last executing test programs:

6m36.50920527s ago: executing program 32 (id=239):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000800000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

6m36.410176771s ago: executing program 33 (id=241):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x70}, 0x1, 0x7}, 0x0)

6m7.904806498s ago: executing program 4 (id=650):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

6m7.775218069s ago: executing program 4 (id=652):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)

6m7.774938962s ago: executing program 4 (id=653):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x99}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

6m7.774477134s ago: executing program 4 (id=654):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

6m7.559238253s ago: executing program 4 (id=658):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

6m7.41208166s ago: executing program 4 (id=659):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff4e)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0xfc, 0x4, 0x0, 0x0, 0x25, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x9}, 0x1890a, 0x100003, 0x4, 0xfe8d42e69ac4daf8, 0x2, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x40010122)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r4, 0x4}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

5m51.916656119s ago: executing program 34 (id=659):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff4e)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0xfc, 0x4, 0x0, 0x0, 0x25, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_config_ext={0x9}, 0x1890a, 0x100003, 0x4, 0xfe8d42e69ac4daf8, 0x2, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x40010122)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r4, 0x4}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

4m36.166069773s ago: executing program 5 (id=1934):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x8a}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8b}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m36.165895148s ago: executing program 5 (id=1935):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000013c0)="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", 0x1f5}, {&(0x7f0000000a40)="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", 0x240}], 0x2}, 0x0)

4m36.103261149s ago: executing program 5 (id=1937):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f0500000001000000000000000300000000000000000000002e00c86a"], &(0x7f0000000640)=""/281, 0x3a, 0x119, 0xa}, 0x28)

4m36.103009862s ago: executing program 5 (id=1938):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m36.046260636s ago: executing program 5 (id=1940):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

4m35.984208161s ago: executing program 5 (id=1942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

4m20.891023392s ago: executing program 35 (id=1942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3m33.562799558s ago: executing program 3 (id=2649):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000560901000000000027000000000000021801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/19, 0x13}, 0x2043)

3m33.479806358s ago: executing program 3 (id=2654):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, '\x00', 0x0, 0x2}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r1 = socket$kcm(0x23, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20)
syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0)

3m32.564726243s ago: executing program 3 (id=2666):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4)
sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={<r5=>r2})
sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
close(r5)

3m31.508203978s ago: executing program 3 (id=2675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x80, 0xfffff01c}, {0x6, 0xf3, 0x1}]})

3m31.4327623s ago: executing program 3 (id=2679):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0)

3m31.375509919s ago: executing program 3 (id=2681):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3m15.913693437s ago: executing program 36 (id=2681):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

3m2.302303127s ago: executing program 7 (id=2959):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)

3m1.52508555s ago: executing program 7 (id=2963):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)={@cgroup=r1, r1, 0x2f, 0x2014, 0x4}, 0x20)

3m0.987958726s ago: executing program 7 (id=2967):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4f, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0)

3m0.987353303s ago: executing program 7 (id=2969):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)

3m0.75503739s ago: executing program 7 (id=2976):
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(0x0, 0x0, 0x81, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)

3m0.55524729s ago: executing program 7 (id=2982):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

3m0.408402626s ago: executing program 37 (id=2982):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2m41.255048564s ago: executing program 2 (id=3235):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000004700)=""/4062, 0xfde}, {&(0x7f00000009c0)=""/112, 0x70}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f0000000040)=""/94, 0x5e}], 0x4}, 0x0)

2m41.050942273s ago: executing program 2 (id=3236):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m40.994136328s ago: executing program 2 (id=3238):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088f7ffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)

2m40.993474396s ago: executing program 2 (id=3240):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x9284, 0x2, 0x400, 0x5, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

2m40.834940769s ago: executing program 2 (id=3242):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0)

2m39.607128667s ago: executing program 2 (id=3262):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000980), &(0x7f00000009c0)='%-010d \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m24.580672984s ago: executing program 38 (id=3262):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000980), &(0x7f00000009c0)='%-010d \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m3.052122063s ago: executing program 9 (id=3739):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={0x0, 0x0, 0x8}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="a6ff0307680426", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x1ff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

2m2.344154602s ago: executing program 8 (id=3756):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m2.234382354s ago: executing program 8 (id=3759):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
close(r1)
r2 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000)=r3, 0xc)

2m2.134134672s ago: executing program 9 (id=3761):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a7453fe000f4029dbbf527ef354903f4b8674159360bed8b6faa5e23f03e7c3e00546395e8859983e293b36e2"], 0xfe33)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f", 0xe}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a640000000b0a01010000000000000000070000030900020073797a320000000008000c4000000007080005400000000b08000840000000000c00104000000000000000040800064000000000000007400000001008000f400000000408000640ffffff002c000000080a050000000000000000000a00000a0900010073797a31000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x24000080)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x7, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x2, 0x4)
close(r7)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)}, 0x0)

2m2.133690038s ago: executing program 8 (id=3762):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

2m2.01354607s ago: executing program 8 (id=3765):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7)
mkdirat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x1ff)

2m1.946572764s ago: executing program 9 (id=3767):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910340000000000630a04ff0000000095fa000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)

2m1.882160216s ago: executing program 9 (id=3768):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffff5)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x14, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800000020001f309a4f000000ffffffe474f70b0c590e129ab383986136e34f598d299cad5dc7be0a12a861f78528c782dd0220329382e1945f323ce267664c5f7f53e7a036436e6cda4066261e0cdfcbf561817826d602380f59a6000088e16e43ac1bf7b586a30040dba53b864854c65ffe523b53e5158b1b927dd13c0476a306935d9d53396d834565e04d7e57cbcc05c833cb24", @ANYRES32, @ANYRES8], 0x230}, 0x800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x11b, 0x4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33)

2m1.814409403s ago: executing program 9 (id=3770):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"})

2m1.728008447s ago: executing program 8 (id=3771):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)

2m1.591570484s ago: executing program 9 (id=3772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x15}, [@nested={0x4, 0x121}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0xc084)

2m1.494576686s ago: executing program 39 (id=3772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x15}, [@nested={0x4, 0x121}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0xc084)

2m1.4541285s ago: executing program 8 (id=3774):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x8}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500000000000000a83e14f7ce87d869fbdcb60f4113fbe77831dd24df1632d1fc634d9276814bf1dbab6d7e5a1333639be2dc92b87580fa678f6dda"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

2m1.401733577s ago: executing program 40 (id=3774):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x8}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500000000000000a83e14f7ce87d869fbdcb60f4113fbe77831dd24df1632d1fc634d9276814bf1dbab6d7e5a1333639be2dc92b87580fa678f6dda"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

909.038076ms ago: executing program 6 (id=5418):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28)

830.868264ms ago: executing program 6 (id=5421):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000140), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000440), 0x4)

830.531249ms ago: executing program 0 (id=5423):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0xfffffffffffffffe, 0x49)

830.399405ms ago: executing program 6 (id=5424):
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

762.400509ms ago: executing program 6 (id=5425):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})

762.126646ms ago: executing program 0 (id=5426):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000b14e4b1c738f000000000004000000850000002a00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000006000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))

761.974624ms ago: executing program 6 (id=5427):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="140000002b000b6c690000000000000002000000", 0x14}], 0x1}, 0x0)

681.976067ms ago: executing program 6 (id=5429):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000037000100feffffff00000000017c00000c008e0006"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c080)

628.422222ms ago: executing program 0 (id=5431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x4, 0x2, {{0x5, 0x8, 0x8, 0x6, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)

559.222621ms ago: executing program 0 (id=5433):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="480000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a3000000000140001"], 0x48}}, 0x0)

558.899189ms ago: executing program 0 (id=5435):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="06001500", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

491.90458ms ago: executing program 0 (id=5436):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdab)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000030000000000000802000000000000000200000d010000000500e200010000000e0000000300000000612e5f"], 0x0, 0x47, 0x0, 0x1}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x3f6, 0x2, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'net_cls'}, {0x2b, 'net_cls'}, {0x2b, 'memory'}, {0x2b, 'net'}, {0x2d, 'pids'}, {0x2d, 'rdma'}]}, 0x2b)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
mkdirat$cgroup(r5, &(0x7f00000004c0)='syz0\x00', 0x1ff)
r6 = socket$kcm(0x10, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

312.044433ms ago: executing program 1 (id=5440):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f00000000c0)=r0, 0x4)

232.465523ms ago: executing program 1 (id=5441):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback, 0xffffffffffffffff, 0x8, 0x20}, 0x20)

232.313248ms ago: executing program 1 (id=5442):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

171.996109ms ago: executing program 1 (id=5443):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x58f4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000390000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/50}, 0x20)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000000)

481.671µs ago: executing program 1 (id=5444):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x1409, 0x1, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20008000)

0s ago: executing program 1 (id=5445):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)="5c00000013006bcd9e3fe3dc4e48aa31086b87030e0000001f03000000010000040014000d000a000d0000009ee517d34860bc08eab556a705251e6182949a3651f60a7a3066a240bceaf7786f63ffe40639db6741c7685ecf84c553", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000)

kernel console output (not intermixed with test programs):

