8634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1074'.
[  170.144144][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1341897165 wd_nsec: 1341897205
[  172.077287][   T54] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3
[  172.238704][ T8660] netlink: 'syz.3.1081': attribute type 10 has an invalid length.
[  172.328355][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1084'.
[  172.341217][ T8660] team0: Device ipvlan1 failed to register rx_handler
[  172.447281][ T8674] C: renamed from team_slave_0 (while UP)
[  172.450551][ T8674] netlink: 'syz.1.1087': attribute type 3 has an invalid length.
[  172.454706][ T8674] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1087'.
[  172.459362][ T8674] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  172.535042][ T8672] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1085'.
[  173.399824][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[  173.596063][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1112'.
[  173.599585][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'.
[  173.606244][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1112'.
[  173.610353][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1112'.
[  173.643727][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1114'.
[  173.647680][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1114'.
[  175.120797][ T8803] netlink: 'syz.1.1136': attribute type 13 has an invalid length.
[  175.136648][ T8803] netlink: 'syz.1.1136': attribute type 58 has an invalid length.
[  175.377115][ T8827] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  177.372087][ T8856] __nla_validate_parse: 6 callbacks suppressed
[  177.372167][ T8856] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1157'.
[  178.415120][   T33] audit: type=1107 audit(1759350217.600:3): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  178.538899][ T8877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1166'.
[  178.638864][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'.
[  178.645676][ T8884] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0
[  178.649077][ T8884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.038076][   T54] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11
[  179.132217][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'.
[  179.150330][ T8917] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[  179.199247][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'.
[  179.965832][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'.
[  180.055982][ T8948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1192'.
[  180.386276][ T8969] netlink: 'syz.4.1203': attribute type 4 has an invalid length.
[  180.389285][ T8969] IPv6: NLM_F_CREATE should be specified when creating new route
[  180.420851][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'.
[  180.907381][ T8984] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1207'.
[  181.801328][ T9021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1221'.
[  182.929092][ T9097] __nla_validate_parse: 8 callbacks suppressed
[  182.929104][ T9097] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1257'.
[  182.971541][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  183.503902][ T9120] netlink: 'syz.4.1267': attribute type 21 has an invalid length.
[  184.134307][ T9127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1269'.
[  184.169555][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1270'.
[  185.532974][ T9166] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1286'.
[  185.693698][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'.
[  185.893794][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'.
[  185.915427][ T9186] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1296'.
[  186.060034][ T9195] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1298'.
[  186.107496][ T9197] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1299'.
[  186.291850][ T9207] : entered promiscuous mode
[  186.406940][ T9217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.728899][ T9221] netlink: 'syz.3.1309': attribute type 39 has an invalid length.
[  186.741756][ T9227] netlink: 'syz.1.1311': attribute type 21 has an invalid length.
[  186.919766][ T9235] netlink: 'syz.1.1314': attribute type 21 has an invalid length.
[  187.329236][ T9221] hsr_slave_0 (unregistering): left promiscuous mode
[  188.169924][ T9302] __nla_validate_parse: 4 callbacks suppressed
[  188.169944][ T9302] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1345'.
[  188.182201][ T9302] veth0_to_bond: default FDB implementation only supports local addresses
[  188.361355][ T9307] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1348'.
[  188.426046][ T9310] netlink: 'syz.4.1349': attribute type 1 has an invalid length.
[  188.589111][ T9319] erspan0 speed is unknown, defaulting to 1000
[  188.591838][ T9319] erspan0 speed is unknown, defaulting to 1000
[  188.595859][ T9319] erspan0 speed is unknown, defaulting to 1000
[  188.605502][ T9319] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  188.650233][ T9319] erspan0 speed is unknown, defaulting to 1000
[  188.667916][ T9319] erspan0 speed is unknown, defaulting to 1000
[  188.670787][ T9319] erspan0 speed is unknown, defaulting to 1000
[  188.924133][ T9338] netlink: 'syz.4.1358': attribute type 1 has an invalid length.
[  188.926970][ T9338] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1358'.
[  189.068686][ T9349] netlink: 'syz.4.1366': attribute type 10 has an invalid length.
[  189.073249][ T9353] netlink: 'syz.3.1365': attribute type 1 has an invalid length.
