last executing test programs:

3m43.708126501s ago: executing program 1 (id=1546):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002400010325bd7000fcffffff150000000c007f0037ff"], 0x20}, 0x1, 0x0, 0x0, 0x448d3}, 0xc080)

3m43.649721546s ago: executing program 1 (id=1549):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xc)

3m43.598568346s ago: executing program 1 (id=1552):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000befabc4a", @ANYRES32, @ANYBLOB="628f38255f7c6bb1b03ab2e42ff891f7e8f96df5851b814dbf1aaabbe334aa9998d1", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

3m43.28011342s ago: executing program 0 (id=1558):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)

3m43.279107252s ago: executing program 0 (id=1560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

3m43.169288565s ago: executing program 0 (id=1563):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x0, 0x84, &(0x7f00000002c0), &(0x7f0000000440)=""/132, 0x7, 0x0, 0x97, 0x0, &(0x7f0000000640)="3aea913f999cbcff383c8a1c4231818e6cbc2369e6c319c3f324abae9ab491ef63afa1c64f6241aebb5c5df2b6c8a5e1c5f7da0384ec15f66a224f7c1abd5292791ce6a36166f4d5ae5098bbdb071b0961221031e30fa830637224e18d4999bdb8c40e4c75c9f09c851747c4dbde3ab48d1fe8c26a0280a8317813aef1c32a4a562d2bf37bf96b7775f90ec085df8ad9c931e7f582a76d", 0x0, 0x0, 0x0, 0x200}, 0x50)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100190, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20780, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r2, @ANYRESHEX=r2, @ANYRES16=r1, @ANYRES8, @ANYRES64, @ANYRES16], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x7fff, 0x14}, 0xc)
mkdir(&(0x7f0000000880)='./file0\x00', 0x11)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0)

3m43.000932634s ago: executing program 0 (id=1565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10002}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r9=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc)

3m42.999355493s ago: executing program 0 (id=1566):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

3m42.947011634s ago: executing program 0 (id=1567):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x160, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x65734a24}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa09e3964451d8229}}]}, @CTA_EXPECT_MASK={0x0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @local}, {0x0, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @local}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0xa3}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x0, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c159fa6d8632da7}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$cgroup(r2, 0x0, 0x200002, 0x0)
socketpair(0x3, 0x1, 0x2, &(0x7f00000005c0))
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x86b90294e1f5d799}}}, 0x3c}, 0x1, 0x0, 0x0, 0xf36068896469cbff}, 0x8000)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r7}, &(0x7f0000000600), &(0x7f0000000980)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc)

3m41.815782338s ago: executing program 1 (id=1571):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
sendmsg$key(r0, 0x0, 0x20000040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x4050)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})

3m41.549335333s ago: executing program 1 (id=1574):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x2000000}, 0x20)

3m41.279369328s ago: executing program 1 (id=1575):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150001", 0x1f}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33)

3m41.158550321s ago: executing program 32 (id=1575):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150001", 0x1f}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33)

3m27.905080677s ago: executing program 33 (id=1567):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x160, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x65734a24}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa09e3964451d8229}}]}, @CTA_EXPECT_MASK={0x0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @local}, {0x0, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @local}, {0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0xa3}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x0, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c159fa6d8632da7}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x24008040)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$cgroup(r2, 0x0, 0x200002, 0x0)
socketpair(0x3, 0x1, 0x2, &(0x7f00000005c0))
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x86b90294e1f5d799}}}, 0x3c}, 0x1, 0x0, 0x0, 0xf36068896469cbff}, 0x8000)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r7}, &(0x7f0000000600), &(0x7f0000000980)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc)

2m39.727117068s ago: executing program 2 (id=2321):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40010)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r1, 0x0, 0x82)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8800)
r4 = socket$kcm(0x23, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd8700fcc6a5f6680000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9, 0x2}, 0x80, &(0x7f0000000580)=[{0x0}], 0x1}, 0x8880)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x40000000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdir(0x0, 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

2m39.55583438s ago: executing program 2 (id=2325):
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x891b, 0x0)
socket$kcm(0x23, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x4000)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4)

2m39.340282113s ago: executing program 2 (id=2327):
r0 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x114, 0x2, 0x0, 0x0)

2m39.279066674s ago: executing program 2 (id=2328):
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2801, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2m39.134866676s ago: executing program 2 (id=2331):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x80000, 0x0)

2m39.009400972s ago: executing program 2 (id=2333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002c000000080a01010000000000000000020000000900020073797a32000000000900010073797a30"], 0xa0}}, 0x0)

2m23.997540287s ago: executing program 34 (id=2333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002c000000080a01010000000000000000020000000900020073797a32000000000900010073797a30"], 0xa0}}, 0x0)

1m28.218068976s ago: executing program 4 (id=3435):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)

1m28.156979772s ago: executing program 4 (id=3436):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x8, 0x0, 0x0)
r3 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)='blkio.bfq.sectors\x00'}, 0x30)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x34, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000003, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8948, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004800)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x40010)
close(r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"})
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)

1m27.238146691s ago: executing program 4 (id=3448):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000025008188040f80ec59acbc0911a1f8480200001f56451747c3d9cd52aadcf124dea29e4e242c0f374d5d", 0x2e}], 0x1}, 0x0)

1m27.087803095s ago: executing program 4 (id=3450):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x26e1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)

1m24.006086414s ago: executing program 4 (id=3501):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

1m24.005620597s ago: executing program 4 (id=3502):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x2, 0x0, 0x0, 0x800, 0xc000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="0000186df4b1768c36153d", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xb}, 0x0, 0x1, 0x0, 0x1, 0x3fe, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0xa060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYBLOB="bc6b4f7688ee1ab73ebffde3897d64bb31b0bc1942b9d6770848a4a3ee23337349efe1a9cc760539020b97ee8ab0a2792fff66453bbf5078a028614c9092ff97593cb2bd0ed2fe6436d550379e09b300da4fea5a836d2168f5a5b33517f135912c35b146bd7afb8eb4d0babaef48b45fcedb2e5e6893414e6c9f4734466dab8ff928341312ff6120f85d9a08b0bf23062578db5d82c13be8e87444d1e0558f3d97974d819ea1970f4ee429daee26e8dc28c03f2fcbf6e3892f9efff72ce70970e56723f8a24fefdbe32ae35cd4a961aac970d44210e3ebca", @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="00000080", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004000078414d219764", @ANYRES32=0x0, @ANYBLOB], 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x1}, 0x19b8, 0x9, 0x2, 0x0, 0x9, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xc, r1, 0x8)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)

1m8.944162675s ago: executing program 35 (id=3502):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x2, 0x0, 0x0, 0x800, 0xc000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x8, 0x100000830d}, 0x4500, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="0000186df4b1768c36153d", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0xb}, 0x0, 0x1, 0x0, 0x1, 0x3fe, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0xa060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYBLOB="bc6b4f7688ee1ab73ebffde3897d64bb31b0bc1942b9d6770848a4a3ee23337349efe1a9cc760539020b97ee8ab0a2792fff66453bbf5078a028614c9092ff97593cb2bd0ed2fe6436d550379e09b300da4fea5a836d2168f5a5b33517f135912c35b146bd7afb8eb4d0babaef48b45fcedb2e5e6893414e6c9f4734466dab8ff928341312ff6120f85d9a08b0bf23062578db5d82c13be8e87444d1e0558f3d97974d819ea1970f4ee429daee26e8dc28c03f2fcbf6e3892f9efff72ce70970e56723f8a24fefdbe32ae35cd4a961aac970d44210e3ebca", @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="00000080", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004000078414d219764", @ANYRES32=0x0, @ANYBLOB], 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x8000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x1}, 0x19b8, 0x9, 0x2, 0x0, 0x9, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xc, r1, 0x8)
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)

26.586576919s ago: executing program 5 (id=4280):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

26.585976827s ago: executing program 5 (id=4282):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

26.487477107s ago: executing program 5 (id=4283):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0xf, &(0x7f00000001c0)='\x00'}, 0x11)

26.487156128s ago: executing program 5 (id=4284):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, &(0x7f0000000140), 0x4)
sendmsg$inet(r0, &(0x7f00000011c0)={&(0x7f0000000800)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000840)="3ee7fbbd", 0x4}], 0x1}, 0x0)

26.427827571s ago: executing program 5 (id=4285):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

26.427117872s ago: executing program 5 (id=4287):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0x11c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@lifetime_val={0x24, 0x9, {0x4, 0x4, 0x9, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

11.247517484s ago: executing program 36 (id=4287):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000500)=@allocspi={0x11c, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@lifetime_val={0x24, 0x9, {0x4, 0x4, 0x9, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

2.816812183s ago: executing program 7 (id=4567):
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socket$kcm(0x10, 0x2, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, 0x0, 0xfdef)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

1.896593987s ago: executing program 7 (id=4581):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x17, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x4000)