s in process `syz.6.2619'.
[  255.095029][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2619'.
[  255.573834][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'.
[  255.580771][T12223] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  255.616758][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.618816][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  257.251508][T12236] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2630'.
[  257.405880][T12244] netlink: 'syz.3.2634': attribute type 10 has an invalid length.
[  257.601584][T12244] team0 (unregistering): Port device C removed
[  257.610224][T12244] team0 (unregistering): Port device team_slave_1 removed
[  257.628111][T12244] team0 (unregistering): Port device geneve1 removed
[  258.275715][T12267] netlink: 'syz.2.2642': attribute type 3 has an invalid length.
[  258.279444][T12267] __nla_validate_parse: 1 callbacks suppressed
[  258.279467][T12267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2642'.
[  258.305132][T12267] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  258.390071][T12271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2644'.
[  258.748400][T12288] netlink: 'syz.6.2653': attribute type 39 has an invalid length.
[  258.888370][T12302] netlink: 'syz.2.2658': attribute type 1 has an invalid length.
[  258.891516][T12302] netlink: 'syz.2.2658': attribute type 2 has an invalid length.
[  259.145283][T12310] bridge_slave_1: left allmulticast mode
[  259.152182][T12310] bridge_slave_1: left promiscuous mode
[  259.167434][T12310] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.226506][T12310] bridge_slave_0: left allmulticast mode
[  259.230080][T12310] bridge_slave_0: left promiscuous mode
[  259.233998][T12310] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.540399][T12315] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.2664'.
[  259.819625][T12325] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2668'.
[  260.552408][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2673'.
[  260.564622][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2673'.
[  260.852721][T12354] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2680'.
[  260.857489][T12353] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2680'.
[  260.861691][T12354] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2680'.
[  261.517873][T12363] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2685'.
[  261.715064][T12372] netlink: 'syz.6.2689': attribute type 29 has an invalid length.
[  261.719853][T12372] netlink: 'syz.6.2689': attribute type 29 has an invalid length.
[  261.877791][T12380] netlink: 'syz.6.2693': attribute type 10 has an invalid length.
[  261.936974][T12381] openvswitch: netlink: Key 0 has unexpected len 12 expected 0
[  262.598206][T12394] netlink: 'syz.2.2699': attribute type 1 has an invalid length.
[  263.483035][T12427] __nla_validate_parse: 3 callbacks suppressed
[  263.483421][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2714'.
[  263.492318][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2714'.
[  264.465190][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'.
[  264.476653][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'.
[  264.480438][T12445] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2722'.
[  264.662488][T12449] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2724'.
[  264.860845][T12457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2728'.
[  264.945353][T12463] netlink: 'syz.6.2731': attribute type 1 has an invalid length.
[  265.787496][T12481] netlink: 'syz.6.2739': attribute type 11 has an invalid length.
[  265.791373][T12481] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2739'.
[  266.316338][T12482] mac80211_hwsim hwsim27 .3c: renamed from wlan1
[  266.577840][T12493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2744'.
[  266.662650][T12499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2747'.
[  266.677414][T12498] lo speed is unknown, defaulting to 1000
[  266.820086][T12500] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  266.924812][T12509] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  267.233311][   T33] audit: type=1107 audit(1758309513.311:3): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  267.801279][ T5876] syzkaller0: tun_net_xmit 76
[  267.801464][T12544] syzkaller0: create flow: hash 4275875348 index 1
[  267.803678][ T5876] syzkaller0: tun_net_xmit 48
[  267.816831][T12546] netlink: 'syz.6.2768': attribute type 29 has an invalid length.
[  267.826613][ T5884] syzkaller0: tun_net_xmit 76
[  267.853498][T12543] syzkaller0: delete flow: hash 4275875348 index 1
[  269.406324][T12546] netlink: 'syz.6.2768': attribute type 29 has an invalid length.
[  269.468327][T12549] __nla_validate_parse: 5 callbacks suppressed
[  269.468346][T12549] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2769'.
[  269.672109][T12558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2773'.
[  270.361878][T12567] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  270.364922][T12567] CPU: 1 UID: 0 PID: 12567 Comm: syz.2.2777 Not tainted syzkaller #0 PREEMPT(full) 
[  270.364935][T12567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.364940][T12567] Call Trace:
[  270.364946][T12567]  <TASK>
[  270.364952][T12567]  dump_stack_lvl+0x189/0x250
[  270.364969][T12567]  ? kernfs_path_from_node+0x2f/0x290
[  270.364983][T12567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.364995][T12567]  ? __pfx__printk+0x10/0x10
[  270.365022][T12567]  ? kernfs_path_from_node+0x2f/0x290
[  270.365031][T12567]  ? kernfs_path_from_node+0x250/0x290
[  270.365039][T12567]  ? kernfs_path_from_node+0x2f/0x290
[  270.365057][T12567]  sysfs_warn_dup+0x8e/0xa0
[  270.365071][T12567]  sysfs_do_create_link_sd+0xc0/0x110
[  270.365086][T12567]  device_add_class_symlinks+0x1cf/0x240
[  270.365104][T12567]  device_add+0x475/0xb50
[  270.365125][T12567]  wiphy_register+0x1ba6/0x28d0
[  270.365169][T12567]  ? __pfx_wiphy_register+0x10/0x10
[  270.365210][T12567]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  270.365241][T12567]  ieee80211_register_hw+0x3484/0x4100
[  270.365315][T12567]  ? ieee80211_register_hw+0x13e1/0x4100
[  270.365365][T12567]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  270.365398][T12567]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.365435][T12567]  ? __hrtimer_setup+0x187/0x210
[  270.365445][T12567]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  270.365462][T12567]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  270.365534][T12567]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  270.365546][T12567]  ? trace_kmalloc+0x1f/0xd0
[  270.365555][T12567]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  270.365566][T12567]  ? kstrndup+0xbf/0x160
[  270.365598][T12567]  hwsim_new_radio_nl+0xea4/0x1b10
[  270.365618][T12567]  ? __pfx___nla_validate_parse+0x10/0x10
[  270.365625][T12567]  ? preempt_schedule_irq+0xde/0x150
[  270.365635][T12567]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  270.365664][T12567]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.365724][T12567]  ? 0xffffffffa00008cc
[  270.365744][T12567]  ? __nla_parse+0x40/0x60
[  270.365765][T12567]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  270.365793][T12567]  genl_family_rcv_msg_doit+0x215/0x300
[  270.365819][T12567]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  270.365830][T12567]  ? irqentry_exit+0x74/0x90
[  270.365868][T12567]  ? genl_rcv_msg+0x5eb/0x790
[  270.365893][T12567]  genl_rcv_msg+0x60e/0x790
[  270.365919][T12567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.365930][T12567]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  270.365944][T12567]  ? perf_trace_lock_acquire+0x335/0x410
[  270.365979][T12567]  netlink_rcv_skb+0x208/0x470
[  270.365987][T12567]  ? __lock_acquire+0xab9/0xd20
[  270.366001][T12567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  270.366017][T12567]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  270.366067][T12567]  ? down_read+0x1ad/0x2e0
[  270.366084][T12567]  genl_rcv+0x28/0x40
[  270.366095][T12567]  netlink_unicast+0x82f/0x9e0
[  270.366124][T12567]  ? __pfx_netlink_unicast+0x10/0x10
[  270.366136][T12567]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  270.366163][T12567]  netlink_sendmsg+0x805/0xb30
[  270.366193][T12567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.366211][T12567]  ? aa_sock_msg_perm+0xf1/0x1d0
[  270.366227][T12567]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.366236][T12567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.366249][T12567]  __sock_sendmsg+0x21c/0x270
[  270.366277][T12567]  ____sys_sendmsg+0x505/0x830
[  270.366301][T12567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.366333][T12567]  ? import_iovec+0x74/0xa0
[  270.366355][T12567]  ___sys_sendmsg+0x21f/0x2a0
[  270.366374][T12567]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.366432][T12567]  ? __fget_files+0x2a/0x420
[  270.366469][T12567]  ? __fget_files+0x2a/0x420
[  270.366477][T12567]  ? __fget_files+0x3a0/0x420
[  270.366509][T12567]  __x64_sys_sendmsg+0x19b/0x260
[  270.366518][T12567]  ? perf_trace_run_bpf_submit+0x100/0x170
[  270.366533][T12567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.366582][T12567]  ? do_syscall_64+0xbe/0x3b0
[  270.366600][T12567]  do_syscall_64+0xfa/0x3b0
[  270.366613][T12567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.366620][T12567]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  270.366637][T12567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.366645][T12567] RIP: 0033:0x7f4be178eba9
[  270.366655][T12567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.366662][T12567] RSP: 002b:00007f4be2637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.366671][T12567] RAX: ffffffffffffffda RBX: 00007f4be19d5fa0 RCX: 00007f4be178eba9
[  270.366676][T12567] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 000000000000000b
[  270.366680][T12567] RBP: 00007f4be1811e19 R08: 0000000000000000 R09: 0000000000000000
[  270.366707][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.366712][T12567] R13: 00007f4be19d6038 R14: 00007f4be19d5fa0 R15: 00007ffd8ddd5358
[  270.366754][T12567]  </TASK>
[  270.972573][T12569] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2778'.
[  270.983181][T12569] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2778'.
[  271.128325][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'.
[  271.131776][T12577] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  271.134981][T12577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.437664][T12597] netlink: 'syz.6.2787': attribute type 39 has an invalid length.
[  271.731237][T12602] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  272.041845][T12616] netlink: 'syz.2.2800': attribute type 1 has an invalid length.
[  272.047587][T12616] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2800'.
[  273.120793][T12648] netlink: 'syz.6.2813': attribute type 25 has an invalid length.
[  273.124150][T12648] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.2813'.
[  273.483102][T12671] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2822'.
[  273.649611][T12681] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2826'.
[  273.991845][T12684] netlink: 376 bytes leftover after parsing attributes in process `syz.2.2827'.
[  274.091250][T12690] netlink: 'syz.2.2830': attribute type 21 has an invalid length.
[  274.094368][T12690] netlink: 'syz.2.2830': attribute type 4 has an invalid length.
[  274.745934][T12722] netlink: 'syz.2.2844': attribute type 21 has an invalid length.
[  274.749770][T12722] netlink: 'syz.2.2844': attribute type 15 has an invalid length.
[  274.752578][T12722] __nla_validate_parse: 2 callbacks suppressed
[  274.752731][T12722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2844'.
[  274.791722][T12722] IPv6: NLM_F_CREATE should be specified when creating new route
[  274.797111][T12722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  274.800313][T12722] IPv6: NLM_F_CREATE should be set when creating new route
[  274.803794][T12722] IPv6: NLM_F_CREATE should be set when creating new route
[  274.806993][T12722] IPv6: NLM_F_CREATE should be set when creating new route
[  275.579991][T12736] netlink: 'syz.2.2849': attribute type 5 has an invalid length.
[  275.583267][T12736] netlink: 'syz.2.2849': attribute type 5 has an invalid length.
[  276.265997][T12748] : entered promiscuous mode
[  276.268639][T12748] : entered allmulticast mode
[  276.395838][T12757] netlink: 'syz.2.2859': attribute type 4 has an invalid length.
[  276.400195][T12757] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2859'.
[  276.431832][T12757] .`: renamed from bond0
[  276.577324][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2862'.
[  276.625925][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  276.630065][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  276.634234][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  276.640535][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  276.644832][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.979085][T12778] raw_sendmsg: syz.6.2867 forgot to set AF_INET. Fix it!
[  277.499624][T12778] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2867'.
[  277.518286][T12766] lo speed is unknown, defaulting to 1000
[  277.544342][ T5877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.619220][ T5877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.689859][ T5877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.764198][ T5877] batman_adv: batadv0: Removing interface: netdevsim0
[  277.783427][T12766] chnl_net:caif_netlink_parms(): no params data found
[  277.842501][T12766] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.849684][T12766] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.855802][T12766] bridge_slave_0: entered allmulticast mode
[  277.862974][T12766] bridge_slave_0: entered promiscuous mode
[  277.895880][T12766] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.898435][T12766] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.901697][T12766] bridge_slave_1: entered allmulticast mode
[  277.909731][T12766] bridge_slave_1: entered promiscuous mode
[  278.725621][ T5855] Bluetooth: hci1: command tx timeout
[  280.815702][ T5855] Bluetooth: hci1: command tx timeout
[  280.821777][T12799] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2874'.
[  280.835958][T12766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.841052][T12766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.892600][T12766] team0: Port device team_slave_0 added
[  280.913637][T12766] team0: Port device team_slave_1 added
[  281.004005][T12766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.010483][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.022433][T12766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.040589][T12766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.043990][T12766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.059311][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2875'.
[  281.066925][T12766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.079904][ T5877] bridge_slave_1: left allmulticast mode
[  281.084369][ T5877] bridge_slave_1: left promiscuous mode
[  281.088896][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.093755][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.119903][ T5877] bond_slave_0: left promiscuous mode
[  281.124637][ T5877] bond_slave_1: left promiscuous mode
[  281.466129][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.471980][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.476739][ T5877] bond0 (unregistering): Released all slaves
[  281.529573][T12766] hsr_slave_0: entered promiscuous mode
[  281.533448][T12766] hsr_slave_1: entered promiscuous mode
[  281.536625][T12766] debugfs: 'hsr0' already exists in 'hsr'
[  281.538914][T12766] Cannot create hsr debugfs directory
[  281.540936][ T5877] _Z`Ԁ@S!: left promiscuous mode
[  281.608823][ T5877] _Z`Ԁ@S!!: left promiscuous mode
[  282.109123][ T5877] : left promiscuous mode
[  282.173736][T12814] netlink: 'syz.6.2881': attribute type 10 has an invalid length.
[  282.179331][T12814] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2881'.
[  282.183553][T12814] ipvlan1: entered promiscuous mode
[  282.186410][T12814] ipvlan1: entered allmulticast mode
[  282.188869][T12814] veth0_vlan: entered allmulticast mode
[  282.193823][T12814] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  282.241950][T12816] netlink: 'syz.6.2882': attribute type 1 has an invalid length.
[  282.296445][T12766] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  282.885806][ T5855] Bluetooth: hci1: command tx timeout
[  283.237685][T12766] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  283.273461][T12766] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  283.287918][T12766] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  283.528650][T12766] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.549008][T12766] 8021q: adding VLAN 0 to HW filter on device team0
[  283.571924][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.575174][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.628692][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.632845][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.781063][T12841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.919735][ T5877] hsr_slave_0: left promiscuous mode
[  283.924653][ T5877] hsr_slave_1: left promiscuous mode