[  189.211633][ T9359] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1370'.
[  189.473167][ T9376] bpf: Bad value for 'gid'
[  189.576606][ T9380] tap0: tun_chr_ioctl cmd 1074025675
[  189.578512][ T9380] tap0: persist disabled
[  189.988975][ T9391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.044825][ T5878] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  190.517183][ T9425] netlink: 'syz.3.1400': attribute type 13 has an invalid length.
[  190.528545][ T9425] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1400'.
[  190.549500][ T9425] erspan0: refused to change device tx_queue_len
[  190.550290][ T9426] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1399'.
[  190.554494][ T9425] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  190.566247][  T972] erspan0 speed is unknown, defaulting to 1000
[  190.575889][  T972] syz2: Port: 1 Link DOWN
[  191.203724][ T5878] Bluetooth: hci0: command 0x0406 tx timeout
[  193.242171][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'.
[  193.404425][ T9511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.607241][ T9525] netlink: 'syz.4.1443': attribute type 3 has an invalid length.
[  193.610885][ T9525] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1443'.
[  193.739809][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'.
[  194.011745][ T9558] netlink: 'syz.4.1458': attribute type 29 has an invalid length.
[  194.018474][ T9558] netlink: 'syz.4.1458': attribute type 29 has an invalid length.
[  194.029752][ T9558] netlink: 'syz.4.1458': attribute type 29 has an invalid length.
[  194.046246][ T9558] netlink: 'syz.4.1458': attribute type 29 has an invalid length.
[  194.248356][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.251131][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.308283][ T9564] netlink: 'syz.4.1461': attribute type 10 has an invalid length.
[  194.320371][ T9564] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1461'.
[  194.343856][ T9564] bond0: entered promiscuous mode
[  194.346333][ T9564] bond_slave_0: entered promiscuous mode
[  194.350181][ T9564] bond_slave_1: entered promiscuous mode
[  194.356403][ T9564] bridge0: port 3(bond0) entered blocking state
[  194.361359][ T9564] bridge0: port 3(bond0) entered disabled state
[  194.368128][ T9564] bond0: entered allmulticast mode
[  194.371134][ T9564] bond_slave_0: entered allmulticast mode
[  194.373994][ T9564] bond_slave_1: entered allmulticast mode
[  194.399945][ T9564] bridge0: port 3(bond0) entered blocking state
[  194.402839][ T9564] bridge0: port 3(bond0) entered forwarding state
[  194.853576][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'.
[  194.907784][ T9595] netlink: 211 bytes leftover after parsing attributes in process `syz.1.1476'.
[  196.845113][ T9668] netlink: 'syz.1.1509': attribute type 21 has an invalid length.
[  196.848046][ T9668] netlink: 'syz.1.1509': attribute type 1 has an invalid length.
[  196.851445][ T9668] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1509'.
[  197.017425][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1517'.
[  197.101784][ T9695] cgroup: fork rejected by pids controller in /syz4
[  197.208815][ T9703] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1524'.
[  197.225424][ T9700] erspan0 speed is unknown, defaulting to 1000
[  197.298745][ T9708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1526'.
[  197.457862][ T9700] netlink: 'syz.3.1523': attribute type 10 has an invalid length.
[  197.485006][ T9700] team0: Port device wlan1 added
[  197.794896][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.799964][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.803749][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.807249][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.810781][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.837767][ T9722] erspan0 speed is unknown, defaulting to 1000
[  197.950831][ T9722] chnl_net:caif_netlink_parms(): no params data found
[  197.956190][ T9735] netdevsim netdevsim1 : renamed from netdevsim0
[  198.030613][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.033345][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.035784][ T9722] bridge_slave_0: entered allmulticast mode
[  198.038806][ T9722] bridge_slave_0: entered promiscuous mode
[  198.049927][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.061755][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.066621][ T9722] bridge_slave_1: entered allmulticast mode
[  198.070256][ T9722] bridge_slave_1: entered promiscuous mode
[  198.092061][ T9722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.097437][ T9722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.128457][ T9722] team0: Port device team_slave_0 added
[  198.154331][ T9722] team0: Port device team_slave_1 added
[  198.201273][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.206529][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.217158][ T9722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.229077][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.239463][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.262197][ T9722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.330444][ T9722] hsr_slave_0: entered promiscuous mode
[  198.343074][ T9722] hsr_slave_1: entered promiscuous mode
[  198.345879][ T9722] debugfs: 'hsr0' already exists in 'hsr'
[  198.348047][ T9722] Cannot create hsr debugfs directory
[  199.842194][ T5878] Bluetooth: hci1: command tx timeout
[  199.964584][ T9722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.045044][ T9722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.125991][ T9722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.136499][ T9792] __nla_validate_parse: 1 callbacks suppressed
[  200.136509][ T9792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1562'.