1.816264815s ago: executing program 7 (id=4583):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x100)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.748339527s ago: executing program 7 (id=4585):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x4}, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

1.157147116s ago: executing program 6 (id=4598):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_devices(r2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)

1.097198326s ago: executing program 3 (id=4601):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)

1.017655434s ago: executing program 3 (id=4602):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8c42, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x1000, 0x2, 0xa9eb, 0x8, 0x0, 0x0, 0x806}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private, 0x4e20, 0xfffc, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0)

526.446694ms ago: executing program 3 (id=4603):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
close(r0)

526.242654ms ago: executing program 3 (id=4604):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="6341ed8e46dc3f0adf0600f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

383.999172ms ago: executing program 3 (id=4605):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/238, 0xee}], 0x1}, 0x80)

379.674139ms ago: executing program 7 (id=4606):
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e25, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000084}, 0x20000040)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc)

379.387507ms ago: executing program 3 (id=4607):
r0 = socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x20011, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000bab95000000020600f90324fc000000cda0", 0x69}], 0x1}, 0x40)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40008}, 0xc104)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580))

292.155518ms ago: executing program 7 (id=4608):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0xfffffffffffffffe, 0x40, r0}, 0x38)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000200)='scmi_xfer_begin\x00', r2, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

269.313233ms ago: executing program 6 (id=4609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

197.557505ms ago: executing program 6 (id=4610):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xb, 0x2, 0x2}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

105.777758ms ago: executing program 6 (id=4611):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, ':\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8ffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0)

105.47777ms ago: executing program 6 (id=4612):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x110, 0xd}}], 0x10}, 0x40010)

0s ago: executing program 6 (id=4613):
r0 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x28, 0x8, 0x0, 0x0)

kernel console output (not intermixed with test programs):