[  283.932106][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.935296][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.939394][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.942541][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.956577][ T5877] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  283.960005][ T5877] batman_adv: batadv0: Removing interface: virt_wifi0
[  283.978593][ T5877] veth1_macvtap: left promiscuous mode
[  283.980955][ T5877] veth0_macvtap: left promiscuous mode
[  284.623782][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.828110][T12766] veth0_vlan: entered promiscuous mode
[  284.834525][T12766] veth1_vlan: entered promiscuous mode
[  284.872572][T12867] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2896'.
[  284.873274][T12766] veth0_macvtap: entered promiscuous mode
[  284.881913][T12867] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  284.891192][T12766] veth1_macvtap: entered promiscuous mode
[  284.895279][T12867] openvswitch: netlink: Duplicate key (type 0).
[  284.905734][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.914696][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.934233][T12869] netlink: 'syz.2.2897': attribute type 10 has an invalid length.
[  284.934522][ T5858] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.941600][ T5858] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.955968][ T5858] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.964329][ T5858] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.969499][ T5855] Bluetooth: hci1: command tx timeout
[  285.046837][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.050029][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.083390][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.088555][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.756591][T12897] netlink: 'syz.6.2909': attribute type 1 has an invalid length.
[  285.762650][T12897] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2909'.
[  286.143310][T12908] netlink: 'syz.2.2913': attribute type 2 has an invalid length.
[  286.148343][T12908] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2913'.
[  286.196278][T12909] syzkaller0: tun_chr_ioctl cmd 1074025677
[  286.199244][T12909] syzkaller0: linktype set to 801
[  286.291055][T12915] netlink: 'syz.2.2917': attribute type 4 has an invalid length.
[  286.294587][T12915] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2917'.
[  286.952041][T12932] netlink: 'syz.2.2923': attribute type 6 has an invalid length.
[  286.955550][T12932] IPv6: NLM_F_CREATE should be specified when creating new route
[  287.011619][T12936] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2925'.
[  287.157330][T12943] syzkaller0: entered promiscuous mode
[  287.159734][T12943] syzkaller0: entered allmulticast mode
[  287.701210][T12955] netlink: 13 bytes leftover after parsing attributes in process `syz.7.2933'.
[  289.035561][T12970] netlink: 'syz.2.2940': attribute type 29 has an invalid length.
[  289.038445][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'.
[  289.545245][T12988] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2947'.
[  289.668073][T12998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.683754][T12996] netlink: 'syz.6.2951': attribute type 1 has an invalid length.
[  289.686858][T12996] netlink: 'syz.6.2951': attribute type 2 has an invalid length.
[  289.689413][T12996] netlink: 'syz.6.2951': attribute type 4 has an invalid length.
[  289.692180][T12996] netlink: 'syz.6.2951': attribute type 1 has an invalid length.
[  289.703653][T12996] netlink: 'syz.6.2951': attribute type 2 has an invalid length.
[  289.714019][T12996] netlink: 130080 bytes leftover after parsing attributes in process `syz.6.2951'.
[  289.717531][T12996] netlink: 'syz.6.2951': attribute type 1 has an invalid length.
[  289.720366][T12996] netlink: 'syz.6.2951': attribute type 2 has an invalid length.
[  290.011554][T13018] netlink: 'syz.2.2961': attribute type 22 has an invalid length.
[  291.002846][T13027] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2964'.
[  291.671426][ T5858] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.764644][ T5858] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.822018][ T5858] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.872093][T13065] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2984'.
[  291.896343][ T5858] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.138304][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.142854][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.147497][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  292.162600][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  292.172569][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  292.274941][T13071] lo speed is unknown, defaulting to 1000
[  292.544518][T13071] chnl_net:caif_netlink_parms(): no params data found
[  294.255641][ T5239] Bluetooth: hci1: command tx timeout
[  294.959292][ T5858] bridge_slave_1: left allmulticast mode
[  294.963947][ T5858] bridge_slave_1: left promiscuous mode
[  294.970986][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.169986][ T5858] bridge_slave_0: left allmulticast mode
[  295.213423][ T5858] bridge_slave_0: left promiscuous mode
[  295.217466][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.339228][T13090] netlink: 'syz.2.2992': attribute type 21 has an invalid length.
[  295.620892][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.628496][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.634830][ T5858] bond0 (unregistering): Released all slaves
[  295.658674][T13090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2992'.
[  295.802182][ T5239] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5
[  295.806828][T13071] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.809642][T13071] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.812636][T13071] bridge_slave_0: entered allmulticast mode
[  295.816375][T13071] bridge_slave_0: entered promiscuous mode
[  295.819941][T13071] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.822420][T13071] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.824892][T13071] bridge_slave_1: entered allmulticast mode
[  295.837041][T13071] bridge_slave_1: entered promiscuous mode
[  295.924111][T13113] netlink: 196 bytes leftover after parsing attributes in process `syz.6.3002'.
[  295.944525][T13071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.958954][T13071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.090084][ T5858] hsr_slave_0: left promiscuous mode
[  296.092378][ T5858] hsr_slave_1: left promiscuous mode
[  296.094566][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.098653][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.101535][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.103970][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.114758][ T5858] veth1_macvtap: left promiscuous mode
[  296.118989][ T5858] veth0_macvtap: left promiscuous mode
[  296.121131][ T5858] veth1_vlan: left promiscuous mode
[  296.123273][ T5858] veth0_vlan: left promiscuous mode
[  296.326467][ T5239] Bluetooth: hci1: command tx timeout
[  296.503603][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  296.538149][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  296.936467][T13116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  296.944057][T13071] team0: Port device team_slave_0 added
[  296.959515][T13071] team0: Port device team_slave_1 added
[  297.032570][T13071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.037229][T13071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.053733][T13071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.061801][T13071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.065240][T13071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.075063][T13071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.082691][T13127] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3007'.
[  297.156894][T13071] hsr_slave_0: entered promiscuous mode
[  297.159594][T13071] hsr_slave_1: entered promiscuous mode
[  297.170993][T13071] debugfs: 'hsr0' already exists in 'hsr'
[  297.173485][T13071] Cannot create hsr debugfs directory
[  297.366035][T13143] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3015'.
[  297.397059][T13071] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  297.409169][T13071] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  297.423911][T13071] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  297.434045][T13071] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  297.454315][T13150] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3018'.
[  297.561459][T13071] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.598737][T13071] 8021q: adding VLAN 0 to HW filter on device team0
[  297.610209][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.613626][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.626036][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.629325][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.838783][T13071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.939445][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3028'.
[  298.093998][T13071] veth0_vlan: entered promiscuous mode
[  298.100400][T13071] veth1_vlan: entered promiscuous mode
[  298.118597][T13071] veth0_macvtap: entered promiscuous mode
[  298.123120][T13071] veth1_macvtap: entered promiscuous mode
[  298.134809][T13071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.156327][T13071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.179697][ T5876] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.184607][ T5858] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.204127][ T5858] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.227082][ T5858] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.315142][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.323136][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.358167][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.362221][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.406114][ T5239] Bluetooth: hci1: command tx timeout
[  298.432161][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3033'.
[  298.889153][T13217] netlink: 'syz.8.3038': attribute type 1 has an invalid length.
[  298.974118][T13221] xt_policy: too many policy elements
[  299.067119][T13227] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  299.142605][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3045'.
[  299.186950][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3045'.
[  299.191620][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3045'.
[  299.195707][T13229] netlink: 16410 bytes leftover after parsing attributes in process `syz.8.3044'.
[  299.391803][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3052'.
[  299.893298][T13284] tap0: tun_chr_ioctl cmd 1074025678
[  299.896773][T13284] tap0: group set to 0
[  300.486078][ T5239] Bluetooth: hci1: command tx timeout
[  301.348199][T13342] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  301.532118][T13340] netlink: 'syz.2.3095': attribute type 21 has an invalid length.
[  301.541858][T13340] netlink: 'syz.2.3095': attribute type 6 has an invalid length.
[  302.468055][T13381] netlink: 'syz.2.3115': attribute type 1 has an invalid length.
[  302.547793][T13394] netlink: 'syz.8.3120': attribute type 29 has an invalid length.
[  302.552527][T13394] netlink: 'syz.8.3120': attribute type 29 has an invalid length.
[  302.624136][T13399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.722505][T13406] __nla_validate_parse: 6 callbacks suppressed
[  302.722551][T13406] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3125'.
[  302.874348][T13417] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3131'.
[  302.882641][T13417] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3131'.
[  302.888651][T13417] netlink: 'syz.8.3131': attribute type 5 has an invalid length.
[  302.892153][T13417] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3131'.
[  303.615229][T13438] netlink: 'syz.8.3140': attribute type 1 has an invalid length.
[  303.618750][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3140'.
[  303.920091][T13444] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3142'.
[  303.982667][T13446] siw: device registration error -23
[  304.110020][T13456] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.412606][T13470] netlink: 'syz.2.3153': attribute type 4 has an invalid length.
[  305.034826][T13506] netlink: 'syz.8.3170': attribute type 21 has an invalid length.
[  305.041344][T13506] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.3170'.
[  305.271623][T13517] cgroup: Unknown subsys name 'uid'
[  305.386676][T13524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3178'.
[  305.538546][T13533] syzkaller0: entered promiscuous mode
[  305.540485][T13533] syzkaller0: entered allmulticast mode
[  307.059830][T13552] netlink: 'syz.2.3188': attribute type 29 has an invalid length.
[  307.075657][T13552] netlink: 'syz.2.3188': attribute type 29 has an invalid length.
[  307.241668][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3190'.
[  307.498378][T13572] netlink: 'syz.6.3196': attribute type 10 has an invalid length.
[  307.502045][T13572] veth1_vlan: entered allmulticast mode
[  307.512184][T13572] team0: Device veth1_vlan failed to register rx_handler
[  307.674401][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3197'.
[  307.892896][T13582] netlink: 'syz.8.3199': attribute type 25 has an invalid length.
[  307.900068][T13582] netlink: 'syz.8.3199': attribute type 39 has an invalid length.
[  308.901700][T13606] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3208'.
[  308.917988][T13606] hsr_slave_0: left promiscuous mode
[  308.922272][T13606] hsr_slave_1: left promiscuous mode
[  309.497292][T13618] netlink: 17 bytes leftover after parsing attributes in process `syz.8.3214'.
[  309.500524][T13618] netlink: zone id is out of range
[  309.502599][T13618] netlink: zone id is out of range
[  309.504264][T13618] netlink: zone id is out of range
[  309.506999][T13618] netlink: zone id is out of range
[  309.509103][T13618] netlink: zone id is out of range
[  309.510885][T13618] netlink: zone id is out of range
[  309.512672][T13618] netlink: zone id is out of range
[  309.514455][T13618] netlink: zone id is out of range
[  309.516732][T13618] netlink: zone id is out of range
[  309.518832][T13618] netlink: zone id is out of range
[  310.594054][T13635] tap0: tun_chr_ioctl cmd 1074025672
[  310.597663][T13635] tap0: ignored: set checksum enabled
[  310.679729][T13637] netlink: 'syz.8.3222': attribute type 10 has an invalid length.
[  310.682751][T13637] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3222'.
[  310.686960][T13637] dummy0: entered promiscuous mode
[  310.698035][T13637] bridge0: port 3(dummy0) entered blocking state
[  310.700257][T13637] bridge0: port 3(dummy0) entered disabled state
[  310.708027][T13637] dummy0: entered allmulticast mode
[  310.718550][T13637] bridge0: port 3(dummy0) entered blocking state
[  310.721875][T13637] bridge0: port 3(dummy0) entered forwarding state
[  310.803039][T13649] ksmbd: Unknown IPC event: 1, ignore.
[  310.870387][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3231'.
[  311.339193][T13674] netlink: 'syz.6.3239': attribute type 16 has an invalid length.
[  311.342160][T13674] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3239'.
[  311.355913][T13674] bridge_slave_0: entered allmulticast mode
[  311.863290][T13701] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3253'.
[  312.808750][ T5239] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  312.914449][T13725] netlink: 'syz.8.3265': attribute type 97 has an invalid length.
[  312.927783][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3265'.
[  312.931631][T13725] netlink: 'syz.8.3265': attribute type 97 has an invalid length.
[  312.934967][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3265'.
[  313.106078][T13729] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3267'.
[  314.094635][T13768] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3276'.
[  314.102649][T13768] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3276'.
[  314.111304][T13768] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3276'.
[  314.196814][T13772] netlink: 26 bytes leftover after parsing attributes in process `syz.8.3278'.
[  314.209043][T13774] lo speed is unknown, defaulting to 1000
[  314.307206][T13778] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3281'.
[  314.885847][ T5239] Bluetooth: hci1: command tx timeout
[  315.520365][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'.
[  315.555309][T13818] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.3299'.
[  315.630556][T13820] netlink: 822 bytes leftover after parsing attributes in process `syz.8.3300'.
[  315.751111][T13824] netlink: 'syz.8.3302': attribute type 2 has an invalid length.
[  315.754117][T13824] netlink: 137592 bytes leftover after parsing attributes in process `syz.8.3302'.
[  316.039187][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3306'.
[  316.090597][T13835] netlink: 'syz.8.3307': attribute type 46 has an invalid length.
[  316.488731][T13850] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  316.500423][T13853] net_ratelimit: 74 callbacks suppressed
[  316.500437][T13853] netlink: zone id is out of range
[  316.504693][T13853] netlink: zone id is out of range
[  316.535500][T13853] netlink: zone id is out of range
[  316.537243][T13853] netlink: zone id is out of range
[  316.538777][T13853] netlink: zone id is out of range