[  200.153147][ T9794] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1561'.
[  200.157916][ T9794] hsr_slave_0: left promiscuous mode
[  200.161194][ T9794] hsr_slave_1: left promiscuous mode
[  200.225235][ T9722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.379690][ T9722] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  200.399357][ T9722] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  200.409348][ T9722] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  200.436755][ T9722] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  200.569812][ T9722] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.615750][ T9722] 8021q: adding VLAN 0 to HW filter on device team0
[  200.632005][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.634908][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.688786][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.692111][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.844467][ T9722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.925952][ T9826] netlink: 'syz.1.1570': attribute type 13 has an invalid length.
[  200.929011][ T9826] netlink: 'syz.1.1570': attribute type 17 has an invalid length.
[  200.976400][ T9826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.061169][ T9722] veth0_vlan: entered promiscuous mode
[  201.069996][ T9722] veth1_vlan: entered promiscuous mode
[  201.096322][ T9722] veth0_macvtap: entered promiscuous mode
[  201.100619][ T9722] veth1_macvtap: entered promiscuous mode
[  201.111757][ T9722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.121390][ T9722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.131834][ T5887] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.154489][ T5887] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.160137][ T5887] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.174070][ T5887] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.216873][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.232962][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.291753][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.297703][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.922325][ T5878] Bluetooth: hci1: command tx timeout
[  202.078776][ T9870] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1585'.
[  202.409049][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1597'.
[  202.780898][ T9915] netlink: 'syz.1.1607': attribute type 14 has an invalid length.
[  203.560582][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1616'.
[  203.578906][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1616'.
[  204.002187][ T5878] Bluetooth: hci1: command tx timeout
[  204.215303][ T9958] netlink: 'syz.4.1627': attribute type 3 has an invalid length.
[  204.218637][ T9958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1627'.
[  205.214186][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'.
[  205.322640][ T9977] ==================================================================
[  205.325995][ T9977] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  205.328977][ T9977] Read of size 4 at addr ffff88810fe11bc4 by task syz.1.1635/9977
[  205.332747][ T9977] 
[  205.333580][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.1.1635 Not tainted syzkaller #0 PREEMPT(full) 
[  205.333590][ T9977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.333594][ T9977] Call Trace:
[  205.333599][ T9977]  <TASK>
[  205.333603][ T9977]  dump_stack_lvl+0x189/0x250
[  205.333621][ T9977]  ? __kasan_check_byte+0x12/0x40
[  205.333631][ T9977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.333639][ T9977]  ? lock_release+0x4b/0x3e0
[  205.333651][ T9977]  ? __virt_addr_valid+0x4a5/0x5c0
[  205.333660][ T9977]  print_report+0xca/0x240
[  205.333668][ T9977]  ? xfrm_alloc_spi+0x570/0xf30