B inactive_file:5176kB unevictable:3536kB writepending:104kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:26532kB local_pcp:11712kB free_cma:0kB
[  137.503649][ T8895] lowmem_reserve[]: 0 0 0 0 0
[  137.507456][ T8895] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  137.513258][ T8895] Node 0 DMA32: 1427*4kB (UM) 1112*8kB (UME) 717*16kB (UM) 734*32kB (UME) 445*64kB (UME) 207*128kB (UM) 41*256kB (UME) 7*512kB (UM) 16*1024kB (UM) 3*2048kB (UM) 31*4096kB (UM) = 268124kB
[  137.521538][ T8895] Node 1 DMA32: 4*4kB (UM) 4*8kB (UM) 2*16kB (U) 2*32kB (U) 3*64kB (U) 2*128kB (U) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 103*4096kB (UM) = 439120kB
[  137.528405][ T8895] Node 1 Normal: 4*4kB (UE) 3*8kB (UM) 2*16kB (UE) 123*32kB (UME) 3*64kB (UM) 3*128kB (UE) 4*256kB (UME) 2*512kB (U) 2*1024kB (UM) 4*2048kB (UME) 55*4096kB (UM) = 242152kB
[  137.536748][ T8895] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  137.540555][ T8895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  137.545537][ T8895] 52021 total pagecache pages
[  137.548488][ T8895] 31 pages in swap cache
[  137.550614][ T8895] Free swap  = 124820kB
[  137.555245][ T8895] Total swap = 124996kB
[  137.556894][ T8895] 786301 pages RAM
[  137.559045][ T8895] 0 pages HighMem/MovableOnly
[  137.560912][ T8895] 241356 pages reserved
[  137.562872][ T8895] 0 pages cma reserved
[  137.803703][ T8895] syz.2.1231 (8895) used greatest stack depth: 15960 bytes left
[  138.195377][ T8992] netlink: 'syz.0.1277': attribute type 40 has an invalid length.
[  138.367861][ T8987] -1: renamed from syzkaller0
[  138.381973][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.534925][   T33] audit: type=1107 audit(1758587642.421:3): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  138.819458][ T9017] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  139.069003][ T9034] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1296'.
[  139.171082][ T9043] IPv6: NLM_F_CREATE should be specified when creating new route
[  139.331826][ T9054] netlink: 'syz.1.1306': attribute type 21 has an invalid length.
[  139.336787][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1306'.
[  139.417361][ T9059] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.1308'.
[  139.547080][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1310'.
[  139.881087][ T9080] netlink: 'syz.1.1316': attribute type 11 has an invalid length.
[  139.887954][ T9080] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1316'.
[  139.982594][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.026372][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1317'.
[  140.727419][ T9127] netlink: 'syz.0.1338': attribute type 17 has an invalid length.
[  140.730652][ T9127] __nla_validate_parse: 1 callbacks suppressed
[  140.730663][ T9127] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1338'.
[  140.751593][ T9131] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.877052][ T9146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.951390][ T9150] netlink: 'syz.2.1349': attribute type 21 has an invalid length.
[  140.965961][ T9150] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.980168][ T9150] IPv6: Can't replace route, no match found
[  141.115889][ T9155] netlink: 'syz.0.1350': attribute type 11 has an invalid length.
[  141.121502][ T9155] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1350'.
[  141.847730][ T9151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.422951][ T9187] netlink: 'syz.1.1365': attribute type 21 has an invalid length.
[  142.427773][ T9187] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1365'.
[  142.436053][ T9187] netlink: 'syz.1.1365': attribute type 4 has an invalid length.
[  142.439592][ T9187] netlink: 'syz.1.1365': attribute type 5 has an invalid length.
[  142.443378][ T9187] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1365'.
[  142.590374][ T9197] netlink: 'syz.2.1370': attribute type 1 has an invalid length.
[  142.617909][ T9201] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  142.889380][ T9221] netlink: 'syz.0.1381': attribute type 3 has an invalid length.
[  142.892671][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'.
[  142.897441][ T9221] netlink: 'syz.0.1381': attribute type 3 has an invalid length.
[  142.900934][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'.
[  142.906121][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'.
[  143.112922][ T9236] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  143.620488][ T9262] netlink: 'syz.1.1401': attribute type 1 has an invalid length.
[  143.647181][ T9262] netlink: 'syz.1.1401': attribute type 2 has an invalid length.
[  147.516884][ T9296] netlink: 'syz.0.1415': attribute type 1 has an invalid length.
[  147.632604][ T9302] netlink: 'syz.1.1418': attribute type 10 has an invalid length.
[  147.640323][ T9302] macvlan0: entered promiscuous mode
[  147.644097][ T9302] macvlan0: entered allmulticast mode
[  147.670550][ T9302] veth1_vlan: entered allmulticast mode
[  147.677597][ T9302] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  148.665443][ T9335] netlink: 'syz.2.1432': attribute type 1 has an invalid length.
[  148.669296][ T9335] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1432'.
[  148.959101][ T9351] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  149.190731][ T9372] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1445'.
[  149.286772][ T9376] netlink: 'syz.1.1447': attribute type 21 has an invalid length.
[  149.289625][ T9376] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1447'.
[  149.342644][ T9380] netlink: 'syz.1.1449': attribute type 46 has an invalid length.
[  149.510272][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'.
[  149.567889][ T9392] netlink: 'syz.0.1455': attribute type 1 has an invalid length.
[  149.571157][ T9392] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1455'.
[  149.686985][ T9400] netlink: 'syz.0.1459': attribute type 2 has an invalid length.
[  149.690298][ T9400] netlink: 'syz.0.1459': attribute type 1 has an invalid length.
[  149.695469][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1459'.
[  149.706600][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1459'.
[  149.711900][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1459'.
[  149.717789][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1459'.
[  149.748262][ T9402] netlink: 'syz.1.1460': attribute type 10 has an invalid length.
[  149.750844][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1460'.
[  149.756525][ T9402] batman_adv: batadv0: Adding interface: virt_wifi0
[  149.758785][ T9402] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.768821][ T9402] batman_adv: batadv0: Interface activated: virt_wifi0
[  149.808590][ T9404] bridge: RTM_NEWNEIGH with invalid state 0x1
[  150.228295][   T54] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  150.231504][   T54] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  150.431554][   T54] Bluetooth: hci0: Malformed LE Event: 0x0d
[  150.768886][ T9461] lo speed is unknown, defaulting to 1000
[  150.772023][ T9461] wg0 speed is unknown, defaulting to 1000
[  150.853913][ T9461] siw: device registration error -23
[  151.418308][ T9484] netlink: 'syz.2.1494': attribute type 25 has an invalid length.
[  153.096528][ T9578] validate_nla: 1 callbacks suppressed
[  153.096541][ T9578] netlink: 'syz.1.1536': attribute type 2 has an invalid length.
[  153.102089][ T9578] netlink: 'syz.1.1536': attribute type 1 has an invalid length.
[  153.199799][ T9584] lo speed is unknown, defaulting to 1000
[  153.204235][ T9584] wg0 speed is unknown, defaulting to 1000
[  153.377224][ T9590] netlink: 'syz.0.1540': attribute type 2 has an invalid length.
[  153.380575][ T9590] netlink: 'syz.0.1540': attribute type 4 has an invalid length.
[  156.507849][ T9604] openvswitch: netlink: Flow actions attr not present in new flow.
[  156.702136][ T9625] syzkaller0: create flow: hash 752467273 index 1
[  156.787716][ T9620] __nla_validate_parse: 6 callbacks suppressed
[  156.787727][ T9620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1553'.
[  156.794085][ T5889] syzkaller0: tun_net_xmit 76
[  156.795865][ T5889] syzkaller0: tun_net_xmit 48
[  156.800275][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1553'.
[  156.813907][   T24] syzkaller0: tun_net_xmit 76
[  156.819188][ T9627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1553'.
[  156.823220][ T9613] syzkaller0: delete flow: hash 752467273 index 1
[  157.182742][ T9649] sysfs: Unknown parameter 'subj_type'
[  158.313164][ T9656] netlink: 'syz.2.1569': attribute type 3 has an invalid length.
[  158.315824][ T9656] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1569'.
[  158.338855][ T9658] netlink: 64967 bytes leftover after parsing attributes in process `syz.2.1570'.
[  158.401102][ T9660] : renamed from wg2 (while UP)
[  158.876550][ T5889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.965521][ T5889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.061624][ T5889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.129112][ T5889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.275026][ T5889] bridge_slave_1: left allmulticast mode
[  159.289794][ T5889] bridge_slave_1: left promiscuous mode
[  159.303266][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.310518][ T5889] bridge_slave_0: left allmulticast mode
[  159.312302][ T5889] bridge_slave_0: left promiscuous mode
[  159.315515][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.719865][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.722743][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.726734][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.734699][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.738010][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.842748][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.849016][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.855434][ T5889] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  159.859812][ T5889] veth1_vlan: left allmulticast mode
[  159.864170][ T5889] bond0 (unregistering): Released all slaves
[  159.890603][ T9682] syzkaller1: tun_chr_ioctl cmd 1074025676
[  159.892695][ T9682] syzkaller1: owner set to 778
[  159.950550][ T9683] lo speed is unknown, defaulting to 1000
[  159.964602][ T9683] wg0 speed is unknown, defaulting to 1000
[  160.321222][ T5889] hsr_slave_0: left promiscuous mode
[  160.335549][ T5889] hsr_slave_1: left promiscuous mode
[  160.338320][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.341323][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.368249][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.371195][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.384089][ T5889] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  160.387103][ T5889] batman_adv: batadv0: Removing interface: virt_wifi0
[  160.408317][ T5889] veth1_macvtap: left promiscuous mode
[  160.410747][ T5889] veth0_macvtap: left promiscuous mode
[  160.413146][ T5889] veth1_vlan: left promiscuous mode
[  160.415940][ T5889] veth0_vlan: left promiscuous mode
[  160.849268][ T5889] team0 (unregistering): Port device team_slave_1 removed
[  160.880867][ T5889] team0 (unregistering): Port device team_slave_0 removed
[  161.280402][ T9683] chnl_net:caif_netlink_parms(): no params data found
[  161.390109][ T9705] netlink: 'syz.2.1579': attribute type 1 has an invalid length.
[  161.397841][ T9705] netlink: 'syz.2.1579': attribute type 4 has an invalid length.
[  161.563191][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.575589][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.578762][ T9683] bridge_slave_0: entered allmulticast mode
[  161.597452][ T9683] bridge_slave_0: entered promiscuous mode
[  161.609294][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.614010][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.628852][ T9683] bridge_slave_1: entered allmulticast mode