[  316.540593][T13853] netlink: zone id is out of range
[  316.542272][T13853] netlink: zone id is out of range
[  316.544199][T13853] netlink: zone id is out of range
[  316.575539][T13853] netlink: zone id is out of range
[  316.577293][T13853] netlink: zone id is out of range
[  316.672181][T13855] IPv6: Can't replace route, no match found
[  316.789806][T13861] netlink: 'syz.6.3319': attribute type 1 has an invalid length.
[  317.080229][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.082786][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  319.106054][T13897] __nla_validate_parse: 2 callbacks suppressed
[  319.106109][T13897] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3334'.
[  319.124737][T13897] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.213238][T13897] bridge_slave_0 (unregistering): left allmulticast mode
[  319.215913][T13897] bridge_slave_0 (unregistering): left promiscuous mode
[  319.218761][T13897] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.755128][T13922] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3345'.
[  319.884133][T13924] netlink: 'syz.8.3346': attribute type 9 has an invalid length.
[  319.892842][T13924] netlink: 61951 bytes leftover after parsing attributes in process `syz.8.3346'.
[  320.980264][T13964] netlink: 'syz.6.3359': attribute type 21 has an invalid length.
[  320.983666][T13964] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3359'.
[  320.990447][T13964] netlink: 'syz.6.3359': attribute type 3 has an invalid length.
[  320.994470][T13964] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3359'.
[  321.307426][T13975] netlink: 731 bytes leftover after parsing attributes in process `syz.6.3364'.
[  321.537960][T13977] netlink: 'syz.6.3365': attribute type 2 has an invalid length.
[  321.540561][T13977] netlink: 'syz.6.3365': attribute type 8 has an invalid length.
[  321.542958][T13977] netlink: 'syz.6.3365': attribute type 9 has an invalid length.
[  321.546545][T13977] netlink: 'syz.6.3365': attribute type 10 has an invalid length.
[  321.549371][T13977] netlink: 'syz.6.3365': attribute type 11 has an invalid length.
[  321.561103][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3365'.
[  321.838369][T13992] netlink: 'syz.8.3372': attribute type 1 has an invalid length.
[  321.841500][T13992] netlink: 'syz.8.3372': attribute type 2 has an invalid length.
[  321.844756][T13992] netlink: 16134 bytes leftover after parsing attributes in process `syz.8.3372'.
[  322.794563][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3386'.
[  322.800203][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3386'.
[  324.360278][T14091] __nla_validate_parse: 2 callbacks suppressed
[  324.360292][T14091] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3420'.
[  324.383185][T14091] net_ratelimit: 75 callbacks suppressed
[  324.383205][T14091] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  324.591170][T14098] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3422'.
[  324.871380][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3425'.
[  325.179170][T14115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  325.983096][T14132] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3435'.
[  326.484068][T14151] validate_nla: 5 callbacks suppressed
[  326.484085][T14151] netlink: 'syz.8.3443': attribute type 12 has an invalid length.
[  326.494595][T14151] netlink: 209028 bytes leftover after parsing attributes in process `syz.8.3443'.
[  326.854077][ T5239] Bluetooth: hci3: unexpected event 0x18 length: 151 > 23
[  327.000988][T14166] netlink: 'syz.8.3450': attribute type 21 has an invalid length.
[  327.026644][T14166] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3450'.
[  327.032142][T14166] netlink: 'syz.8.3450': attribute type 4 has an invalid length.
[  327.036114][T14166] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3450'.
[  327.166986][T14172] netlink: 'syz.6.3453': attribute type 1 has an invalid length.
[  327.266381][T14178] netlink: 'syz.6.3456': attribute type 2 has an invalid length.
[  327.462070][T14186] syzkaller1: tun_chr_ioctl cmd 1074812117
[  328.064922][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  328.076227][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  328.086031][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  328.094043][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  328.106123][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  328.143834][T14210] lo speed is unknown, defaulting to 1000
[  328.325000][ T5855] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  328.360353][T14210] chnl_net:caif_netlink_parms(): no params data found
[  329.069376][T14210] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.072519][T14210] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.080576][T14236] netlink: 'syz.8.3478': attribute type 10 has an invalid length.
[  329.084738][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3478'.
[  329.096096][T14210] bridge_slave_0: entered allmulticast mode
[  329.100299][T14210] bridge_slave_0: entered promiscuous mode
[  329.105678][T14210] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.108539][T14210] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.116128][T14210] bridge_slave_1: entered allmulticast mode
[  329.119974][T14210] bridge_slave_1: entered promiscuous mode
[  329.151590][T14236] team0: Port device geneve0 added
[  329.251423][T14210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.262555][T14210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.308366][ T5876] bridge_slave_1: left allmulticast mode
[  329.310945][ T5876] bridge_slave_1: left promiscuous mode
[  329.313706][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.340557][ T5876] bridge_slave_0: left promiscuous mode
[  329.343076][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.902156][ T5876] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.907916][ T5876] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.913234][ T5876] .` (unregistering): (slave team0): Releasing backup interface
[  329.921032][ T5876] .` (unregistering): (slave batadv_slave_0): Releasing backup interface
[  329.925327][ T5876] .` (unregistering): Released all slaves
[  329.940407][T14210] team0: Port device team_slave_0 added
[  329.946889][T14210] team0: Port device team_slave_1 added
[  330.018501][ T5876] _Z`Ԁ@S!!: left promiscuous mode
[  330.031064][T14275] netlink: 'syz.6.3491': attribute type 4 has an invalid length.
[  330.037172][T14210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.040100][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.052378][T14210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.060184][T14210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.063379][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.075171][T14210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.178188][ T5855] Bluetooth: hci2: command tx timeout
[  330.227868][T14210] hsr_slave_0: entered promiscuous mode
[  330.231628][T14210] hsr_slave_1: entered promiscuous mode
[  330.236341][T14210] debugfs: 'hsr0' already exists in 'hsr'
[  330.242992][T14210] Cannot create hsr debugfs directory
[  330.282392][T14287] netlink: 'syz.6.3496': attribute type 6 has an invalid length.
[  330.804650][T14210] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  330.891622][T14210] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  330.901698][T14210] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  330.930568][T14210] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  331.100025][ T5876] hsr_slave_0: left promiscuous mode
[  331.103177][ T5876] hsr_slave_1: left promiscuous mode
[  331.473062][ T5876] team0 (unregistering): Port device team_slave_1 removed
[  331.504289][ T5876] team0 (unregistering): Port device C removed
[  331.861231][T14311] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  331.867068][T14311] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  331.948549][T14210] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.973196][T14210] 8021q: adding VLAN 0 to HW filter on device team0
[  331.985216][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.988090][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.015306][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.018043][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.040167][T14210] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  332.043676][T14210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  332.137229][T14210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.247859][ T5855] Bluetooth: hci2: command tx timeout
[  332.303937][T14210] veth0_vlan: entered promiscuous mode
[  332.313051][T14210] veth1_vlan: entered promiscuous mode
[  332.324284][T14353] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3519'.
[  332.330801][T14352] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3519'.
[  332.336518][T14353] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3519'.
[  332.352496][T14210] veth0_macvtap: entered promiscuous mode
[  332.361102][T14210] veth1_macvtap: entered promiscuous mode
[  332.375011][T14210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.380788][ T5855] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  332.380813][ T5855] Bluetooth: unknown link type 110
[  332.386346][ T5855] Bluetooth: hci1: connection err: -111
[  332.388210][T14210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.404436][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.417715][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.433152][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.446987][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.503651][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.507463][T14359] netlink: 763 bytes leftover after parsing attributes in process `syz.8.3522'.
[  332.511158][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.541694][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.546797][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.599840][T14363] netlink: 'syz.8.3524': attribute type 1 has an invalid length.
[  332.603074][T14363] netlink: 15534 bytes leftover after parsing attributes in process `syz.8.3524'.
[  332.874815][T14375] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  334.325919][ T5855] Bluetooth: hci2: command tx timeout
[  336.406325][ T5855] Bluetooth: hci2: command tx timeout
[  336.406445][T14396] netlink: 'syz.8.3536': attribute type 10 has an invalid length.
[  336.414039][T14396] team0: Device ipvlan1 failed to register rx_handler
[  336.609205][T14408] netlink: 'syz.6.3543': attribute type 2 has an invalid length.
[  336.612845][T14408] netlink: 'syz.6.3543': attribute type 7 has an invalid length.
[  336.617577][T14408] netlink: 85 bytes leftover after parsing attributes in process `syz.6.3543'.
[  336.621767][T14408] netlink: 130140 bytes leftover after parsing attributes in process `syz.6.3543'.
[  336.627891][T14408] netlink: 'syz.6.3543': attribute type 2 has an invalid length.
[  336.631288][T14408] netlink: 'syz.6.3543': attribute type 7 has an invalid length.
[  336.634571][T14408] netlink: 85 bytes leftover after parsing attributes in process `syz.6.3543'.
[  338.141905][T14441] siw: device registration error -23
[  338.217897][T14445] netlink: 'syz.6.3555': attribute type 29 has an invalid length.
[  338.368697][T14451] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3558'.
[  338.370540][T14455] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3560'.
[  338.445212][T14451] sock: sock_timestamping_bind_phc: sock not bind to device
[  338.546771][T14457] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3560'.
[  338.558042][T14456] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3560'.
[  338.668167][T14463] netlink: 'syz.8.3563': attribute type 29 has an invalid length.
[  338.672212][T14463] netlink: 'syz.8.3563': attribute type 29 has an invalid length.
[  338.677811][T14463] netlink: 'syz.8.3563': attribute type 29 has an invalid length.
[  338.681545][T14463] netlink: 'syz.8.3563': attribute type 29 has an invalid length.
[  338.750990][T14470] netlink: 'syz.8.3566': attribute type 3 has an invalid length.
[  338.754147][T14470] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3566'.
[  338.999374][T14485] syzkaller0: entered promiscuous mode
[  339.001253][T14485] syzkaller0: entered allmulticast mode
[  339.195115][T14493] openvswitch: netlink: IPv6 tunnel dst address is zero
[  339.588666][T14498] netlink: 15999 bytes leftover after parsing attributes in process `syz.9.3577'.
[  340.016756][T14504] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3579'.
[  340.320687][T14520] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3588'.
[  340.324588][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3588'.
[  340.330920][T14523] netlink: 'syz.9.3589': attribute type 21 has an invalid length.
[  340.423315][T14530] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3592'.
[  340.811527][T14550] netlink: 'syz.6.3601': attribute type 13 has an invalid length.
[  342.331305][T14660] netlink: 'syz.6.3651': attribute type 10 has an invalid length.
[  342.355032][T14660] geneve0: entered promiscuous mode
[  342.419531][T14660] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  342.470041][T14660] syz.6.3651 (14660) used greatest stack depth: 18360 bytes left
[  342.748323][T14674] netlink: 'syz.9.3657': attribute type 1 has an invalid length.
[  342.754940][T14674] openvswitch: netlink: Key type 10768 is out of range max 32
[  343.271464][T14692] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  344.408325][T14738] __nla_validate_parse: 11 callbacks suppressed
[  344.408343][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3686'.
[  344.504969][T14747] netlink: 'syz.8.3690': attribute type 15 has an invalid length.
[  344.913202][T14769] netlink: 'syz.9.3701': attribute type 10 has an invalid length.
[  344.946026][T14770] netlink: 127868 bytes leftover after parsing attributes in process `syz.8.3700'.
[  345.094210][T14778] netlink: 'syz.8.3704': attribute type 28 has an invalid length.
[  345.097967][T14778] netlink: 'syz.8.3704': attribute type 29 has an invalid length.
[  345.101244][T14778] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3704'.
[  346.243473][T14809] netlink: 'syz.9.3717': attribute type 4 has an invalid length.
[  346.252306][T14809] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.3717'.
[  347.091270][T14824] netlink: 'syz.6.3722': attribute type 10 has an invalid length.
[  348.655245][T14824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.659046][T14824] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  349.122573][T14864] netlink: 172 bytes leftover after parsing attributes in process `syz.8.3737'.
[  349.381565][T14871] netlink: 'syz.8.3740': attribute type 10 has an invalid length.
[  349.384799][T14871] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3740'.
[  349.391001][T14871] ipvlan1: entered promiscuous mode
[  349.393195][T14871] ipvlan1: entered allmulticast mode
[  349.396357][T14871] veth0_vlan: entered allmulticast mode
[  349.401126][T14871] bridge0: port 1(ipvlan1) entered blocking state
[  349.404118][T14871] bridge0: port 1(ipvlan1) entered disabled state
[  349.408954][T14871] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  350.057338][T14911] netlink: 'syz.6.3760': attribute type 39 has an invalid length.
[  350.080110][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3761'.
[  350.149674][ T5855] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[  350.188847][T14922] netlink: 'syz.6.3763': attribute type 21 has an invalid length.
[  350.194532][T14922] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3763'.
[  350.200323][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3763'.
[  350.278492][T14926] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  350.353904][T14932] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3768'.
[  352.330372][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  352.334607][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  352.339343][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  352.343724][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  352.348911][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  352.512370][T14970] chnl_net:caif_netlink_parms(): no params data found
[  352.587266][T14970] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.590444][T14970] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.593400][T14970] bridge_slave_0: entered allmulticast mode
[  352.597748][T14970] bridge_slave_0: entered promiscuous mode
[  352.603219][T14970] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.606713][T14970] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.609782][T14970] bridge_slave_1: entered allmulticast mode
[  352.613634][T14970] bridge_slave_1: entered promiscuous mode
[  352.644924][T14970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.652462][T14970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.684717][T14970] team0: Port device team_slave_0 added
[  352.689279][T14970] team0: Port device team_slave_1 added
[  352.720445][T14970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.723290][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.738673][T14970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.746556][T14970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.749391][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.760108][T14970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.798090][T14970] hsr_slave_0: entered promiscuous mode