[  205.333674][ T9977]  kasan_report+0x118/0x150
[  205.333681][ T9977]  ? xfrm_alloc_spi+0x570/0xf30
[  205.333687][ T9977]  xfrm_alloc_spi+0x570/0xf30
[  205.333693][ T9977]  ? xfrm_alloc_spi+0x2a0/0xf30
[  205.333702][ T9977]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  205.333707][ T9977]  ? xfrm_find_acq+0x87/0xa0
[  205.333714][ T9977]  xfrm_alloc_userspi+0x70b/0xc90
[  205.333724][ T9977]  ? apparmor_capable+0x137/0x1b0
[  205.333735][ T9977]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  205.333741][ T9977]  ? __nla_parse+0x40/0x60
[  205.333751][ T9977]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.333758][ T9977]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  205.333769][ T9977]  ? __pfx___mutex_trylock_common+0x10/0x10
[  205.333776][ T9977]  ? rcu_is_watching+0x15/0xb0
[  205.333783][ T9977]  ? trace_contention_end+0x39/0x120
[  205.333790][ T9977]  ? __mutex_lock+0x335/0x1350
[  205.333801][ T9977]  netlink_rcv_skb+0x208/0x470
[  205.333810][ T9977]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  205.333817][ T9977]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  205.333826][ T9977]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.333833][ T9977]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.333841][ T9977]  xfrm_netlink_rcv+0x79/0x90
[  205.333847][ T9977]  netlink_unicast+0x82f/0x9e0
[  205.333855][ T9977]  ? __pfx_netlink_unicast+0x10/0x10
[  205.333862][ T9977]  ? netlink_sendmsg+0x642/0xb30
[  205.333869][ T9977]  ? skb_put+0x11b/0x210
[  205.333878][ T9977]  netlink_sendmsg+0x805/0xb30
[  205.333887][ T9977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.333895][ T9977]  ? aa_sock_msg_perm+0xf1/0x1d0
[  205.333903][ T9977]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  205.333912][ T9977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.333920][ T9977]  __sock_sendmsg+0x21c/0x270
[  205.333928][ T9977]  ____sys_sendmsg+0x505/0x830
[  205.333937][ T9977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  205.333947][ T9977]  ? import_iovec+0x74/0xa0
[  205.333957][ T9977]  ___sys_sendmsg+0x21f/0x2a0
[  205.333966][ T9977]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.333980][ T9977]  ? __fget_files+0x2a/0x420
[  205.333987][ T9977]  ? __fget_files+0x3a0/0x420
[  205.333995][ T9977]  __x64_sys_sendmsg+0x19b/0x260
[  205.334003][ T9977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.334014][ T9977]  ? rcu_is_watching+0x15/0xb0
[  205.334045][ T9977]  ? do_syscall_64+0xbe/0x3b0
[  205.334057][ T9977]  do_syscall_64+0xfa/0x3b0
[  205.334067][ T9977]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.334075][ T9977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.334082][ T9977]  ? exc_page_fault+0x9f/0xf0
[  205.334090][ T9977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.334098][ T9977] RIP: 0033:0x7f0f5f78ec29
[  205.334107][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.334114][ T9977] RSP: 002b:00007f0f60676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.334122][ T9977] RAX: ffffffffffffffda RBX: 00007f0f5f9d5fa0 RCX: 00007f0f5f78ec29
[  205.334127][ T9977] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  205.334131][ T9977] RBP: 00007f0f5f811e41 R08: 0000000000000000 R09: 0000000000000000
[  205.334135][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.334139][ T9977] R13: 00007f0f5f9d6038 R14: 00007f0f5f9d5fa0 R15: 00007ffda033b938
[  205.334146][ T9977]  </TASK>
[  205.334149][ T9977] 
[  205.475492][ T9977] Allocated by task 8721:
[  205.477382][ T9977]  kasan_save_track+0x3e/0x80
[  205.479437][ T9977]  __kasan_slab_alloc+0x6c/0x80
[  205.481569][ T9977]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  205.483931][ T9977]  xfrm_state_alloc+0x24/0x2f0
[  205.486051][ T9977]  __find_acq_core+0x8a7/0x1c00
[  205.488128][ T9977]  xfrm_find_acq+0x78/0xa0