[  161.636433][ T9683] bridge_slave_1: entered promiscuous mode
[  161.675501][ T9718] netlink: 'syz.2.1582': attribute type 2 has an invalid length.
[  161.678786][ T9718] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.1582'.
[  161.729664][ T9683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.764251][ T9683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.784274][   T54] Bluetooth: hci0: command tx timeout
[  161.791805][ T9722] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1583'.
[  161.830049][ T9683] team0: Port device team_slave_0 added
[  161.850288][ T9683] team0: Port device team_slave_1 added
[  161.947216][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.950023][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.967113][ T9683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.981590][ T9683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.985610][ T9683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.997922][ T9683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.158857][ T9683] hsr_slave_0: entered promiscuous mode
[  162.162730][ T9683] hsr_slave_1: entered promiscuous mode
[  162.165814][ T9683] debugfs: 'hsr0' already exists in 'hsr'
[  162.168268][ T9683] Cannot create hsr debugfs directory
[  162.491546][ T9683] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  162.511707][ T9683] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  162.531444][ T9683] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  162.555211][ T9683] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  162.716531][ T9683] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.732464][ T9683] 8021q: adding VLAN 0 to HW filter on device team0
[  162.741716][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.744912][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.786335][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.789463][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.858305][ T9746] netlink: 'syz.2.1587': attribute type 12 has an invalid length.
[  162.874216][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1587'.
[  162.960028][ T9683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.013061][ T9683] veth0_vlan: entered promiscuous mode
[  163.022965][ T9683] veth1_vlan: entered promiscuous mode
[  163.058244][ T9683] veth0_macvtap: entered promiscuous mode
[  163.065702][ T9683] veth1_macvtap: entered promiscuous mode
[  163.087989][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.099841][ T9683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.111096][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.117022][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.127920][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.131673][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.199999][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.206768][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.241184][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.252192][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.444940][ T9757] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1590'.
[  163.699205][ T9766] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1593'.
[  163.720006][ T9766] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1593'.
[  163.834549][ T9773] netlink: 'syz.2.1595': attribute type 10 has an invalid length.
[  163.842166][ T9773] lo: entered promiscuous mode
[  163.846438][ T9773] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  163.870423][   T54] Bluetooth: hci0: command tx timeout
[  164.725638][ T9777] openvswitch: netlink: Message has 16 unknown bytes.
[  164.727766][ T9777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.946805][   T54] Bluetooth: hci0: command tx timeout
[  166.626041][ T9801] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1608'.
[  166.641749][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1608'.
[  166.647105][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1608'.
[  166.786034][ T9808] netlink: 'syz.2.1611': attribute type 4 has an invalid length.
[  166.788656][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'.
[  167.109780][ T9817] warn_alloc: 1 callbacks suppressed
[  167.109795][ T9817] syz.2.1615: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  167.114682][ T9816] netlink: 'syz.2.1615': attribute type 1 has an invalid length.
[  167.151402][ T9817] 
[  167.152642][ T9817] CPU: 1 UID: 0 PID: 9817 Comm: syz.2.1615 Not tainted syzkaller #0 PREEMPT(full) 
[  167.152659][ T9817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.152674][ T9817] Call Trace:
[  167.152680][ T9817]  <TASK>
[  167.152687][ T9817]  dump_stack_lvl+0x189/0x250
[  167.152707][ T9817]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  167.152725][ T9817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.152739][ T9817]  ? __pfx__printk+0x10/0x10
[  167.152756][ T9817]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  167.152769][ T9817]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  167.152795][ T9817]  warn_alloc+0x214/0x310
[  167.152812][ T9817]  ? stack_depot_save_flags+0x41b/0x860
[  167.152863][ T9817]  ? __pfx_warn_alloc+0x10/0x10
[  167.152881][ T9817]  ? kasan_save_track+0x4f/0x80
[  167.152901][ T9817]  ? xskq_create+0x56/0x170
[  167.152912][ T9817]  ? xsk_init_queue+0xb0/0x110
[  167.152922][ T9817]  ? xsk_setsockopt+0x57b/0x8d0
[  167.152932][ T9817]  ? do_sock_setsockopt+0x17c/0x1b0
[  167.152946][ T9817]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  167.152959][ T9817]  ? do_syscall_64+0xfa/0x3b0
[  167.152970][ T9817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.152999][ T9817]  __vmalloc_node_range_noprof+0x125/0x12f0
[  167.153064][ T9817]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  167.153090][ T9817]  ? __kasan_kmalloc+0x93/0xb0
[  167.153117][ T9817]  vmalloc_user_noprof+0xad/0xf0
[  167.153131][ T9817]  ? xskq_create+0xbf/0x170
[  167.153147][ T9817]  xskq_create+0xbf/0x170
[  167.153171][ T9817]  xsk_init_queue+0xb0/0x110
[  167.153192][ T9817]  xsk_setsockopt+0x57b/0x8d0
[  167.153213][ T9817]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.153228][ T9817]  ? __pfx_aa_sk_perm+0x10/0x10
[  167.153250][ T9817]  ? __fget_files+0x2a/0x420
[  167.153260][ T9817]  ? aa_sock_opt_perm+0xff/0x1b0
[  167.153283][ T9817]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  167.153297][ T9817]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.153314][ T9817]  do_sock_setsockopt+0x17c/0x1b0
[  167.153341][ T9817]  __x64_sys_setsockopt+0x13f/0x1b0
[  167.153369][ T9817]  do_syscall_64+0xfa/0x3b0
[  167.153382][ T9817]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.153398][ T9817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.153410][ T9817]  ? exc_page_fault+0x9f/0xf0
[  167.153454][ T9817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.153466][ T9817] RIP: 0033:0x7fd47798ec29
[  167.153481][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.153491][ T9817] RSP: 002b:00007fd4787d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  167.153505][ T9817] RAX: ffffffffffffffda RBX: 00007fd477bd6090 RCX: 00007fd47798ec29
[  167.153514][ T9817] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e
[  167.153521][ T9817] RBP: 00007fd477a11e41 R08: 0000000000000004 R09: 0000000000000000
[  167.153528][ T9817] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  167.153534][ T9817] R13: 00007fd477bd6128 R14: 00007fd477bd6090 R15: 00007ffd426af9a8
[  167.153582][ T9817]  </TASK>
[  167.224749][ T9816] netlink: 'syz.2.1615': attribute type 3 has an invalid length.
[  167.439247][ T9817] Mem-Info:
[  167.439278][ T9817] active_anon:14009 inactive_anon:7 isolated_anon:0
[  167.439278][ T9817]  active_file:16031 inactive_file:38288 isolated_file:0
[  167.439278][ T9817]  unevictable:1768 dirty:225 writeback:0
[  167.439278][ T9817]  slab_reclaimable:10044 slab_unreclaimable:58599
[  167.439278][ T9817]  mapped:18173 shmem:2412 pagetables:1093
[  167.439278][ T9817]  sec_pagetables:0 bounce:0
[  167.439278][ T9817]  kernel_misc_reclaimable:0
[  167.439278][ T9817]  free:263631 free_pcp:26675 free_cma:0
[  167.439299][ T9817] Node 0 active_anon:14484kB inactive_anon:28kB active_file:45960kB inactive_file:147940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17656kB dirty:732kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  167.439318][ T9817] Node 1 active_anon:41552kB inactive_anon:0kB active_file:18164kB inactive_file:5212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:55036kB dirty:168kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3312kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  167.439336][ T9817] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  167.439359][ T9817] lowmem_reserve[]: 0 811 811 811 811
[  167.439381][ T9817] Node 0 DMA32 free:237012kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14484kB inactive_anon:28kB active_file:45960kB inactive_file:147940kB unevictable:3536kB writepending:732kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:54632kB local_pcp:15292kB free_cma:0kB
[  167.439405][ T9817] lowmem_reserve[]: 0 0 0 0 0
[  167.439426][ T9817] Node 1 DMA32 free:440236kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18248kB local_pcp:10312kB free_cma:0kB
[  167.439447][ T9817] lowmem_reserve[]: 0 0 854 854 854
[  167.439467][ T9817] Node 1 Normal free:361916kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41552kB inactive_anon:0kB active_file:18164kB inactive_file:5212kB unevictable:3536kB writepending:168kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33820kB local_pcp:12892kB free_cma:0kB
[  167.439489][ T9817] lowmem_reserve[]: 0 0 0 0 0
[  167.439510][ T9817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  167.439589][ T9817] Node 0 DMA32: 811*4kB (UM) 1263*8kB (UME) 1041*16kB (UM) 634*32kB (UME) 466*64kB (UME) 232*128kB (UME) 49*256kB (UME) 12*512kB (UM) 18*1024kB (UME) 4*2048kB (UME) 20*4096kB (UM) = 237044kB
[  167.439677][ T9817] Node 1 DMA32: 5*4kB (UM) 5*8kB (UM) 3*16kB (U) 2*32kB (U) 4*64kB (U) 2*128kB (U) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 104*4096kB (UM) = 440236kB
[  167.439763][ T9817] Node 1 Normal: 1113*4kB (UME) 275*8kB (UME) 156*16kB (UME) 53*32kB (UME) 101*64kB (UME) 74*128kB (UME) 15*256kB (UME) 23*512kB (UM) 36*1024kB (UM) 18*2048kB (UME) 60*4096kB (UM) = 361884kB
[  167.439880][ T9817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  167.439887][ T9817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  167.439893][ T9817] 56736 total pagecache pages
[  167.439897][ T9817] 5 pages in swap cache
[  167.439900][ T9817] Free swap  = 124976kB
[  167.439904][ T9817] Total swap = 124996kB
[  167.439908][ T9817] 786301 pages RAM
[  167.439912][ T9817] 0 pages HighMem/MovableOnly
[  167.439915][ T9817] 241356 pages reserved
[  167.439918][ T9817] 0 pages cma reserved
[  168.073507][   T54] Bluetooth: hci0: command tx timeout
[  169.515613][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1615'.
[  169.650688][ T9826] rdma_rxe: rxe_newlink: failed to add lo
[  169.763158][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1618'.
[  169.766290][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'.
[  170.331474][ T9839] netlink: 'syz.2.1622': attribute type 11 has an invalid length.
[  171.145327][ T9870] netlink: 'syz.2.1637': attribute type 25 has an invalid length.
[  171.148035][ T9870] netlink: 'syz.2.1637': attribute type 28 has an invalid length.
[  171.351743][ T9887] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1640'.
[  172.200752][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1646'.
[  172.730370][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.734831][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.738695][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.744863][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.748603][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.810893][ T9907] lo speed is unknown, defaulting to 1000