[  352.801224][T14970] hsr_slave_1: entered promiscuous mode
[  353.301364][T14970] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  353.307614][T14970] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  353.313655][T14970] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  353.319675][T14970] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  353.348836][T14970] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.351987][T14970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.355205][T14970] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.358270][T14970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.441223][T14970] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.462089][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.472726][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.504959][T14970] 8021q: adding VLAN 0 to HW filter on device team0
[  353.532084][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.535177][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.541493][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.544516][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.583145][T14970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.658463][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  353.662906][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  353.669586][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  353.674458][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.679318][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  353.798114][T14998] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3780'.
[  353.840445][T14994] chnl_net:caif_netlink_parms(): no params data found
[  353.971275][T14994] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.976089][T14994] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.979101][T14994] bridge_slave_0: entered allmulticast mode
[  353.982898][T14994] bridge_slave_0: entered promiscuous mode
[  353.990323][T14994] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.993498][T14994] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.998335][T14994] bridge_slave_1: entered allmulticast mode
[  354.007038][T14994] bridge_slave_1: entered promiscuous mode
[  354.053023][T14994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.068546][T14994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.173921][T14970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.203805][T14994] team0: Port device team_slave_0 added
[  354.209089][T14994] team0: Port device team_slave_1 added
[  354.250506][T14994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.253425][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.264518][T14994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.274565][T14994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.278563][T14994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.289058][T14994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.340711][T14994] hsr_slave_0: entered promiscuous mode
[  354.343961][T14994] hsr_slave_1: entered promiscuous mode
[  354.348133][T14994] debugfs: 'hsr0' already exists in 'hsr'
[  354.350510][T14994] Cannot create hsr debugfs directory
[  354.415881][ T5855] Bluetooth: hci0: command tx timeout
[  354.478277][T14970] veth0_vlan: entered promiscuous mode
[  354.510826][T14970] veth1_vlan: entered promiscuous mode
[  354.544019][T14970] veth0_macvtap: entered promiscuous mode
[  354.590092][T14970] veth1_macvtap: entered promiscuous mode
[  354.609146][T14970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.620401][T14970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.647279][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.651246][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.654780][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.659146][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.749750][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.756897][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.790610][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.794618][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.906124][T14994] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  354.912940][T14994] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  354.927658][T14994] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  354.954240][T14994] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  355.062547][T14994] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.071482][T14994] 8021q: adding VLAN 0 to HW filter on device team0
[  355.079612][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.081981][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.102971][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.105904][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.166909][T14994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.216974][ T5855] Bluetooth: hci0: ACL packet too small
[  355.262619][T14994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.327057][T14994] veth0_vlan: entered promiscuous mode
[  355.335608][T14994] veth1_vlan: entered promiscuous mode
[  355.366841][T14994] veth0_macvtap: entered promiscuous mode
[  355.371788][T14994] veth1_macvtap: entered promiscuous mode
[  355.394294][T14994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.405170][T14994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.413880][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.432095][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.435262][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.468512][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.492812][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.498572][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.539011][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.542314][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.669244][T15064] netlink: 277 bytes leftover after parsing attributes in process `syz.6.3802'.
[  355.688181][ T5855] Bluetooth: hci1: command tx timeout
[  355.728521][ T5855] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3
[  355.752577][T15070] netlink: 'syz.1.3804': attribute type 2 has an invalid length.
[  356.492769][ T5855] Bluetooth: hci0: command tx timeout
[  356.542123][T15088] netlink: 'syz.0.3811': attribute type 3 has an invalid length.
[  356.545268][T15088] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3811'.
[  356.692587][T15102] netlink: 'syz.0.3818': attribute type 1 has an invalid length.
[  356.695167][T15102] netlink: 'syz.0.3818': attribute type 2 has an invalid length.
[  357.075307][T15132] netlink: 'syz.1.3833': attribute type 1 has an invalid length.
[  357.152123][T15135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3835'.
[  357.775687][ T5855] Bluetooth: hci1: command tx timeout
[  358.566057][ T5855] Bluetooth: hci0: command tx timeout
[  359.847553][ T5855] Bluetooth: hci1: command tx timeout
[  360.038646][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3847'.
[  360.041546][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3847'.
[  360.069968][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3848'.
[  360.072941][T15166] netlink: 'syz.0.3848': attribute type 2 has an invalid length.
[  360.082105][T15166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3848'.
[  360.142509][T15172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3851'.
[  360.409942][T15180] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3855'.
[  360.654143][ T5855] Bluetooth: hci0: command tx timeout
[  361.928176][ T5855] Bluetooth: hci1: command tx timeout
[  362.514855][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.521408][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.525520][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.530086][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.533763][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.717797][T15216] chnl_net:caif_netlink_parms(): no params data found
[  362.730547][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'.
[  362.856290][T15216] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.861744][T15216] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.870128][T15216] bridge_slave_0: entered allmulticast mode
[  362.876977][T15216] bridge_slave_0: entered promiscuous mode
[  362.883613][T15216] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.892711][T15216] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.898834][T15216] bridge_slave_1: entered allmulticast mode
[  362.904898][T15216] bridge_slave_1: entered promiscuous mode
[  362.963220][T15216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.971860][T15216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.012294][T15216] team0: Port device team_slave_0 added
[  363.019885][T15216] team0: Port device team_slave_1 added
[  363.054378][T15216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.065840][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.079398][T15216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.096027][T15216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.098494][T15216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.115498][T15216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.151237][T15216] hsr_slave_0: entered promiscuous mode
[  363.153724][T15216] hsr_slave_1: entered promiscuous mode
[  363.161195][T15216] debugfs: 'hsr0' already exists in 'hsr'
[  363.163226][T15216] Cannot create hsr debugfs directory
[  363.244431][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3884'.
[  363.285869][T15216] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.302963][T15251] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3884'.
[  363.316745][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3884'.
[  363.340962][T15216] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.403144][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3884'.
[  363.403987][T15216] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.457836][T15216] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.421915][T15216] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  364.678732][ T5239] Bluetooth: hci2: command tx timeout
[  365.118901][T15216] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  366.700075][T15216] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  366.735164][ T5855] Bluetooth: hci2: command tx timeout
[  366.765704][T15216] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  366.854541][T15216] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.882344][T15216] 8021q: adding VLAN 0 to HW filter on device team0
[  366.890747][T14229] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.893702][T14229] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.907681][T14229] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.910805][T14229] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.083797][T15287] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3893'.
[  367.114677][T15216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.254982][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3898'.
[  367.368305][T15216] veth0_vlan: entered promiscuous mode
[  367.386781][T15216] veth1_vlan: entered promiscuous mode
[  367.405544][T15216] veth0_macvtap: entered promiscuous mode
[  367.410276][T15216] veth1_macvtap: entered promiscuous mode
[  367.425060][T15216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.433553][T15216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.448763][ T5877] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.452665][ T5877] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.463261][T15317] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3905'.
[  367.479383][ T5877] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.483296][ T5877] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.631491][T14229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.634328][T14229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.746260][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.749522][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.512276][T15338] netlink: 'syz.1.3913': attribute type 5 has an invalid length.
[  368.579181][T15343] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3915'.
[  368.584322][T15343] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3915'.
[  368.806936][ T5855] Bluetooth: hci2: command tx timeout
[  369.473981][T15362] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3921'.
[  369.522423][T15364] netlink: 'syz.6.3922': attribute type 1 has an invalid length.
[  369.589832][T15366] netlink: 'syz.0.3923': attribute type 29 has an invalid length.
[  369.601706][T15366] netlink: 'syz.0.3923': attribute type 29 has an invalid length.
[  369.608868][T15366] netlink: 'syz.0.3923': attribute type 29 has an invalid length.
[  369.915171][T15380] netlink: 'syz.6.3927': attribute type 1 has an invalid length.
[  369.918640][T15380] netlink: 'syz.6.3927': attribute type 2 has an invalid length.
[  370.366050][T15403] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3941'.
[  370.368996][T15403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3941'.
[  370.394899][T15408] netlink: 'syz.1.3943': attribute type 5 has an invalid length.
[  370.432713][T15410] bridge0: port 3(macvlan0) entered blocking state
[  370.438899][T15410] bridge0: port 3(macvlan0) entered disabled state
[  370.441975][T15410] macvlan0: entered allmulticast mode
[  370.444351][T15410] veth1_vlan: entered allmulticast mode
[  370.454900][T15410] macvlan0: entered promiscuous mode
[  370.460189][T15410] bridge0: port 3(macvlan0) entered blocking state
[  370.463565][T15410] bridge0: port 3(macvlan0) entered forwarding state
[  370.771210][T15425] veth0_vlan: entered allmulticast mode
[  370.798402][ T3571] bridge0: port 3(macvlan0) entered disabled state
[  370.887553][ T5855] Bluetooth: hci2: command tx timeout
[  370.957562][T15433] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3956'.
[  370.961201][T15433] netlink: 46 bytes leftover after parsing attributes in process `syz.6.3956'.
[  370.972382][T15433] netlink: 46 bytes leftover after parsing attributes in process `syz.6.3956'.
[  370.982827][T15434] veth0_vlan: left promiscuous mode
[  370.986272][T15434] veth0_vlan: entered promiscuous mode
[  370.994251][ T1096] bridge0: port 3(macvlan0) entered blocking state
[  370.997135][ T1096] bridge0: port 3(macvlan0) entered forwarding state
[  372.260337][T15464] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.3969'.
[  372.393046][T15473] dvmrp0: tun_chr_ioctl cmd 2148553947
[  372.487445][T15480] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3977'.
[  372.599138][T15494] Unknown options in mask b7f2
[  372.633842][T15492] netlink: 'syz.6.3982': attribute type 11 has an invalid length.
[  372.658652][T15499] netlink: 'syz.1.3986': attribute type 10 has an invalid length.
[  372.685019][T15499] batman_adv: batadv0: Adding interface: netdevsim0
[  372.700550][T15499] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.717592][T15499] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  373.999350][T15536] netlink: 'syz.1.4004': attribute type 10 has an invalid length.
[  374.056259][T15537] netlink: 'syz.1.4004': attribute type 11 has an invalid length.
[  374.059570][T15537] __nla_validate_parse: 1 callbacks suppressed
[  374.059583][T15537] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4004'.
[  374.822901][T15535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.970552][T15536] team0: Port device wlan1 added
[  376.120502][T15548] netlink: 'syz.6.4008': attribute type 3 has an invalid length.
[  376.123892][T15548] netlink: 'syz.6.4008': attribute type 1 has an invalid length.
[  376.127562][T15548] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4008'.
[  376.232518][ T5855] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  376.324187][T15559] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4013'.
[  376.332762][T15559] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4013'.
[  376.445543][T15565] : renamed from gre0 (while UP)
[  377.162268][T15584] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4024'.
[  377.382998][T15584] netlink: 'syz.6.4024': attribute type 10 has an invalid length.
[  377.552378][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4027'.
[  378.252081][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  378.488687][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.491388][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.690942][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'.
[  378.694176][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'.
[  378.703892][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'.
[  378.714382][T15641] netlink: 'syz.6.4046': attribute type 13 has an invalid length.
[  378.890185][T15652] xt_bpf: check failed: parse error
[  379.527291][T15671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  379.530461][T15671] IPv6: NLM_F_CREATE should be set when creating new route
[  379.533252][T15671] IPv6: NLM_F_CREATE should be set when creating new route
[  380.317913][T15680] netlink: 'syz.6.4062': attribute type 12 has an invalid length.
[  380.325089][T15680] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4062'.
[  380.566345][T15683] can: request_module (can-proto-0) failed.
[  381.054135][T15719] nftables ruleset with unbound set
[  381.481744][T15734] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4087'.
[  382.418436][T15750] netlink: 'syz.1.4095': attribute type 27 has an invalid length.