[  205.490087][ T9977]  xfrm_alloc_userspi+0x6b3/0xc90
[  205.492267][ T9977]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.494402][ T9977]  netlink_rcv_skb+0x208/0x470
[  205.496500][ T9977]  xfrm_netlink_rcv+0x79/0x90
[  205.498541][ T9977]  netlink_unicast+0x82f/0x9e0
[  205.500612][ T9977]  netlink_sendmsg+0x805/0xb30
[  205.502701][ T9977]  __sock_sendmsg+0x21c/0x270
[  205.504710][ T9977]  ____sys_sendmsg+0x505/0x830
[  205.506654][ T9977]  ___sys_sendmsg+0x21f/0x2a0
[  205.508668][ T9977]  __x64_sys_sendmsg+0x19b/0x260
[  205.510833][ T9977]  do_syscall_64+0xfa/0x3b0
[  205.512830][ T9977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.515336][ T9977] 
[  205.516362][ T9977] Freed by task 5936:
[  205.518106][ T9977]  kasan_save_track+0x3e/0x80
[  205.520167][ T9977]  kasan_save_free_info+0x46/0x50
[  205.522376][ T9977]  __kasan_slab_free+0x5b/0x80
[  205.524374][ T9977]  kmem_cache_free+0x18f/0x400
[  205.526447][ T9977]  xfrm_state_gc_task+0x52d/0x6b0
[  205.528610][ T9977]  process_scheduled_works+0xae1/0x17b0
[  205.531017][ T9977]  worker_thread+0x8a0/0xda0
[  205.533075][ T9977]  kthread+0x711/0x8a0
[  205.534765][ T9977]  ret_from_fork+0x439/0x7d0
[  205.536778][ T9977]  ret_from_fork_asm+0x1a/0x30
[  205.538904][ T9977] 
[  205.539968][ T9977] The buggy address belongs to the object at ffff88810fe11b00
[  205.539968][ T9977]  which belongs to the cache xfrm_state of size 928
[  205.545856][ T9977] The buggy address is located 196 bytes inside of
[  205.545856][ T9977]  freed 928-byte region [ffff88810fe11b00, ffff88810fe11ea0)
[  205.551737][ T9977] 
[  205.552796][ T9977] The buggy address belongs to the physical page:
[  205.555607][ T9977] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810fe13600 pfn:0x10fe10
[  205.559763][ T9977] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  205.563312][ T9977] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  205.566611][ T9977] page_type: f5(slab)
[  205.568372][ T9977] raw: 057ff00000000040 ffff888105208c80 dead000000000122 0000000000000000
[  205.572017][ T9977] raw: ffff88810fe13600 00000000800e0006 00000000f5000000 0000000000000000
[  205.575713][ T9977] head: 057ff00000000040 ffff888105208c80 dead000000000122 0000000000000000
[  205.579428][ T9977] head: ffff88810fe13600 00000000800e0006 00000000f5000000 0000000000000000
[  205.582979][ T9977] head: 057ff00000000002 ffffea00043f8401 00000000ffffffff 00000000ffffffff
[  205.586700][ T9977] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  205.590420][ T9977] page dumped because: kasan: bad access detected
[  205.593166][ T9977] page_owner tracks the page as allocated
[  205.595505][ T9977] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6421, tgid 6420 (syz.1.222), ts 86390184099, free_ts 85926116363
[  205.603280][ T9977]  post_alloc_hook+0x240/0x2a0
[  205.605435][ T9977]  get_page_from_freelist+0x21e4/0x22c0
[  205.607832][ T9977]  __alloc_frozen_pages_noprof+0x181/0x370
[  205.610335][ T9977]  alloc_pages_mpol+0x232/0x4a0
[  205.612468][ T9977]  allocate_slab+0x8a/0x370
[  205.614440][ T9977]  ___slab_alloc+0xbeb/0x1420
[  205.616356][ T9977]  kmem_cache_alloc_noprof+0x283/0x3c0
[  205.618677][ T9977]  xfrm_state_alloc+0x24/0x2f0
[  205.620624][ T9977]  xfrm_add_sa+0x17d1/0x4070
[  205.622597][ T9977]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.624735][ T9977]  netlink_rcv_skb+0x208/0x470
[  205.626785][ T9977]  xfrm_netlink_rcv+0x79/0x90
[  205.628818][ T9977]  netlink_unicast+0x82f/0x9e0
[  205.630847][ T9977]  netlink_sendmsg+0x805/0xb30
[  205.632863][ T9977]  __sock_sendmsg+0x21c/0x270
[  205.634902][ T9977]  ____sys_sendmsg+0x505/0x830
[  205.636972][ T9977] page last free pid 6401 tgid 6399 stack trace:
[  205.639717][ T9977]  __free_frozen_pages+0xbc4/0xd30