[  172.816047][ T9907] wg0 speed is unknown, defaulting to 1000
[  173.020306][ T9907] chnl_net:caif_netlink_parms(): no params data found
[  173.108344][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.158520][ T5719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.170545][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.183658][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.188107][ T9907] bridge_slave_0: entered allmulticast mode
[  173.191960][ T9907] bridge_slave_0: entered promiscuous mode
[  173.199229][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.202366][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.205628][ T9907] bridge_slave_1: entered allmulticast mode
[  173.209497][ T9907] bridge_slave_1: entered promiscuous mode
[  173.267195][ T5719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.329607][ T5719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.339721][ T9931] syzkaller0: entered promiscuous mode
[  173.342040][ T9931] syzkaller0: entered allmulticast mode
[  173.350324][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.351536][ T9931] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  173.359047][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.402207][ T5719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.445664][ T9907] team0: Port device team_slave_0 added
[  173.449857][ T9907] team0: Port device team_slave_1 added
[  173.549884][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.552882][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.564239][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.569599][ T9938] veth0_vlan: entered allmulticast mode
[  173.621589][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.627592][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.639289][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.646037][ T5719] bridge_slave_1: left allmulticast mode
[  173.652998][ T5719] bridge_slave_1: left promiscuous mode
[  173.656058][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.661620][ T5719] bridge_slave_0: left allmulticast mode
[  173.664182][ T5719] bridge_slave_0: left promiscuous mode
[  173.667006][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.005706][ T5719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.011701][ T5719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.017118][ T5719] bond0 (unregistering): Released all slaves
[  174.034792][ T9938] : renamed from vlan0
[  174.081606][ T9907] hsr_slave_0: entered promiscuous mode
[  174.084878][ T9907] hsr_slave_1: entered promiscuous mode
[  174.088069][ T9907] debugfs: 'hsr0' already exists in 'hsr'
[  174.096775][ T9907] Cannot create hsr debugfs directory
[  174.099308][ T5719] : left promiscuous mode
[  174.179732][ T5719] _Z`Ԁ@S!!: left promiscuous mode
[  174.768381][ T9977] netlink: 'syz.3.1666': attribute type 4 has an invalid length.
[  174.828158][ T5850] Bluetooth: hci3: command tx timeout
[  174.875379][ T9907] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  174.896077][ T9907] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  174.921548][ T9907] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  174.982975][ T9907] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  175.579363][ T9907] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.627474][ T9907] 8021q: adding VLAN 0 to HW filter on device team0
[  175.637499][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.640629][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.657126][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.660213][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.788443][ T5719] hsr_slave_0: left promiscuous mode
[  175.796761][ T5719] hsr_slave_1: left promiscuous mode
[  175.806250][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.815256][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.021620][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.027087][ T5719] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.122847][ T5850] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  176.127270][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  176.131988][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[  176.132005][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.132013][ T5850] Workqueue: hci1 hci_rx_work
[  176.132030][ T5850] Call Trace:
[  176.132036][ T5850]  <TASK>
[  176.132042][ T5850]  dump_stack_lvl+0x189/0x250
[  176.132062][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.132076][ T5850]  ? __pfx__printk+0x10/0x10
[  176.132098][ T5850]  ? kernfs_path_from_node+0x250/0x290
[  176.132133][ T5850]  ? kernfs_path_from_node+0x2f/0x290
[  176.132171][ T5850]  sysfs_create_dir_ns+0x259/0x280
[  176.132189][ T5850]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  176.132204][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  176.132223][ T5850]  kobject_add_internal+0x59f/0xb40
[  176.132246][ T5850]  kobject_add+0x155/0x220
[  176.132265][ T5850]  ? __pfx_kobject_add+0x10/0x10
[  176.132281][ T5850]  ? _raw_spin_unlock+0x28/0x50
[  176.132296][ T5850]  ? get_device_parent+0x366/0x3a0
[  176.132314][ T5850]  device_add+0x408/0xb50
[  176.132333][ T5850]  hci_conn_add_sysfs+0xd5/0x1e0
[  176.132354][ T5850]  le_conn_complete_evt+0xc3a/0x1220
[  176.132375][ T5850]  ? bt_warn+0x10b/0x160
[  176.132389][ T5850]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  176.132402][ T5850]  ? __pfx_bt_warn+0x10/0x10
[  176.132420][ T5850]  ? skb_pull_data+0xfb/0x200
[  176.132435][ T5850]  hci_le_conn_complete_evt+0x187/0x450
[  176.132454][ T5850]  hci_event_packet+0x78f/0x1200
[  176.132475][ T5850]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  176.132492][ T5850]  ? __pfx_hci_event_packet+0x10/0x10
[  176.132510][ T5850]  ? kcov_remote_start+0x4d3/0x7f0
[  176.132526][ T5850]  ? lockdep_hardirqs_on+0x90/0x150
[  176.132541][ T5850]  ? hci_send_to_monitor+0xe2/0x570
[  176.132558][ T5850]  hci_rx_work+0x46a/0xe80
[  176.132576][ T5850]  ? process_scheduled_works+0x9ef/0x17b0
[  176.132589][ T5850]  process_scheduled_works+0xae1/0x17b0
[  176.132622][ T5850]  ? __pfx_process_scheduled_works+0x10/0x10
[  176.132646][ T5850]  worker_thread+0x8a0/0xda0
[  176.132679][ T5850]  kthread+0x711/0x8a0
[  176.132696][ T5850]  ? __pfx_worker_thread+0x10/0x10
[  176.132707][ T5850]  ? __pfx_kthread+0x10/0x10
[  176.132748][ T5850]  ? _raw_spin_unlock_irq+0x23/0x50
[  176.132762][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.132775][ T5850]  ? __pfx_kthread+0x10/0x10
[  176.132791][ T5850]  ret_from_fork+0x439/0x7d0
[  176.132807][ T5850]  ? __pfx_ret_from_fork+0x10/0x10
[  176.132825][ T5850]  ? __switch_to_asm+0x39/0x70
[  176.132845][ T5850]  ? __switch_to_asm+0x33/0x70
[  176.132859][ T5850]  ? __pfx_kthread+0x10/0x10
[  176.132874][ T5850]  ret_from_fork_asm+0x1a/0x30
[  176.132902][ T5850]  </TASK>
[  176.145902][ T5850] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  176.237993][ T5850] Bluetooth: hci1: failed to register connection device
[  176.330808][T10017] netlink: 'syz.3.1674': attribute type 21 has an invalid length.
[  176.395570][ T5719] team0 (unregistering): Port device team_slave_1 removed
[  176.418424][ T5719] team0 (unregistering): Port device team_slave_0 removed
[  176.650565][T10017] netlink: 'syz.3.1674': attribute type 6 has an invalid length.
[  176.660222][T10017] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1674'.
[  176.734796][ T9907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.904164][ T5850] Bluetooth: hci3: command tx timeout
[  176.984214][ T9907] veth0_vlan: entered promiscuous mode
[  176.989133][ T9907] veth1_vlan: entered promiscuous mode
[  177.026003][ T9907] veth0_macvtap: entered promiscuous mode
[  177.039027][ T9907] veth1_macvtap: entered promiscuous mode
[  177.074544][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.082993][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.104595][ T5864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.107488][ T5864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.120939][ T5864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.153134][ T5864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.216288][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.218890][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.238128][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.240727][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.264574][ T5850] Bluetooth: hci1: command tx timeout
[  178.708687][T10082] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1692'.
[  178.862078][T10084] netlink: 'syz.3.1694': attribute type 3 has an invalid length.
[  178.871498][T10084] netlink: 'syz.3.1694': attribute type 1 has an invalid length.
[  178.878221][T10084] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1694'.
[  179.006313][ T5850] Bluetooth: hci3: command tx timeout
[  179.462716][ T5850] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4
[  179.715989][T10118] netlink: 'syz.2.1708': attribute type 5 has an invalid length.
[  179.722292][T10118] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1708'.
[  179.967387][T10134] netlink: 'syz.3.1716': attribute type 10 has an invalid length.
[  180.045945][T10134] team0: Port device geneve1 added
[  180.149972][T10141] netlink: 'syz.4.1719': attribute type 27 has an invalid length.
[  180.153265][T10141] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1719'.
[  180.770388][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  180.843346][T10157] netlink: 'syz.2.1726': attribute type 1 has an invalid length.
[  181.064844][   T54] Bluetooth: hci3: command tx timeout
[  181.098473][T10165] netlink: 'syz.4.1730': attribute type 2 has an invalid length.
[  181.109097][T10165] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1730'.
[  181.476077][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  182.516592][T10200] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1737'.
[  182.804849][T10220] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1751'.
[  183.100715][T10230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1754'.
[  183.227255][T10237] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  183.817235][T10266] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  184.672947][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1771'.
[  184.678734][T10268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1771'.
[  184.712960][T10271] netlink: 'syz.2.1772': attribute type 8 has an invalid length.
[  185.299337][T10294] netlink: 'syz.3.1782': attribute type 2 has an invalid length.
[  185.392511][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'.
[  185.559559][T10308] sctp: [Deprecated]: syz.2.1787 (pid 10308) Use of int in max_burst socket option deprecated.
[  185.559559][T10308] Use struct sctp_assoc_value instead
[  185.588024][T10307] netlink: 'syz.4.1788': attribute type 3 has an invalid length.
[  185.602461][T10307] netlink: 'syz.4.1788': attribute type 1 has an invalid length.
[  185.607687][T10308] netlink: 'syz.2.1787': attribute type 3 has an invalid length.
[  185.615523][T10307] netlink: 'syz.4.1788': attribute type 2 has an invalid length.
[  185.618838][T10307] netlink: 'syz.4.1788': attribute type 8 has an invalid length.
[  185.622068][T10307] netlink: 'syz.4.1788': attribute type 10 has an invalid length.
[  185.630891][T10307] netlink: 'syz.4.1788': attribute type 11 has an invalid length.
[  185.635845][T10307] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.1788'.
[  185.811943][T10317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1793'.
[  185.815937][T10317] hsr0: entered promiscuous mode
[  185.818208][T10317] hsr0: entered allmulticast mode
[  185.820815][T10317] hsr_slave_0: entered allmulticast mode
[  185.832334][T10317] hsr_slave_1: entered allmulticast mode