[  382.421730][T15750] netlink: 'syz.1.4095': attribute type 4 has an invalid length.
[  382.428897][T15750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4095'.
[  382.471151][T15748] netlink: 'syz.6.4094': attribute type 10 has an invalid length.
[  382.485296][T15748] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4094'.
[  382.491401][T15748] batadv0: entered promiscuous mode
[  382.497086][T15748] batadv0: entered allmulticast mode
[  382.571757][T15748] bridge0: port 3(batadv0) entered blocking state
[  382.590463][T15748] bridge0: port 3(batadv0) entered disabled state
[  382.595529][ T5855] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6
[  382.689054][T15748] bridge0: port 3(batadv0) entered blocking state
[  382.695782][T15748] bridge0: port 3(batadv0) entered forwarding state
[  382.825900][ T5877] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  382.829968][ T5877] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  384.533472][T15793] netlink: 'syz.1.4116': attribute type 11 has an invalid length.
[  384.536896][T15793] netlink: 'syz.1.4116': attribute type 15 has an invalid length.
[  384.542695][T15793] netlink: 'syz.1.4116': attribute type 16 has an invalid length.
[  384.546961][T15793] netlink: 'syz.1.4116': attribute type 21 has an invalid length.
[  384.551143][T15793] netlink: 'syz.1.4116': attribute type 25 has an invalid length.
[  384.554606][T15793] netlink: 'syz.1.4116': attribute type 27 has an invalid length.
[  384.728611][T15803] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4120'.
[  385.150622][T15804] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4117'.
[  386.030610][T15828] validate_nla: 5 callbacks suppressed
[  386.030624][T15828] netlink: 'syz.1.4132': attribute type 13 has an invalid length.
[  386.045520][T15828] netlink: 'syz.1.4132': attribute type 58 has an invalid length.
[  386.048834][T15828] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4132'.
[  386.415167][T15844] netlink: 'syz.0.4139': attribute type 4 has an invalid length.
[  386.421249][T15844] netlink: 'syz.0.4139': attribute type 16 has an invalid length.
[  386.423969][T15844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4139'.
[  386.773012][T15858] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4145'.
[  386.808947][ T5855] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  387.126256][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4156'.
[  387.197051][T15885] syzkaller0: entered promiscuous mode
[  387.201218][T15885] syzkaller0: entered allmulticast mode
[  387.819078][T15899] netlink: 'syz.1.4164': attribute type 22 has an invalid length.
[  387.822005][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'.
[  387.919643][T15908] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4169'.
[  388.231409][T15906] delete_channel: no stack
[  388.274840][T15922] netlink: 'syz.0.4174': attribute type 8 has an invalid length.
[  388.277500][T15922] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4174'.
[  388.305299][T15924] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4175'.
[  391.298138][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4189'.
[  391.710316][T15976] openvswitch: netlink: IP tunnel dst address not specified
[  391.937857][T15984] netlink: 328 bytes leftover after parsing attributes in process `syz.0.4203'.
[  392.323697][T16010] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.4215'.
[  392.374906][T16012] netlink: 'syz.0.4216': attribute type 12 has an invalid length.
[  392.378194][T16012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4216'.
[  392.487753][   T33] audit: type=1107 audit(1758309638.571:4): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  392.618958][T16029] netlink: 'syz.1.4224': attribute type 2 has an invalid length.
[  392.621803][T16029] netlink: 'syz.1.4224': attribute type 7 has an invalid length.
[  392.624653][T16029] netlink: 85 bytes leftover after parsing attributes in process `syz.1.4224'.
[  392.628720][T16029] netlink: 130140 bytes leftover after parsing attributes in process `syz.1.4224'.
[  392.631929][T16029] netlink: 'syz.1.4224': attribute type 2 has an invalid length.
[  392.634594][T16029] netlink: 'syz.1.4224': attribute type 7 has an invalid length.
[  392.640421][T16029] netlink: 85 bytes leftover after parsing attributes in process `syz.1.4224'.
[  392.850747][T16043] netlink: 146936 bytes leftover after parsing attributes in process `syz.1.4230'.
[  392.854359][T16043] openvswitch: netlink: Message has 6 unknown bytes.
[  392.922691][T16046] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  392.927338][T16046] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  392.978603][T16043] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4230'.
[  393.210937][T16052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4233'.
[  394.950350][T16112] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  396.324563][T16151] __nla_validate_parse: 14 callbacks suppressed
[  396.324582][T16151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4276'.
[  396.534822][T16148] netlink: 'syz.0.4275': attribute type 64 has an invalid length.
[  396.603701][T16157] siw: device registration error -23
[  396.896685][T16164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.021122][    C1] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1305661789 wd_nsec: 1305661801
[  399.473575][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4291'.
[  400.141421][T16220] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4302'.
[  400.161416][T16220] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  400.483455][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4312'.
[  400.515302][T16234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4314'.
[  400.866969][T16241] netlink: 'syz.6.4317': attribute type 11 has an invalid length.
[  400.870400][T16241] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4317'.
[  401.220310][T16258] netlink: 'syz.0.4325': attribute type 21 has an invalid length.
[  401.348991][T16240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  401.438025][T16267] netlink: 'syz.6.4329': attribute type 12 has an invalid length.
[  401.441460][T16267] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4329'.
[  401.725220][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4331'.
[  401.752985][T16273] siw: device registration error -23
[  402.123240][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4340'.
[  402.311011][T16297] netlink: 'syz.6.4342': attribute type 10 has an invalid length.
[  402.314865][T16297] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4342'.
[  402.319673][T16297] batman_adv: batadv0: Adding interface: hsr_slave_1
[  402.322710][T16297] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.334588][T16297] batman_adv: batadv0: Interface activated: hsr_slave_1
[  402.826885][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4355'.
[  402.959985][T16334] xt_l2tp: wrong L2TP version: 0
[  402.991024][T16335] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4356'.
[  402.994596][T16335] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  402.998026][T16335] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  403.507496][T16343] netlink: 'syz.6.4361': attribute type 10 has an invalid length.
[  403.621540][T16343] veth0_vlan: entered allmulticast mode
[  403.778506][T16343] veth0_vlan: left promiscuous mode
[  403.795023][T16343] veth0_vlan: entered promiscuous mode
[  403.821290][T16343] team0: Device veth0_vlan failed to register rx_handler
[  403.971805][T16355] netlink: 'syz.0.4366': attribute type 29 has an invalid length.
[  403.974674][T16355] netlink: 'syz.0.4366': attribute type 3 has an invalid length.
[  403.977771][T16355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4366'.
[  404.112214][T16358] netlink: 'syz.1.4367': attribute type 10 has an invalid length.
[  404.116851][T16358] netlink: 'syz.1.4367': attribute type 19 has an invalid length.
[  404.120146][T16358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4367'.
[  404.172918][T16359] netlink: 'syz.6.4368': attribute type 8 has an invalid length.
[  404.185741][T16359] netlink: 'syz.6.4368': attribute type 3 has an invalid length.
[  404.189376][T16359] netlink: 153952 bytes leftover after parsing attributes in process `syz.6.4368'.
[  404.247627][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4372'.
[  405.191444][T16359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.289599][T16400] pimreg: tun_chr_ioctl cmd 1074025678
[  406.299056][T16400] pimreg: tun_chr_ioctl cmd 1074025677
[  406.303662][T16400] pimreg: linktype set to 778
[  406.472408][T16416] __nla_validate_parse: 2 callbacks suppressed
[  406.472418][T16416] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4390'.
[  406.654382][T16415] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  407.136657][T16438] validate_nla: 2 callbacks suppressed
[  407.136716][T16438] netlink: 'syz.6.4400': attribute type 10 has an invalid length.
[  408.017669][T16447] netlink: 182 bytes leftover after parsing attributes in process `syz.1.4402'.
[  408.107743][T16438] bridge0: port 4(netdevsim0) entered blocking state
[  408.110677][T16438] bridge0: port 4(netdevsim0) entered disabled state
[  408.113718][T16438] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  408.127070][T16438] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  408.186987][T16454] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4406'.
[  408.216333][T16457] netlink: 'syz.6.4408': attribute type 2 has an invalid length.
[  408.219007][T16457] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4408'.
[  408.223863][T16457] netlink: 'syz.6.4408': attribute type 2 has an invalid length.
[  408.229175][T16457] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4408'.
[  408.424400][T16476] netlink: 'syz.1.4416': attribute type 29 has an invalid length.
[  408.436989][T16476] netlink: 'syz.1.4416': attribute type 29 has an invalid length.
[  408.441836][T16476] netlink: 'syz.1.4416': attribute type 29 has an invalid length.
[  409.374747][T16522] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4433'.
[  409.438403][T16527] netlink: 'syz.6.4438': attribute type 1 has an invalid length.
[  409.441222][T16527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.621070][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4444'.
[  409.782166][T16550] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4448'.
[  409.786580][T16550] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4448'.
[  411.640826][T16615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.412547][T16647] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.4490'.
[  412.508610][T16647] syz.1.4490 (16647) used obsolete PPPIOCDETACH ioctl
[  413.429309][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4504'.
[  413.433580][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4504'.
[  413.442289][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4504'.
[  413.446413][T16688] netlink: 'syz.1.4507': attribute type 1 has an invalid length.
[  413.576138][T16694] netlink: 'syz.1.4510': attribute type 29 has an invalid length.
[  413.595257][T16695] netlink: 'syz.6.4508': attribute type 10 has an invalid length.
[  413.598992][T16694] netlink: 'syz.1.4510': attribute type 10 has an invalid length.
[  413.600196][T16695] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4508'.
[  413.681872][T16694] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.892058][T16694] team0: Port device bond0 added
[  413.914845][T16695] team0: entered promiscuous mode
[  413.925982][T16695] team_slave_0: entered promiscuous mode
[  413.929859][T16695] team_slave_1: entered promiscuous mode
[  413.937203][T16695] team0: entered allmulticast mode
[  413.939726][T16695] team_slave_0: entered allmulticast mode
[  413.942420][T16695] team_slave_1: entered allmulticast mode
[  413.952583][T16695] bridge0: port 5(team0) entered blocking state
[  413.955325][T16695] bridge0: port 5(team0) entered disabled state
[  413.970686][T16695] bridge0: port 5(team0) entered blocking state
[  413.973709][T16695] bridge0: port 5(team0) entered forwarding state
[  414.101805][T16705] netlink: 'syz.0.4513': attribute type 10 has an invalid length.
[  414.222502][T16718] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4518'.
[  414.226393][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4518'.
[  414.229915][T16718] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4518'.
[  414.233612][T16718] netlink: 'syz.1.4518': attribute type 2 has an invalid length.
[  414.239544][T16705] batman_adv: batadv0: Adding interface: netdevsim0
[  414.242079][T16718] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4518'.
[  414.242379][T16705] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.288959][T16705] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  414.312403][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'.
[  416.322569][T16782] netlink: 'syz.6.4547': attribute type 1 has an invalid length.
[  416.638035][T16790] netlink: 'syz.6.4550': attribute type 10 has an invalid length.
[  416.656697][T16790] bond0: (slave bond_slave_0): Releasing backup interface
[  417.783867][T16728] Set syz1 is full, maxelem 65536 reached
[  417.922136][T16814] __nla_validate_parse: 3 callbacks suppressed
[  417.922153][T16814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4560'.
[  418.082053][T16824] netlink: 'syz.1.4565': attribute type 6 has an invalid length.
[  418.084910][T16824] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.4565'.
[  418.686483][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'.
[  418.727103][T16832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.760370][T16836] netlink: 'syz.6.4572': attribute type 8 has an invalid length.
[  418.762945][T16836] netlink: 'syz.6.4572': attribute type 3 has an invalid length.
[  418.766225][T16836] netlink: 153952 bytes leftover after parsing attributes in process `syz.6.4572'.
[  418.778834][T16840] netlink: 'syz.0.4571': attribute type 11 has an invalid length.
[  418.781580][T16840] netlink: 'syz.0.4571': attribute type 11 has an invalid length.
[  418.792971][T16840] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4571'.
[  419.426210][T16870] netlink: 'syz.0.4587': attribute type 29 has an invalid length.
[  419.435064][T16872] netlink: 'syz.0.4587': attribute type 29 has an invalid length.
[  419.908123][T16890] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4595'.
[  420.125671][T16900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4600'.
[  420.129922][T16900] openvswitch: netlink: Missing key (keys=40, expected=100)
[  420.130582][T16898] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  420.170791][T16903] netlink: 'syz.1.4601': attribute type 3 has an invalid length.
[  420.174271][T16903] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.4601'.
[  420.185985][T16904] netlink: 'syz.0.4598': attribute type 1 has an invalid length.
[  420.199676][T16901] : renamed from gre0 (while UP)
[  420.219266][T16904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4598'.
[  421.169873][T16914] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37
[  421.605599][   T51] page_pool_release_retry() stalled pool shutdown: id 131, 1 inflight 60 sec
[  422.464251][T16941] netlink: 'syz.1.4618': attribute type 10 has an invalid length.
[  422.805706][   T39] wlan1: Trigger new scan to find an IBSS to join
[  422.931084][T16963] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4627'.
[  424.448166][T16995] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4641'.
[  424.606734][T17001] netlink: 'syz.6.4644': attribute type 21 has an invalid length.
[  424.637052][T17001] netlink: 212256 bytes leftover after parsing attributes in process `syz.6.4644'.
[  424.641003][T17001] netlink: zone id is out of range
[  424.643235][T17001] netlink: zone id is out of range
[  424.684395][T17001] netlink: zone id is out of range
[  424.694579][T17001] netlink: zone id is out of range
[  424.704806][T17001] netlink: zone id is out of range
[  424.719829][T17001] netlink: zone id is out of range
[  424.732231][T17001] netlink: zone id is out of range
[  424.750618][T17001] netlink: zone id is out of range
[  424.779474][T17001] netlink: zone id is out of range
[  424.798387][T17001] netlink: zone id is out of range
[  424.903847][T17006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4645'.
[  425.216591][T17006] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.251402][T17006] bridge_slave_0 (unregistering): left allmulticast mode
[  425.258750][T17006] bridge_slave_0 (unregistering): left promiscuous mode
[  425.262408][T17006] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.379781][T17012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4648'.
[  425.444967][T17014] syzkaller0: entered promiscuous mode
[  425.452583][T17014] syzkaller0: entered allmulticast mode
[  426.062056][T17042] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4661'.
[  426.196662][T17052] netlink: 'syz.6.4666': attribute type 12 has an invalid length.
[  426.200298][T17052] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4666'.
[  426.731619][ T3557] wlan1: Trigger new scan to find an IBSS to join
[  426.788625][T17092] netlink: 'syz.1.4686': attribute type 6 has an invalid length.
[  426.791771][T17092] netlink: 'syz.1.4686': attribute type 1 has an invalid length.
[  426.795061][T17092] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4686'.
[  427.621199][T17104] netlink: 'syz.6.4691': attribute type 10 has an invalid length.
[  427.626271][T14229] wlan1: Creating new IBSS network, BSSID f6:27:39:91:2b:6f