[  205.641955][ T9977]  stack_depot_save_flags+0x436/0x860
[  205.644299][ T9977]  kasan_save_track+0x4f/0x80
[  205.646359][ T9977]  __kasan_slab_alloc+0x6c/0x80
[  205.648402][ T9977]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  205.650970][ T9977]  kmalloc_reserve+0xbd/0x290
[  205.653074][ T9977]  __alloc_skb+0x142/0x2d0
[  205.655080][ T9977]  netlink_ack+0x146/0xa50
[  205.656955][ T9977]  netlink_rcv_skb+0x28c/0x470
[  205.659077][ T9977]  crypto_netlink_rcv+0x2a/0x40
[  205.661192][ T9977]  netlink_unicast+0x82f/0x9e0
[  205.663174][ T9977]  netlink_sendmsg+0x805/0xb30
[  205.665262][ T9977]  __sock_sendmsg+0x21c/0x270
[  205.667323][ T9977]  ____sys_sendmsg+0x505/0x830
[  205.669403][ T9977]  ___sys_sendmsg+0x21f/0x2a0
[  205.671400][ T9977]  __x64_sys_sendmsg+0x19b/0x260
[  205.673469][ T9977] 
[  205.674534][ T9977] Memory state around the buggy address:
[  205.676887][ T9977]  ffff88810fe11a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  205.680220][ T9977]  ffff88810fe11b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.683548][ T9977] >ffff88810fe11b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.687010][ T9977]                                            ^
[  205.689497][ T9977]  ffff88810fe11c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.692875][ T9977]  ffff88810fe11c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  205.696270][ T9977] ==================================================================
[  205.700126][ T9977] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  205.703210][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.1.1635 Not tainted syzkaller #0 PREEMPT(full) 
[  205.707195][ T9977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.711425][ T9977] Call Trace:
[  205.712920][ T9977]  <TASK>
[  205.714265][ T9977]  dump_stack_lvl+0x99/0x250
[  205.716325][ T9977]  ? __asan_memcpy+0x40/0x70
[  205.718495][ T9977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.720812][ T9977]  ? __pfx__printk+0x10/0x10
[  205.722867][ T9977]  vpanic+0x281/0x750
[  205.724590][ T9977]  ? __pfx_vpanic+0x10/0x10
[  205.726455][ T9977]  ? irqentry_exit+0x74/0x90
[  205.728455][ T9977]  panic+0xb9/0xc0
[  205.730002][ T9977]  ? __pfx_panic+0x10/0x10
[  205.731909][ T9977]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  205.734464][ T9977]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.736987][ T9977]  ? xfrm_alloc_spi+0x570/0xf30
[  205.739103][ T9977]  check_panic_on_warn+0x89/0xb0
[  205.741253][ T9977]  ? xfrm_alloc_spi+0x570/0xf30
[  205.743360][ T9977]  end_report+0x78/0x160
[  205.745228][ T9977]  kasan_report+0x129/0x150
[  205.747195][ T9977]  ? xfrm_alloc_spi+0x570/0xf30
[  205.749280][ T9977]  xfrm_alloc_spi+0x570/0xf30
[  205.751304][ T9977]  ? xfrm_alloc_spi+0x2a0/0xf30
[  205.753365][ T9977]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  205.755562][ T9977]  ? xfrm_find_acq+0x87/0xa0
[  205.757556][ T9977]  xfrm_alloc_userspi+0x70b/0xc90
[  205.759748][ T9977]  ? apparmor_capable+0x137/0x1b0
[  205.761937][ T9977]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  205.764351][ T9977]  ? __nla_parse+0x40/0x60
[  205.766202][ T9977]  xfrm_user_rcv_msg+0x7a3/0xab0
[  205.768283][ T9977]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  205.770578][ T9977]  ? __pfx___mutex_trylock_common+0x10/0x10
[  205.773114][ T9977]  ? rcu_is_watching+0x15/0xb0
[  205.775209][ T9977]  ? trace_contention_end+0x39/0x120
[  205.777404][ T9977]  ? __mutex_lock+0x335/0x1350
[  205.779450][ T9977]  netlink_rcv_skb+0x208/0x470
[  205.781561][ T9977]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  205.783936][ T9977]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  205.786218][ T9977]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.788467][ T9977]  ? netlink_deliver_tap+0x2e/0x1b0