[  185.910737][T10326] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.915562][T10326] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.924149][T10326] bridge0: entered allmulticast mode
[  185.958376][T10326] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.961758][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.966422][T10326] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.969385][T10326] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.977368][T10326] bridge0: entered promiscuous mode
[  185.990197][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'.
[  185.995257][T10330] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  185.999345][T10330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.592201][T10354] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1809'.
[  186.914698][T10379] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  187.022984][T10377] netlink: 'syz.2.1820': attribute type 11 has an invalid length.
[  187.799590][T10383] mac80211_hwsim hwsim4 .3c: renamed from wlan1 (while UP)
[  188.027048][T10417] siw: device registration error -23
[  188.229364][T10430] __nla_validate_parse: 4 callbacks suppressed
[  188.229377][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1838'.
[  188.360931][T10432] wg2: entered promiscuous mode
[  188.362816][T10432] wg2: entered allmulticast mode
[  189.090936][T10448] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1843'.
[  190.096540][T10497] sit0: entered allmulticast mode
[  190.297868][T10503] netlink: 'syz.3.1864': attribute type 1 has an invalid length.
[  190.301356][T10503] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1864'.
[  190.368260][T10505] netlink: 'syz.3.1865': attribute type 29 has an invalid length.
[  190.372950][T10505] netlink: 'syz.3.1865': attribute type 29 has an invalid length.
[  190.378401][T10505] netlink: 'syz.3.1865': attribute type 29 has an invalid length.
[  190.658709][T10516] netlink: 'syz.4.1869': attribute type 10 has an invalid length.
[  190.662799][T10516] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1869'.
[  190.742612][T10514] netlink: 208252 bytes leftover after parsing attributes in process `syz.2.1870'.
[  190.746291][T10514] netlink: 'syz.2.1870': attribute type 1 has an invalid length.
[  190.749764][T10514] netlink: 'syz.2.1870': attribute type 2 has an invalid length.
[  190.753238][T10514] netlink: 'syz.2.1870': attribute type 3 has an invalid length.
[  190.765818][T10514] netlink: 'syz.2.1870': attribute type 4 has an invalid length.
[  190.970671][T10530] netlink: 'syz.4.1876': attribute type 1 has an invalid length.
[  191.048627][T10535] openvswitch: netlink: IP tunnel dst address not specified
[  191.362109][T10543] hsr0: left promiscuous mode
[  191.365623][T10543] hsr0: left allmulticast mode
[  191.367562][T10543] hsr_slave_0: left allmulticast mode
[  191.370109][T10543] hsr_slave_1: left allmulticast mode
[  191.376373][T10543] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  191.381094][T10543] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  191.389958][T10543] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  192.850757][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'.
[  192.864678][T10576] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  192.867620][T10576] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  192.976817][T10588] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1901'.
[  192.994872][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.060842][T10594] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1904'.
[  193.067425][T10594] openvswitch: netlink: Message has 4 unknown bytes.
[  193.298248][T10605] veth0_macvtap: left promiscuous mode
[  193.352893][T10610] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1910'.
[  193.471313][T10615] wg0 speed is unknown, defaulting to 1000
[  193.507108][T10618] Y4`Ҙ: renamed from lo
[  193.694707][T10636] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1923'.
[  193.699214][T10638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1924'.
[  193.838258][T10658] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1933'.
[  193.876298][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.879006][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  195.431939][T10706] validate_nla: 8 callbacks suppressed
[  195.431953][T10706] netlink: 'syz.2.1954': attribute type 10 has an invalid length.
[  195.438480][T10706] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1954'.
[  195.495985][T10710] netlink: 'syz.3.1956': attribute type 6 has an invalid length.
[  195.499973][T10710] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1956'.
[  195.755367][T10722] syzkaller0: entered promiscuous mode
[  195.757559][T10722] syzkaller0: entered allmulticast mode
[  195.777308][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'.
[  195.780347][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'.
[  197.753558][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'.
[  197.761070][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'.
[  197.864210][T10809] netlink: 'syz.4.1996': attribute type 8 has an invalid length.
[  197.866879][T10809] netlink: 'syz.4.1996': attribute type 6 has an invalid length.
[  197.927185][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.655344][T10843] __nla_validate_parse: 2 callbacks suppressed
[  198.655354][T10843] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2010'.
[  198.702697][T10844] netlink: 'syz.4.2009': attribute type 9 has an invalid length.
[  198.706300][T10844] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.2009'.
[  199.080044][T10862] netlink: 'syz.3.2017': attribute type 11 has an invalid length.
[  199.083748][T10862] netlink: 'syz.3.2017': attribute type 11 has an invalid length.
[  199.114426][T10864] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2018'.
[  199.121568][T10866] netlink: 'syz.3.2019': attribute type 4 has an invalid length.
[  199.527649][T10890] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2030'.
[  199.534726][T10890] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2030'.
[  200.409716][T10918] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2042'.
[  200.701106][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'.
[  200.705266][T10930] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  200.707830][T10930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.000208][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'.
[  201.337916][T10967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2064'.
[  201.343285][T10967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2064'.
[  201.472801][T10977] openvswitch: netlink: Key type 29 is not supported
[  201.532091][T10979] netlink: 'syz.3.2070': attribute type 2 has an invalid length.
[  201.699635][T10992] openvswitch: netlink: Flow actions attr not present in new flow.
[  201.705986][T10992] syzkaller0: entered promiscuous mode
[  202.356573][T11019] netlink: 'syz.2.2086': attribute type 1 has an invalid length.
[  203.689457][T11036] __nla_validate_parse: 10 callbacks suppressed
[  203.689471][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2095'.
[  203.711763][T11036] : entered promiscuous mode
[  204.131819][T11050] sctp: [Deprecated]: syz.3.2100 (pid 11050) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.131819][T11050] Use struct sctp_sack_info instead
[  205.477238][T11112] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2126'.
[  205.524704][ T5850] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3
[  205.552267][   T54] Bluetooth: hci3: adv larger than maximum supported
[  205.558302][   T54] Bluetooth: hci3: Unknown advertising packet type: 0x18
[  205.563057][   T54] Bluetooth: hci3: Malformed LE Event: 0x0d
[  205.651517][T11125] rdma_rxe: rxe_newlink: failed to add lo
[  205.854205][T11142] netlink: 'syz.3.2138': attribute type 2 has an invalid length.
[  205.857125][T11142] netlink: 'syz.3.2138': attribute type 1 has an invalid length.
[  205.859836][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2138'.
[  206.320765][T11164] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2149'.
[  206.806967][T11189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2160'.
[  206.811670][T11189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2160'.
[  207.083186][T11193] netlink: 'syz.3.2162': attribute type 1 has an invalid length.
[  207.543664][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  209.753405][T11228] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  209.855120][ T5850] Bluetooth: hci0: Dropping invalid advertising data
[  209.858203][ T5850] Bluetooth: hci0: Malformed LE Event: 0x02
[  210.478359][T11246] netlink: 'syz.4.2188': attribute type 10 has an invalid length.
[  210.489109][T11246] team0: Port device netdevsim0 added
[  210.530880][T11249] netlink: 'syz.2.2186': attribute type 10 has an invalid length.
[  210.540962][T11249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2186'.
[  210.545679][T11253] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2191'.
[  210.714687][T11259] sctp: [Deprecated]: syz.4.2192 (pid 11259) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.714687][T11259] Use struct sctp_sack_info instead
[  210.795730][T11263] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  211.170028][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2205'.
[  211.622583][T11319] netlink: 'syz.4.2222': attribute type 4 has an invalid length.
[  211.763926][T11319] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2222'.
[  211.947702][T11334] netlink: 'syz.2.2229': attribute type 10 has an invalid length.
[  211.950500][T11334] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2229'.
[  211.977251][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'.
[  212.288813][T11354] netlink: 'syz.2.2238': attribute type 6 has an invalid length.
[  212.291961][T11354] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2238'.
[  212.538250][T11364] netlink: 'syz.2.2242': attribute type 29 has an invalid length.
[  212.547136][T11364] netlink: 'syz.2.2242': attribute type 29 has an invalid length.
[  212.568415][T11366] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  212.668728][T11368] netlink: 'syz.2.2244': attribute type 3 has an invalid length.
[  212.671265][T11368] netlink: 7874 bytes leftover after parsing attributes in process `syz.2.2244'.
[  212.706223][T11368] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2244'.
[  212.738524][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2244'.
[  212.807978][T11368] : entered promiscuous mode
[  213.218375][T11389] netlink: 'syz.4.2252': attribute type 1 has an invalid length.
[  213.385935][T11408] netlink: 'syz.3.2261': attribute type 10 has an invalid length.
[  213.508748][T11408] team0 (unregistering): Port device team_slave_0 removed
[  213.518476][T11408] team0 (unregistering): Port device team_slave_1 removed
[  213.527275][T11408] team0 (unregistering): Port device geneve1 removed
[  213.629924][T11418] netlink: 'syz.4.2265': attribute type 10 has an invalid length.
[  217.296724][T11455] netlink: 'syz.2.2279': attribute type 40 has an invalid length.
[  217.309288][T11455] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.428066][T11466] netlink: 'syz.3.2285': attribute type 1 has an invalid length.
[  217.608058][T11474] __nla_validate_parse: 6 callbacks suppressed
[  217.608115][T11474] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2289'.
[  217.651157][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'.
[  217.662037][T11475] : renamed from hsr0 (while UP)
[  218.252911][T11491] syzkaller0: entered promiscuous mode
[  218.256264][T11491] syzkaller0: entered allmulticast mode
[  218.371006][T11499] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  218.537977][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'.
[  221.218603][T11571] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.2334'.
[  221.926173][T11594] netlink: 'syz.4.2344': attribute type 2 has an invalid length.