[  427.808034][T17112] netlink: 'syz.0.4695': attribute type 33 has an invalid length.
[  427.815613][T17112] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4695'.
[  428.420141][T17143] netlink: 798 bytes leftover after parsing attributes in process `syz.1.4708'.
[  429.408372][T17187] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4730'.
[  429.504633][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4730'.
[  429.690266][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4739'.
[  430.328057][T17232] bond0: entered promiscuous mode
[  430.330357][T17232] bond_slave_1: entered promiscuous mode
[  430.333680][T17232] bond0: entered allmulticast mode
[  430.337880][T17232] bond_slave_1: entered allmulticast mode
[  430.549688][T17245] netlink: 'syz.6.4755': attribute type 10 has an invalid length.
[  430.749270][T17250] netlink: 'syz.0.4753': attribute type 10 has an invalid length.
[  430.753262][T17250] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4753'.
[  430.785693][T17245] bridge0: port 3(batadv0) entered disabled state
[  430.826515][T17254] netlink: 'syz.1.4757': attribute type 10 has an invalid length.
[  430.832550][T17245] batadv0: left allmulticast mode
[  430.841659][T17245] batadv0: left promiscuous mode
[  430.868109][T17245] bridge0: port 3(batadv0) entered disabled state
[  431.263700][T17245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.279564][T17242] delete_channel: no stack
[  431.308943][T17245] batadv0: entered promiscuous mode
[  431.313563][T17245] batadv0: entered allmulticast mode
[  431.319890][T17245] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  431.464135][T17254] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  431.540414][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4758'.
[  431.751230][T17267] netlink: 6955 bytes leftover after parsing attributes in process `syz.6.4763'.
[  431.755248][T17267] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.4763'.
[  432.130676][T17285] netlink: 'syz.1.4771': attribute type 2 has an invalid length.
[  432.134426][T17285] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4771'.
[  432.602592][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4781'.
[  432.814092][T17327] netlink: 'syz.6.4785': attribute type 10 has an invalid length.
[  432.978913][T17335] tc_dump_action: action bad kind
[  433.372577][T17347] netlink: 'syz.0.4798': attribute type 13 has an invalid length.
[  433.375817][T17347] netlink: 'syz.0.4798': attribute type 17 has an invalid length.
[  434.063204][T17347] net_ratelimit: 4 callbacks suppressed
[  434.063208][T17347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  434.141734][T17374] netlink: 'syz.6.4809': attribute type 10 has an invalid length.
[  434.146053][T17374] bond0: left promiscuous mode
[  434.148115][T17374] bond_slave_1: left promiscuous mode
[  434.150835][T17374] batadv0: left promiscuous mode
[  434.153111][T17374] bond0: left allmulticast mode
[  434.155311][T17374] bond_slave_1: left allmulticast mode
[  434.160292][T17374] batadv0: left allmulticast mode
[  434.261210][T17382] tap0: tun_chr_ioctl cmd 21731
[  434.280361][T17386] __nla_validate_parse: 9 callbacks suppressed
[  434.280373][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4815'.
[  434.361506][T17382] tap0: tun_chr_ioctl cmd 2147767521
[  434.371247][T17386] netlink: 'syz.1.4815': attribute type 4 has an invalid length.
[  434.379169][T17386] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4815'.
[  434.703331][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4821'.
[  434.715300][T17398] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  434.732179][T17398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.173424][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4831'.
[  435.393685][T17419] sit0: entered allmulticast mode
[  436.245507][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4841'.
[  436.538666][T17453] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4845'.
[  436.979902][T17473] netlink: 'syz.6.4853': attribute type 19 has an invalid length.
[  436.986933][T17473] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4853'.
[  437.036256][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4855'.
[  437.045322][T17475] : entered promiscuous mode
[  437.410971][T17496] netlink: 'syz.1.4865': attribute type 10 has an invalid length.
[  437.413572][T17496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4865'.
[  437.439135][T17498] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4866'.
[  437.537135][ T5855] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  437.782875][T17523] netlink: 'syz.6.4877': attribute type 10 has an invalid length.
[  437.826955][T17521] netlink: 'syz.1.4878': attribute type 21 has an invalid length.
[  437.931532][T17523] unsupported nlmsg_type 40
[  437.941607][T17523] netlink: 'syz.6.4877': attribute type 10 has an invalid length.
[  437.962427][T17523] batadv0: entered promiscuous mode
[  437.964723][T17523] batadv0: entered allmulticast mode
[  438.002748][T17523] bond0: (slave batadv0): Releasing backup interface
[  438.012114][T17523] bridge0: port 3(batadv0) entered blocking state
[  438.026222][T17523] bridge0: port 3(batadv0) entered disabled state
[  438.126417][T11049] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  438.129802][T11049] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  438.488097][T17555] netlink: 'syz.6.4893': attribute type 10 has an invalid length.
[  438.492181][T17555] macvlan0: entered promiscuous mode
[  438.494723][T17555] macvlan0: entered allmulticast mode
[  438.505156][T17555] veth1_vlan: entered allmulticast mode
[  438.517164][T17555] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  438.992993][T17575] tmpfs: Bad value for 'mode'
[  439.062835][T17579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.932350][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.935818][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  440.166304][T17610] netlink: 'syz.6.4916': attribute type 1 has an invalid length.
[  440.370447][T17621] netlink: 'syz.6.4920': attribute type 29 has an invalid length.
[  440.407644][T17621] netlink: 'syz.6.4920': attribute type 29 has an invalid length.
[  440.494144][T17630] netlink: 'syz.0.4926': attribute type 29 has an invalid length.
[  440.560175][T17634] tap0: tun_chr_ioctl cmd 1074025680
[  440.712192][T17642] __nla_validate_parse: 7 callbacks suppressed
[  440.712203][T17642] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.4931'.
[  440.916786][T17655] GPL: port 1(gretap0) entered blocking state
[  440.925648][T17655] GPL: port 1(gretap0) entered disabled state
[  440.928461][T17655] gretap0: entered allmulticast mode
[  440.937549][T17655] gretap0: entered promiscuous mode
[  441.645275][T17713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'.
[  441.662254][T17713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'.
[  441.676144][T17713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'.
[  442.150277][T17739] netlink: 277 bytes leftover after parsing attributes in process `syz.6.4974'.
[  442.246820][T17747] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  442.331350][T17748] validate_nla: 6 callbacks suppressed
[  442.331568][T17748] netlink: 'syz.0.4977': attribute type 1 has an invalid length.
[  442.365324][T17748] netlink: 'syz.0.4977': attribute type 2 has an invalid length.
[  442.468603][T17761] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4985'.
[  442.556529][T17767] netlink: 'syz.1.4988': attribute type 1 has an invalid length.
[  442.594118][T17770] netlink: 628 bytes leftover after parsing attributes in process `syz.1.4990'.
[  442.640501][T17773] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4992'.
[  442.703268][T17778] pim6reg1: entered allmulticast mode
[  442.713316][T17778] pim6reg1: left allmulticast mode
[  442.896075][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4998'.
[  442.904084][T17789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4998'.
[  443.992536][T17838] pim6reg1: entered promiscuous mode
[  443.995032][T17838] pim6reg1: entered allmulticast mode
[  444.161258][T17845] netlink: 'syz.1.5023': attribute type 27 has an invalid length.
[  444.164730][T17845] netlink: 'syz.1.5023': attribute type 1 has an invalid length.
[  444.173207][T17845] bridge0: port 1(bridge_slave_0) entered learning state
[  444.473111][T17855] netlink: 'syz.0.5028': attribute type 21 has an invalid length.
[  447.429590][T17874] __nla_validate_parse: 5 callbacks suppressed
[  447.429606][T17874] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5036'.
[  447.458298][T17875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5037'.
[  447.463740][T17875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5037'.
[  447.503527][T17879] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5039'.
[  447.573960][T17881] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5040'.
[  447.580795][T17885] netlink: 'syz.1.5042': attribute type 21 has an invalid length.
[  447.584109][T17885] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5042'.
[  447.588744][T17881] netlink: zone id is out of range
[  447.595342][T17881] netlink: zone id is out of range
[  447.597990][T17881] netlink: zone id is out of range
[  447.600229][T17881] netlink: zone id is out of range
[  447.602462][T17881] netlink: zone id is out of range
[  447.604685][T17881] netlink: zone id is out of range
[  447.614177][T17881] netlink: zone id is out of range
[  447.619158][T17881] netlink: zone id is out of range
[  447.621679][T17881] netlink: zone id is out of range
[  447.625320][T17881] netlink: zone id is out of range
[  447.673767][T17888] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5043'.
[  447.743016][T17892] netlink: 'syz.0.5045': attribute type 1 has an invalid length.
[  447.811719][T17896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5047'.
[  448.151226][ T5855] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  449.332838][T17944] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5066'.
[  449.666159][T17964] netlink: 763 bytes leftover after parsing attributes in process `syz.6.5073'.
[  449.941785][T17990] netlink: 'syz.1.5085': attribute type 6 has an invalid length.
[  453.050083][T18093] netlink: 'syz.6.5133': attribute type 21 has an invalid length.
[  453.052827][T18093] __nla_validate_parse: 7 callbacks suppressed
[  453.052834][T18093] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5133'.
[  453.075113][T18095] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5134'.
[  455.673682][T18105] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  455.701839][T18108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5140'.
[  455.972220][T18121] netlink: 516 bytes leftover after parsing attributes in process `syz.0.5146'.
[  456.632234][ T5855] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9
[  456.794187][T18167] netlink: 'syz.1.5167': attribute type 3 has an invalid length.
[  457.325038][T18197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5180'.
[  458.080834][T18244] netlink: 'syz.6.5201': attribute type 210 has an invalid length.
[  458.519366][T18256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  458.523025][T18256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  458.709461][ T5855] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  459.649690][T18297] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5225'.
[  459.653578][T18297] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.5225'.
[  460.152931][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5232'.
[  460.307282][T18318] netlink: 'syz.1.5234': attribute type 9 has an invalid length.
[  460.924343][T18303] warn_alloc: 1 callbacks suppressed
[  460.924363][T18303] syz.0.5228: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  460.934881][T18303] CPU: 1 UID: 0 PID: 18303 Comm: syz.0.5228 Not tainted syzkaller #0 PREEMPT(full) 
[  460.934899][T18303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.934906][T18303] Call Trace:
[  460.934913][T18303]  <TASK>
[  460.934920][T18303]  dump_stack_lvl+0x189/0x250
[  460.934942][T18303]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.934957][T18303]  ? __pfx__printk+0x10/0x10
[  460.934975][T18303]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  460.934990][T18303]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  460.935005][T18303]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  460.935020][T18303]  warn_alloc+0x214/0x310
[  460.935044][T18303]  ? __pfx_warn_alloc+0x10/0x10
[  460.935060][T18303]  ? __get_vm_area_node+0x28f/0x300
[  460.935076][T18303]  ? hash_netportnet_create+0x354/0xf90
[  460.935093][T18303]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  460.935130][T18303]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  460.935150][T18303]  ? rcu_is_watching+0x15/0xb0
[  460.935163][T18303]  ? hash_netportnet_create+0x354/0xf90
[  460.935174][T18303]  ? hash_netportnet_create+0x354/0xf90
[  460.935183][T18303]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  460.935199][T18303]  ? hash_netportnet_create+0x354/0xf90
[  460.935212][T18303]  ? hash_netportnet_create+0x2fa/0xf90
[  460.935226][T18303]  hash_netportnet_create+0x354/0xf90
[  460.935245][T18303]  ? __nla_parse+0x40/0x60
[  460.935258][T18303]  ? __pfx_hash_netportnet_create+0x10/0x10
[  460.935273][T18303]  ip_set_create+0xa97/0x1940
[  460.935290][T18303]  ? ip_set_create+0x4a2/0x1940
[  460.935316][T18303]  ? __pfx_ip_set_create+0x10/0x10
[  460.935377][T18303]  nfnetlink_rcv_msg+0xb4d/0x1130
[  460.935397][T18303]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  460.935426][T18303]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  460.935441][T18303]  ? kasan_save_free_info+0x46/0x50
[  460.935471][T18303]  ? perf_trace_preemptirq_template+0xa3/0x340
[  460.935486][T18303]  ? kasan_quarantine_put+0x3d/0x220
[  460.935508][T18303]  netlink_rcv_skb+0x208/0x470
[  460.935525][T18303]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  460.935545][T18303]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  460.935567][T18303]  ? bpf_lsm_capable+0x9/0x20
[  460.935582][T18303]  ? security_capable+0x7e/0x2e0
[  460.935598][T18303]  nfnetlink_rcv+0x26a/0x2520
[  460.935619][T18303]  ? __dev_queue_xmit+0x1d79/0x3b50
[  460.935646][T18303]  ? __dev_queue_xmit+0x27b/0x3b50
[  460.935669][T18303]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  460.935686][T18303]  ? __pfx___dev_queue_xmit+0x10/0x10
[  460.935709][T18303]  ? ref_tracker_free+0x63a/0x7d0
[  460.935750][T18303]  ? __asan_memcpy+0x40/0x70
[  460.935764][T18303]  ? __pfx_ref_tracker_free+0x10/0x10
[  460.935774][T18303]  ? __skb_clone+0x63/0x7a0
[  460.935793][T18303]  ? __skb_clone+0x483/0x7a0
[  460.935813][T18303]  ? skb_clone+0x246/0x3a0
[  460.935830][T18303]  ? __netlink_deliver_tap+0x807/0x850
[  460.935842][T18303]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.935859][T18303]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.935877][T18303]  netlink_unicast+0x82f/0x9e0
[  460.935895][T18303]  ? __pfx_netlink_unicast+0x10/0x10
[  460.935907][T18303]  ? netlink_sendmsg+0x642/0xb30
[  460.935919][T18303]  ? skb_put+0x11b/0x210
[  460.935935][T18303]  netlink_sendmsg+0x805/0xb30
[  460.935954][T18303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.935969][T18303]  ? aa_sock_msg_perm+0xf1/0x1d0
[  460.935984][T18303]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  460.935997][T18303]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.936011][T18303]  __sock_sendmsg+0x21c/0x270
[  460.936031][T18303]  ____sys_sendmsg+0x505/0x830
[  460.936057][T18303]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.936079][T18303]  ? import_iovec+0x74/0xa0
[  460.936099][T18303]  ___sys_sendmsg+0x21f/0x2a0
[  460.936116][T18303]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.936156][T18303]  ? __fget_files+0x2a/0x420
[  460.936167][T18303]  ? __fget_files+0x3a0/0x420
[  460.936185][T18303]  __x64_sys_sendmsg+0x19b/0x260
[  460.936201][T18303]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  460.936229][T18303]  ? do_syscall_64+0xbe/0x3b0
[  460.936245][T18303]  do_syscall_64+0xfa/0x3b0
[  460.936259][T18303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.936270][T18303]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  460.936285][T18303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.936295][T18303] RIP: 0033:0x7effab58eba9
[  460.936308][T18303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.936318][T18303] RSP: 002b:00007effac4a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.936330][T18303] RAX: ffffffffffffffda RBX: 00007effab7d5fa0 RCX: 00007effab58eba9
[  460.936339][T18303] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  460.936346][T18303] RBP: 00007effab611e19 R08: 0000000000000000 R09: 0000000000000000
[  460.936353][T18303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.936359][T18303] R13: 00007effab7d6038 R14: 00007effab7d5fa0 R15: 00007ffebbc7f4e8
[  460.936379][T18303]  </TASK>
[  461.128224][T18303] Mem-Info:
[  461.129547][T18303] active_anon:10398 inactive_anon:0 isolated_anon:0
[  461.129547][T18303]  active_file:16130 inactive_file:38420 isolated_file:0
[  461.129547][T18303]  unevictable:1768 dirty:206 writeback:0
[  461.129547][T18303]  slab_reclaimable:6071 slab_unreclaimable:91131
[  461.129547][T18303]  mapped:19003 shmem:2429 pagetables:1056
[  461.129547][T18303]  sec_pagetables:0 bounce:0
[  461.129547][T18303]  kernel_misc_reclaimable:0
[  461.129547][T18303]  free:226104 free_pcp:23260 free_cma:0