[  205.790737][ T9977]  xfrm_netlink_rcv+0x79/0x90
[  205.792807][ T9977]  netlink_unicast+0x82f/0x9e0
[  205.794899][ T9977]  ? __pfx_netlink_unicast+0x10/0x10
[  205.797198][ T9977]  ? netlink_sendmsg+0x642/0xb30
[  205.799344][ T9977]  ? skb_put+0x11b/0x210
[  205.801180][ T9977]  netlink_sendmsg+0x805/0xb30
[  205.803246][ T9977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.805562][ T9977]  ? aa_sock_msg_perm+0xf1/0x1d0
[  205.807691][ T9977]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  205.809997][ T9977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  205.812303][ T9977]  __sock_sendmsg+0x21c/0x270
[  205.814365][ T9977]  ____sys_sendmsg+0x505/0x830
[  205.816390][ T9977]  ? __pfx_____sys_sendmsg+0x10/0x10
[  205.818645][ T9977]  ? import_iovec+0x74/0xa0
[  205.820283][ T9977]  ___sys_sendmsg+0x21f/0x2a0
[  205.821905][ T9977]  ? __pfx____sys_sendmsg+0x10/0x10
[  205.823947][ T9977]  ? __fget_files+0x2a/0x420
[  205.825866][ T9977]  ? __fget_files+0x3a0/0x420
[  205.827511][ T9977]  __x64_sys_sendmsg+0x19b/0x260
[  205.829595][ T9977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  205.831728][ T9977]  ? rcu_is_watching+0x15/0xb0
[  205.833384][ T9977]  ? do_syscall_64+0xbe/0x3b0
[  205.834948][ T9977]  do_syscall_64+0xfa/0x3b0
[  205.836529][ T9977]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.838280][ T9977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.840874][ T9977]  ? exc_page_fault+0x9f/0xf0
[  205.842934][ T9977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.845480][ T9977] RIP: 0033:0x7f0f5f78ec29
[  205.847434][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.855623][ T9977] RSP: 002b:00007f0f60676038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.859161][ T9977] RAX: ffffffffffffffda RBX: 00007f0f5f9d5fa0 RCX: 00007f0f5f78ec29
[  205.862529][ T9977] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  205.865844][ T9977] RBP: 00007f0f5f811e41 R08: 0000000000000000 R09: 0000000000000000
[  205.869197][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.872573][ T9977] R13: 00007f0f5f9d6038 R14: 00007f0f5f9d5fa0 R15: 00007ffda033b938
[  205.875941][ T9977]  </TASK>
[  205.878128][ T9977] Kernel Offset: disabled
[  205.879994][ T9977] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:24:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000005f11b051 RBX=ffff88804b023e58 RCX=ffff888107ee5640 RDX=0000000000000087
RSI=ffffffff8be34460 RDI=ffffffff92a73000 RBP=0000000000000006 RSP=ffffc900000076a8
R8 =ffffffff8fa3b537 R9 =1ffffffff1f476a6 R10=dffffc0000000000 R11=fffffbfff1f476a7
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffc90000007760 R15=1ffff92000000ee8
RIP=ffffffff8b7b1454 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f35adbf46c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30223ffc CR3=000000003227a000 CR4=000006f0
DR0=0000000000000000 DR1=0000200000000300 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f35ace12e7b
XMM06=0000000000000000 00007f35ace12e75 XMM07=0000000000000000 00007f35ace12e89
XMM08=0000000000000000 00007f35ace12f0f XMM09=0000000000000000 00007f35ace12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001019 RDI=000000000000101a RBP=00000000000003f8 RSP=ffffc9000634e9f0
R8 =ffff888020dd0237 R9 =1ffff110041ba046 R10=dffffc0000000000 R11=ffffffff85504bc0
R12=dffffc0000000000 R13=ffffffff99b04908 R14=ffffffff99df9420 R15=0000000000000000
RIP=ffffffff85504c3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0f606766c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000340 CR3=00000001087b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0068412e7b
XMM06=0000000000000000 00007f0068412e75 XMM07=0000000000000000 00007f0068412e89
XMM08=0000000000000000 00007f0068412f0f XMM09=0000000000000000 00007f0068412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