[  221.942383][T11594] netlink: 'syz.4.2344': attribute type 1 has an invalid length.
[  221.946194][T11594] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2344'.
[  221.949903][T11594] block nbd5: not configured, cannot reconfigure
[  222.207647][T11598] netlink: 'syz.4.2346': attribute type 16 has an invalid length.
[  222.210357][T11598] netlink: 'syz.4.2346': attribute type 17 has an invalid length.
[  222.221371][T11598] sit0: left allmulticast mode
[  222.243281][T11598] bridge0: left promiscuous mode
[  222.246025][T11598] bridge0: left allmulticast mode
[  222.251302][T11598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.574445][ T5850] Bluetooth: hci3: unexpected event 0x32 length: 82 > 9
[  222.872083][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'.
[  222.878399][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2358'.
[  222.881412][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2358'.
[  223.449659][T11643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2365'.
[  223.720570][T11659] netlink: 'syz.4.2371': attribute type 1 has an invalid length.
[  223.731466][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'.
[  223.822329][T11663] netlink: 'syz.3.2374': attribute type 1 has an invalid length.
[  224.027437][T11669] bridge_slave_1: left allmulticast mode
[  224.030044][T11669] bridge_slave_1: left promiscuous mode
[  224.032772][T11669] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.040014][T11669] bridge_slave_0: left allmulticast mode
[  224.042594][T11669] bridge_slave_0: left promiscuous mode
[  224.047461][T11669] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.473372][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2383'.
[  224.608082][ T5864] bridge_slave_1: left allmulticast mode
[  224.610672][ T5864] bridge_slave_1: left promiscuous mode
[  224.613298][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.627644][ T5864] bridge_slave_0: left promiscuous mode
[  224.630192][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.703829][T11692] netlink: 'syz.4.2388': attribute type 10 has an invalid length.
[  224.706813][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2388'.
[  224.907612][T11698] xt_time: invalid argument - start or stop time greater than 23:59:59
[  225.075572][ T5864] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.080254][ T5864] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.084731][ T5864] .` (unregistering): Released all slaves
[  225.096367][T11692] ipvlan1: entered promiscuous mode
[  225.098467][T11692] ipvlan1: entered allmulticast mode
[  225.136547][T11692] veth0_vlan: entered allmulticast mode
[  225.188666][T11692] bridge0: port 3(ipvlan1) entered blocking state
[  225.195511][T11692] bridge0: port 3(ipvlan1) entered disabled state
[  225.274531][T11692] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  225.285020][ T5864] : left promiscuous mode
[  225.327698][T11708] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2396'.
[  228.946698][ T5864] hsr_slave_0: left promiscuous mode
[  228.949070][ T5864] hsr_slave_1: left promiscuous mode
[  228.957615][ T5864] veth1_macvtap: left promiscuous mode
[  228.959812][ T5864] veth0_macvtap: left promiscuous mode
[  228.961716][ T5864] veth1_vlan: left promiscuous mode
[  228.966114][ T5864] veth0_vlan: left promiscuous mode
[  229.347233][T11743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2410'.
[  229.461968][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  229.491705][ T5864] team0 (unregistering): Port device C removed
[  230.005143][T11751] netlink: 'syz.3.2414': attribute type 16 has an invalid length.
[  230.008056][T11751] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2414'.
[  230.020412][T11753] netlink: 'syz.4.2415': attribute type 20 has an invalid length.
[  230.276907][   T33] audit: type=1107 audit(1758587734.171:4): pid=11754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[  230.308985][T11761] Unknown options in mask b7f2
[  230.768989][T11773] netlink: zone id is out of range
[  230.771333][T11773] netlink: zone id is out of range
[  230.796455][T11773] netlink: del zone limit has 4 unknown bytes
[  231.749929][T11793] netlink: 'syz.4.2434': attribute type 21 has an invalid length.
[  231.753078][T11793] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2434'.
[  231.836467][T11797] netlink: 'syz.3.2433': attribute type 10 has an invalid length.
[  231.931960][T11797] geneve0: entered promiscuous mode
[  231.969514][T11797] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  233.335678][T11816] netlink: 'syz.3.2443': attribute type 2 has an invalid length.
[  233.338623][T11816] netlink: 'syz.3.2443': attribute type 8 has an invalid length.
[  233.341537][T11816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2443'.
[  233.640324][T11823] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  234.028622][ T5850] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  234.970797][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2460'.
[  235.020464][T11855] netlink: 'syz.3.2461': attribute type 39 has an invalid length.
[  235.264675][T11861] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2464'.
[  235.856402][T11878] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  235.936666][T11882] netlink: 'syz.3.2473': attribute type 21 has an invalid length.
[  235.947182][T11882] netlink: 'syz.3.2473': attribute type 4 has an invalid length.
[  236.027382][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2476'.
[  236.030206][T11888] netlink: 'syz.3.2476': attribute type 2 has an invalid length.
[  236.057516][T11889] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2474'.
[  236.077251][T11891] netlink: 'syz.3.2477': attribute type 12 has an invalid length.
[  236.086432][T11891] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2477'.
[  236.386749][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.390059][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.392740][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.397280][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.400705][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.450215][T11899] Y4`Ҙ speed is unknown, defaulting to 1000
[  236.457063][T11899] wg0 speed is unknown, defaulting to 1000
[  236.512910][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.572187][ T5850] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  236.591931][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.642146][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.677159][T11899] chnl_net:caif_netlink_parms(): no params data found
[  236.697952][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  236.790205][T11899] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.793212][T11899] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.797669][T11899] bridge_slave_0: entered allmulticast mode
[  236.802458][T11899] bridge_slave_0: entered promiscuous mode
[  236.817355][T11899] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.819963][T11899] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.822789][T11899] bridge_slave_1: entered allmulticast mode
[  236.826868][T11899] bridge_slave_1: entered promiscuous mode
[  236.860442][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.889964][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.930340][   T12] bridge_slave_1: left allmulticast mode
[  236.932800][   T12] bridge_slave_1: left promiscuous mode
[  236.939349][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.948916][   T12] bridge_slave_0: left allmulticast mode
[  236.951274][   T12] bridge_slave_0: left promiscuous mode
[  236.955496][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.960802][   T12] gretap0: left allmulticast mode
[  236.962445][   T12] gretap0: left promiscuous mode
[  236.967626][   T12] GPL: port 1(gretap0) entered disabled state
[  236.972498][   T12] veth0_to_team: left allmulticast mode
[  236.975615][   T12] veth0_to_team: left promiscuous mode
[  236.978051][   T12] : port 2(veth0_to_team) entered disabled state
[  236.983174][   T12] veth0_to_bridge: left allmulticast mode
[  236.985867][   T12] veth0_to_bridge: left promiscuous mode
[  236.988393][   T12] : port 1(veth0_to_bridge) entered disabled state
[  237.248422][T11942] netlink: 'syz.4.2498': attribute type 6 has an invalid length.
[  237.530724][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.536557][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.540513][   T12] bond0 (unregistering): Released all slaves
[  237.565398][ T5896] wg0 speed is unknown, defaulting to 1000
[  237.566762][T11899] team0: Port device team_slave_0 added
[  237.567282][ T5896] syz0: Port: 1 Link DOWN
[  237.573048][T11899] team0: Port device team_slave_1 added
[  237.610428][   T12] : left promiscuous mode
[  237.627055][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  237.629662][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.642071][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.656786][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.659457][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.672536][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.735202][T11899] hsr_slave_0: entered promiscuous mode
[  237.738128][T11899] hsr_slave_1: entered promiscuous mode
[  237.878852][T11899] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  237.884306][T11899] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  237.889606][T11899] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  237.894410][T11899] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  238.059171][T11899] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.139843][T11899] 8021q: adding VLAN 0 to HW filter on device team0
[  238.159233][   T12] hsr_slave_0: left promiscuous mode
[  238.174008][   T12] hsr_slave_1: left promiscuous mode
[  238.190446][T11970] netlink: 'syz.4.2509': attribute type 1 has an invalid length.
[  238.196117][T11970] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2509'.
[  238.201062][   T12] veth1_macvtap: left promiscuous mode
[  238.203146][   T12] veth0_macvtap: left promiscuous mode
[  238.207197][T11974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2511'.
[  238.208708][T11970] netlink: 'syz.4.2509': attribute type 1 has an invalid length.
[  238.214616][T11970] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2509'.
[  238.424391][ T5850] Bluetooth: hci1: command tx timeout
[  238.773648][T11986] syzkaller0: entered promiscuous mode
[  238.776123][T11986] syzkaller0: entered allmulticast mode
[  238.801272][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.804298][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.809151][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.812047][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.986023][T11899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  240.081381][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.190643][T11899] veth0_vlan: entered promiscuous mode
[  240.198652][T11899] veth1_vlan: entered promiscuous mode
[  240.214589][T11899] veth0_macvtap: entered promiscuous mode
[  240.219408][T11899] veth1_macvtap: entered promiscuous mode
[  240.238158][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.267279][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.278198][ T5719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.281170][ T5719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.291113][ T5719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.302004][ T5719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.363361][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.367452][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.383273][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.387185][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.400814][T12023] netlink: 'syz.4.2525': attribute type 10 has an invalid length.
[  240.503993][ T5850] Bluetooth: hci1: command tx timeout