[  461.152281][T18303] Node 0 active_anon:31864kB inactive_anon:0kB active_file:28460kB inactive_file:8488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49868kB dirty:712kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5768kB pagetables:2812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  461.167878][T18303] Node 1 active_anon:9660kB inactive_anon:0kB active_file:36060kB inactive_file:145192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26144kB dirty:112kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6612kB pagetables:1412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  461.179907][T18303] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  461.192340][T18303] lowmem_reserve[]: 0 811 811 811 811
[  461.194959][T18303] Node 0 DMA32 free:246252kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31796kB inactive_anon:0kB active_file:28460kB inactive_file:8488kB unevictable:3536kB writepending:712kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:41064kB local_pcp:20028kB free_cma:0kB
[  461.213188][T18303] lowmem_reserve[]: 0 0 0 0 0
[  461.218292][T18303] Node 1 DMA32 free:441968kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16640kB local_pcp:9792kB free_cma:0kB
[  461.233929][T18303] lowmem_reserve[]: 0 0 854 854 854
[  461.236850][T18303] Node 1 Normal free:200836kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9660kB inactive_anon:0kB active_file:36060kB inactive_file:145192kB unevictable:3536kB writepending:112kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35668kB local_pcp:17560kB free_cma:0kB
[  461.250760][T18303] lowmem_reserve[]: 0 0 0 0 0
[  461.252797][T18303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  461.258628][T18303] Node 0 DMA32: 127*4kB (UME) 320*8kB (UME) 221*16kB (UME) 145*32kB (UME) 180*64kB (UME) 78*128kB (UME) 58*256kB (UM) 46*512kB (UM) 55*1024kB (UM) 8*2048kB (ME) 25*4096kB (M) = 246252kB
[  461.267526][T18303] Node 1 DMA32: 18*4kB (UM) 13*8kB (UM) 32*16kB (UM) 42*32kB (UM) 40*64kB (UM) 15*128kB (UM) 7*256kB (UM) 7*512kB (UM) 6*1024kB (UM) 5*2048kB (UM) 101*4096kB (UM) = 441968kB
[  461.274081][T18303] Node 1 Normal: 635*4kB (M) 635*8kB (UME) 841*16kB (UME) 730*32kB (UME) 467*64kB (UME) 148*128kB (UME) 62*256kB (UME) 37*512kB (UME) 19*1024kB (UME) 2*2048kB (U) 12*4096kB (U) = 200788kB
[  461.283638][T18303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  461.289062][T18303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  461.293033][T18303] 56979 total pagecache pages
[  461.296559][T18303] 0 pages in swap cache
[  461.298362][T18303] Free swap  = 124996kB
[  461.300226][T18303] Total swap = 124996kB
[  461.302277][T18303] 786301 pages RAM
[  461.306577][T18303] 0 pages HighMem/MovableOnly
[  461.308659][T18303] 241348 pages reserved
[  461.310411][T18303] 0 pages cma reserved
[  461.428075][T18351] netlink: 'syz.6.5249': attribute type 1 has an invalid length.
[  461.431475][T18351] netlink: 'syz.6.5249': attribute type 1 has an invalid length.
[  461.489537][T18356] netlink: 'syz.6.5251': attribute type 29 has an invalid length.
[  462.538641][T18398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  462.542855][T18398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  462.587863][T18399] netlink: 'syz.1.5263': attribute type 4 has an invalid length.
[  462.591400][T18399] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5263'.
[  463.311174][T18416] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5276'.
[  463.506992][T18420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.510490][T18420] batman_adv: batadv0: Removing interface: batadv_slave_0
[  463.523848][T18420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  463.535110][T18420] batman_adv: batadv0: Removing interface: batadv_slave_1
[  463.549830][T18420] batman_adv: batadv0: Removing interface: netdevsim0
[  463.998168][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5285'.
[  464.002416][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5285'.
[  464.100349][T18454] : entered promiscuous mode
[  464.950693][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'.
[  465.031440][T18503] netlink: 'syz.0.5315': attribute type 1 has an invalid length.
[  465.034620][T18503] netlink: 'syz.0.5315': attribute type 3 has an invalid length.
[  465.040514][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5315'.
[  465.414912][T18528] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  465.668585][T18539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5331'.
[  467.022157][T18541] netlink: 'syz.1.5332': attribute type 29 has an invalid length.
[  467.204189][T18576] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5348'.
[  467.242636][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5350'.
[  467.405956][T18578] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  467.651164][T18591] netlink: 'syz.6.5354': attribute type 10 has an invalid length.
[  467.657295][T18591] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5354'.
[  468.382013][T18617] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5365'.
[  468.811354][T18635] netlink: 'syz.1.5374': attribute type 1 has an invalid length.
[  470.074343][ T5855] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  470.096095][T18677] netlink: 103 bytes leftover after parsing attributes in process `syz.0.5394'.
[  470.493410][T18708] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5409'.
[  471.344382][T18731] netlink: 'syz.0.5419': attribute type 16 has an invalid length.
[  471.352666][T18731] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5419'.
[  471.533319][T18751] netlink: 'syz.1.5428': attribute type 29 has an invalid length.
[  471.541546][T18751] netlink: 'syz.1.5428': attribute type 29 has an invalid length.
[  471.546191][T18751] netlink: 'syz.1.5428': attribute type 29 has an invalid length.
[  471.550444][T18751] netlink: 'syz.1.5428': attribute type 29 has an invalid length.
[  471.653017][T18763] netlink: 'syz.0.5433': attribute type 1 has an invalid length.
[  471.682518][T18766] IPv6: Can't replace route, no match found
[  472.242032][T18788] netlink: 'syz.1.5445': attribute type 10 has an invalid length.
[  472.244753][T18788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5445'.
[  472.247533][ T5876] unregister_netdevice: waiting for lo to become free. Usage count = 3
[  472.250026][T18788] vcan0: entered promiscuous mode
[  472.255989][T18788] net_ratelimit: 14 callbacks suppressed
[  472.255999][T18788] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  472.256292][ T5876] ref_tracker: netdev@ffff8881097f6610 has 1/1 users at
[  472.256292][ T5876]      ib_device_set_netdev+0x31f/0x6d0
[  472.256292][ T5876]      siw_newlink+0x40c/0xd70
[  472.256292][ T5876]      nldev_newlink+0x4a5/0x5a0
[  472.256292][ T5876]      rdma_nl_rcv+0x6ae/0x980
[  472.256292][ T5876]      netlink_unicast+0x82f/0x9e0
[  472.256292][ T5876]      netlink_sendmsg+0x805/0xb30
[  472.256292][ T5876]      __sock_sendmsg+0x21c/0x270
[  472.256292][ T5876]      ____sys_sendmsg+0x505/0x830
[  472.256292][ T5876]      ___sys_sendmsg+0x21f/0x2a0
[  472.256292][ T5876]      __x64_sys_sendmsg+0x19b/0x260
[  472.256292][ T5876]      do_syscall_64+0xfa/0x3b0
[  472.256292][ T5876]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.256292][ T5876] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  478.965698][   T34] INFO: task kworker/u9:5:1089 blocked for more than 143 seconds.
[  478.968929][   T34]       Not tainted syzkaller #0
[  478.971076][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  478.974689][   T34] task:kworker/u9:5    state:D stack:24360 pid:1089  tgid:1089  ppid:2      task_flags:0x4208060 flags:0x00004000
[  478.979768][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  478.982311][   T34] Call Trace:
[  478.983745][   T34]  <TASK>
[  478.985005][   T34]  __schedule+0x1798/0x4cc0
[  478.987100][   T34]  ? validate_chain+0x897/0x2140
[  478.989214][   T34]  ? __lock_acquire+0xab9/0xd20
[  478.991270][   T34]  ? __pfx___schedule+0x10/0x10
[  478.993472][   T34]  ? schedule+0x91/0x360
[  478.995604][   T34]  schedule+0x165/0x360
[  478.997362][   T34]  schedule_timeout+0x9a/0x270
[  478.999394][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  479.001609][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.003361][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.005294][   T34]  ? wait_for_completion+0x267/0x5d0
[  479.007555][   T34]  wait_for_completion+0x2bf/0x5d0
[  479.009700][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  479.012079][   T34]  ? up_write+0x1c4/0x420
[  479.013899][   T34]  ? remove_client_context+0xc0/0x1e0
[  479.016267][   T34]  disable_device+0x1c6/0x320
[  479.018270][   T34]  ? __pfx_disable_device+0x10/0x10
[  479.020425][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  479.022515][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.024275][   T34]  ib_unregister_work+0x19/0x30
[  479.026299][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  479.028597][   T34]  process_scheduled_works+0xae1/0x17b0
[  479.030662][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  479.032767][   T34]  worker_thread+0x8a0/0xda0
[  479.034422][   T34]  kthread+0x711/0x8a0
[  479.036132][   T34]  ? __pfx_worker_thread+0x10/0x10
[  479.038272][   T34]  ? __pfx_kthread+0x10/0x10
[  479.040707][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.042788][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.044927][   T34]  ? __pfx_kthread+0x10/0x10
[  479.047075][   T34]  ret_from_fork+0x439/0x7d0
[  479.049260][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  479.051797][   T34]  ? __switch_to_asm+0x39/0x70
[  479.054026][   T34]  ? __switch_to_asm+0x33/0x70
[  479.056227][   T34]  ? __pfx_kthread+0x10/0x10
[  479.058315][   T34]  ret_from_fork_asm+0x1a/0x30
[  479.060408][   T34]  </TASK>
[  479.061869][   T34] 
[  479.061869][   T34] Showing all locks held in the system:
[  479.065057][   T34] 1 lock held by khungtaskd/34:
[  479.067552][   T34]  #0: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  479.072216][   T34] 3 locks held by kworker/u9:5/1089:
[  479.074466][   T34]  #0: ffff888104cb6148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  479.079364][   T34]  #1: ffffc90006f17bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  479.084784][   T34]  #2: ffff888126034700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  479.089646][   T34] 2 locks held by getty/5676:
[  479.091692][   T34]  #0: ffff88810ebd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  479.095978][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  479.100417][   T34] 3 locks held by kworker/u8:3/5876:
[  479.102699][   T34]  #0: ffff88801b2f7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  479.107290][   T34]  #1: ffffc900037afbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  479.111676][   T34]  #2: ffffffff8f52d390 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  479.115649][   T34] 
[  479.116706][   T34] =============================================
[  479.116706][   T34] 
[  479.120163][   T34] NMI backtrace for cpu 0
[  479.120176][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  479.120188][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  479.120195][   T34] Call Trace:
[  479.120201][   T34]  <TASK>
[  479.120206][   T34]  dump_stack_lvl+0x189/0x250
[  479.120225][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.120236][   T34]  ? __pfx__printk+0x10/0x10
[  479.120258][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  479.120274][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  479.120290][   T34]  ? __pfx__printk+0x10/0x10
[  479.120306][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  479.120323][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  479.120339][   T34]  watchdog+0xf93/0xfe0
[  479.120371][   T34]  ? watchdog+0x1de/0xfe0
[  479.120388][   T34]  kthread+0x711/0x8a0
[  479.120403][   T34]  ? __pfx_watchdog+0x10/0x10
[  479.120415][   T34]  ? __pfx_kthread+0x10/0x10
[  479.120428][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.120469][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.120478][   T34]  ? __pfx_kthread+0x10/0x10
[  479.120491][   T34]  ret_from_fork+0x439/0x7d0
[  479.120504][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  479.120518][   T34]  ? __switch_to_asm+0x39/0x70
[  479.120530][   T34]  ? __switch_to_asm+0x33/0x70
[  479.120541][   T34]  ? __pfx_kthread+0x10/0x10
[  479.120553][   T34]  ret_from_fork_asm+0x1a/0x30
[  479.120575][   T34]  </TASK>
[  479.120580][   T34] Sending NMI from CPU 0 to CPUs 1:
[  479.182716][    C1] NMI backtrace for cpu 1
[  479.182728][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  479.182736][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  479.182741][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  479.182752][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 c9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  479.182758][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  479.182767][    C1] RAX: 4b20d672dd3c8d00 RBX: ffffffff819695f8 RCX: 4b20d672dd3c8d00
[  479.182772][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba2f8 RDI: ffffffff8be33e80
[  479.182777][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  479.182781][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa3aa30
[  479.182786][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  479.182791][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  479.182796][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  479.182800][    C1] CR2: 00007f9378087e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  479.182835][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  479.182841][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  479.182846][    C1] Call Trace:
[  479.182850][    C1]  <TASK>
[  479.182853][    C1]  default_idle+0x13/0x20
[  479.182862][    C1]  default_idle_call+0x74/0xb0
[  479.182871][    C1]  do_idle+0x1e8/0x510
[  479.182879][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  479.182886][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.182893][    C1]  ? __pfx_do_idle+0x10/0x10
[  479.182900][    C1]  ? do_idle+0x4ef/0x510
[  479.182907][    C1]  cpu_startup_entry+0x44/0x60
[  479.182913][    C1]  start_secondary+0x101/0x110
[  479.182922][    C1]  common_startup_64+0x13e/0x147
[  479.182934][    C1]  </TASK>
[  479.183740][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  479.263191][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  479.267045][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  479.271245][   T34] Call Trace:
[  479.272652][   T34]  <TASK>
[  479.273917][   T34]  dump_stack_lvl+0x99/0x250
[  479.275898][   T34]  ? __asan_memcpy+0x40/0x70
[  479.277908][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.280140][   T34]  ? __pfx__printk+0x10/0x10
[  479.282147][   T34]  vpanic+0x281/0x750
[  479.283893][   T34]  ? __pfx_vpanic+0x10/0x10
[  479.285850][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  479.288235][   T34]  ? preempt_schedule+0xae/0xc0
[  479.289901][   T34]  ? preempt_schedule_common+0x83/0xd0
[  479.291728][   T34]  panic+0xb9/0xc0
[  479.292999][   T34]  ? __pfx_panic+0x10/0x10
[  479.294509][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  479.296275][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  479.298310][   T34]  watchdog+0xfd2/0xfe0
[  479.299781][   T34]  ? watchdog+0x1de/0xfe0
[  479.301411][   T34]  kthread+0x711/0x8a0
[  479.302778][   T34]  ? __pfx_watchdog+0x10/0x10
[  479.304346][   T34]  ? __pfx_kthread+0x10/0x10
[  479.305878][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.307619][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.309406][   T34]  ? __pfx_kthread+0x10/0x10
[  479.311665][   T34]  ret_from_fork+0x439/0x7d0
[  479.314034][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  479.316662][   T34]  ? __switch_to_asm+0x39/0x70
[  479.319216][   T34]  ? __switch_to_asm+0x33/0x70
[  479.321290][   T34]  ? __pfx_kthread+0x10/0x10
[  479.323241][   T34]  ret_from_fork_asm+0x1a/0x30
[  479.325269][   T34]  </TASK>
[  479.327333][   T34] Kernel Offset: disabled
[  479.329191][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:21:58  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bee60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000104df RDI=00000000000104e0 RBP=ffffffff99df76b0 RSP=ffffc90007be6330
R8 =ffff888107740237 R9 =1ffff11020ee8046 R10=dffffc0000000000 R11=ffffffff854fa370
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa3e7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efe1b60c6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2568d0 CR3=0000000039c74000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000200000000300 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007effab612e53
XMM06=0000000000000000 00007effab612e4d XMM07=0000000000000000 00007effab612e61
XMM08=0000000000000000 00007effab612ee7 XMM09=0000000000000000 00007effab612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fffffffff258a744 RBX=ffffffff8fbfc4f8 RCX=dffffc0000000000 RDX=ffffffff8fbfc4d8
RSI=ffffffff903fe894 RDI=ffffffff8be33e20 RBP=ffffffff8fbfc4d8 RSP=ffffc9000257f6b8
R8 =0000000000000009 R9 =ffffffff8172d195 R10=ffffc9000257f7d8 R11=ffffffff81ac4d00
R12=ffffffff82186c0f R13=ffffffff8fbfc4d8 R14=ffffc9000257f788 R15=ffffffff8fbfc4e8
RIP=ffffffff8172e405 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f854754e380 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efe1a718580 CR3=000000001236a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