[  240.988145][T12046] syzkaller0: entered promiscuous mode
[  240.990574][T12046] syzkaller0: entered allmulticast mode
[  242.107343][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2540'.
[  242.265535][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2547'.
[  242.547407][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2554'.
[  242.584629][ T5850] Bluetooth: hci1: command tx timeout
[  242.988502][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'.
[  243.002734][T12144] delete_channel: no stack
[  243.541536][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2600'.
[  244.556743][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2604'.
[  244.560819][T12203] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2604'.
[  244.704646][ T5850] Bluetooth: hci1: command tx timeout
[  245.077705][T12212] @: renamed from bond_slave_0 (while UP)
[  245.176607][T12210] netlink: 'syz.4.2612': attribute type 21 has an invalid length.
[  245.179328][T12210] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2612'.
[  245.182488][T12210] netlink: 'syz.4.2612': attribute type 4 has an invalid length.
[  245.234270][T12218] netlink: 'syz.5.2615': attribute type 29 has an invalid length.
[  245.238288][T12218] netlink: 'syz.5.2615': attribute type 29 has an invalid length.
[  245.242150][T12218] netlink: 'syz.5.2615': attribute type 29 has an invalid length.
[  245.248717][T12218] netlink: 'syz.5.2615': attribute type 29 has an invalid length.
[  245.783101][T12235] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  245.872314][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'.
[  246.306569][T12249] netlink: 'syz.5.2627': attribute type 10 has an invalid length.
[  246.405984][T12249] team0 (unregistering): Port device team_slave_0 removed
[  246.417737][T12249] team0 (unregistering): Port device team_slave_1 removed
[  246.452967][T12257] netlink: 'syz.4.2632': attribute type 5 has an invalid length.
[  246.628291][T12259] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2633'.
[  246.650532][T12259] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.685800][T12259] bridge_slave_0 (unregistering): left allmulticast mode
[  246.688462][T12259] bridge_slave_0 (unregistering): left promiscuous mode
[  246.691525][T12259] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.861935][T12283] netlink: 'syz.4.2643': attribute type 21 has an invalid length.
[  246.903879][T12287] netlink: zone id is out of range
[  246.906037][T12287] netlink: set zone limit has 8 unknown bytes
[  246.945494][T12292] sctp: [Deprecated]: syz.4.2648 (pid 12292) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.945494][T12292] Use struct sctp_sack_info instead
[  247.364067][T12324] __nla_validate_parse: 3 callbacks suppressed
[  247.364085][T12324] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2663'.
[  247.449125][T12327] delete_channel: no stack
[  248.040061][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2682'.
[  248.132412][ T5850] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  248.137480][ T5850] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff
[  248.236932][T12388] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2692'.
[  248.485322][   T54] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13
[  248.691476][T12418] netlink: 'syz.4.2707': attribute type 21 has an invalid length.
[  248.721053][T12418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2707'.
[  248.725013][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2707'.
[  249.408035][T12437] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  249.836079][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2722'.
[  249.929649][T12463] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  250.079030][T12464] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2724'.
[  250.484085][T12482] netlink: 'syz.4.2735': attribute type 29 has an invalid length.
[  250.487561][T12482] netlink: 'syz.4.2735': attribute type 29 has an invalid length.
[  250.510277][T12486] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2737'.
[  250.582579][T12492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2740'.
[  250.641662][T12494] netlink: 'syz.4.2740': attribute type 4 has an invalid length.
[  250.645059][T12494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2740'.
[  251.394129][T12527] netlink: 'syz.3.2754': attribute type 10 has an invalid length.
[  251.397896][T12527] veth1_vlan: entered allmulticast mode
[  251.463710][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  252.332872][T12581] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  253.038262][T12601] netlink: 'syz.4.2788': attribute type 2 has an invalid length.
[  253.040794][T12601] netlink: 'syz.4.2788': attribute type 1 has an invalid length.
[  253.043314][T12601] __nla_validate_parse: 1 callbacks suppressed
[  253.043321][T12601] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2788'.
[  253.678480][T12633] netlink: 'syz.3.2803': attribute type 10 has an invalid length.
[  253.681795][T12633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2803'.
[  253.686082][T12633] dummy0: entered promiscuous mode
[  253.758795][T12641] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2807'.
[  253.847198][T12649] netlink: 'syz.4.2811': attribute type 15 has an invalid length.
[  253.850507][T12649] netlink: 'syz.4.2811': attribute type 7 has an invalid length.
[  253.853760][T12649] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2811'.
[  254.072586][T12661] netlink: 147608 bytes leftover after parsing attributes in process `syz.4.2816'.
[  254.077993][T12661] netlink: 'syz.4.2816': attribute type 2 has an invalid length.
[  254.087115][T12661] netlink: 62135 bytes leftover after parsing attributes in process `syz.4.2816'.
[  254.206436][T12671] netlink: 'syz.4.2821': attribute type 2 has an invalid length.
[  254.215334][T12671] k*: entered promiscuous mode
[  254.450008][T12676] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.456566][T12676] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  254.545718][ T4635] wlan1: Trigger new scan to find an IBSS to join
[  254.632614][T12684] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  255.317486][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.319841][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.383872][T12696] netlink: 'syz.3.2830': attribute type 1 has an invalid length.
[  255.440322][T12705] sit0: entered allmulticast mode
[  255.451206][T12705] sit0: entered promiscuous mode
[  255.858940][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2841'.
[  256.514784][T12730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2846'.
[  256.551456][T12732] netlink: 'syz.3.2847': attribute type 9 has an invalid length.
[  256.554197][T12732] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2847'.
[  256.667668][T12740] netlink: 'syz.3.2851': attribute type 23 has an invalid length.
[  256.940326][T12751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2855'.
[  257.207208][T12763] netlink: 'syz.5.2861': attribute type 10 has an invalid length.
[  257.463691][   T27] wlan1: Trigger new scan to find an IBSS to join
[  258.257470][T12789] option changes via remount are deprecated (pid=12788 comm=syz.3.2874)
[  258.358953][   T27] wlan1: Creating new IBSS network, BSSID 22:2f:ab:a5:d0:ee
[  259.192743][T12842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.418849][   T54] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11
[  259.550028][T12866] __nla_validate_parse: 1 callbacks suppressed
[  259.550043][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2908'.
[  259.560811][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'.
[  259.610313][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2910'.
[  259.613311][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2910'.
[  259.637176][T12872] netlink: 'syz.3.2911': attribute type 23 has an invalid length.
[  259.926958][T12885] netlink: 'syz.3.2915': attribute type 10 has an invalid length.
[  259.930092][T12885] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2915'.
[  259.936044][T12885] batman_adv: batadv0: Adding interface: virt_wifi0
[  259.938440][T12885] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.948245][T12885] batman_adv: batadv0: Interface activated: virt_wifi0
[  260.107422][T12892] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2919'.
[  260.111300][T12892] netlink: zone id is out of range
[  260.113706][T12892] netlink: get zone limit has 8 unknown bytes
[  261.278987][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2922'.
[  261.526812][T12925] netlink: 'syz.3.2933': attribute type 3 has an invalid length.
[  261.529948][T12925] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2933'.
[  261.597899][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2937'.
[  261.639177][T12940] netlink: 'syz.5.2940': attribute type 21 has an invalid length.
[  261.642592][T12940] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2940'.
[  261.868022][T12952] netlink: 'syz.4.2946': attribute type 21 has an invalid length.
[  261.871292][T12952] netlink: 'syz.4.2946': attribute type 11 has an invalid length.
[  262.728337][T12982] wg2: entered promiscuous mode
[  262.740739][T12982] wg2: entered allmulticast mode
[  263.043897][T12997] netlink: 'syz.3.2965': attribute type 39 has an invalid length.
[  264.077282][T13036] netlink: 'syz.3.2983': attribute type 21 has an invalid length.
[  264.313266][T13048] netlink: 'syz.5.2988': attribute type 21 has an invalid length.
[  264.356030][T13051] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  264.709247][T13069] __nla_validate_parse: 5 callbacks suppressed
[  264.709261][T13069] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2993'.
[  264.719500][T13069] hsr_slave_0: left promiscuous mode
[  264.723187][T13069] hsr_slave_1: left promiscuous mode
[  265.310952][T13106] netlink: 'syz.3.3010': attribute type 2 has an invalid length.
[  265.329100][T13106] netlink: 'syz.3.3010': attribute type 1 has an invalid length.
[  265.332751][T13106] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3010'.
[  265.337711][T13106] nbd: illegal input index 65540
[  265.897634][T13143] netlink: 'syz.4.3028': attribute type 21 has an invalid length.
[  265.941995][T13146] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3031'.
[  267.246311][T13170] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3039'.
[  267.279344][T13176] netlink: 'syz.4.3042': attribute type 21 has an invalid length.
[  267.282035][T13176] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3042'.
[  267.287836][T13176] netlink: 'syz.4.3042': attribute type 4 has an invalid length.
[  267.291445][T13176] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3042'.
[  267.527746][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3052'.
[  267.530848][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3052'.
[  267.805986][T13210] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  267.988608][T13229] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3067'.
[  268.139308][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3071'.
[  268.162692][   T54] Bluetooth: hci3: unexpected event 0x3d length: 15 > 14
[  268.249114][T13242] netlink: 'syz.5.3073': attribute type 46 has an invalid length.
[  268.365190][T13254] netlink: 'syz.5.3078': attribute type 4 has an invalid length.
[  268.368612][T13254] netlink: 'syz.5.3078': attribute type 3 has an invalid length.
[  269.530119][T13301] netlink: 'syz.3.3101': attribute type 13 has an invalid length.
[  269.715663][T13325] __nla_validate_parse: 5 callbacks suppressed
[  269.715677][T13325] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.3112'.
[  269.832572][T13333] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3116'.
[  270.175140][T13354] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  271.341660][T13380] netlink: 'syz.4.3137': attribute type 21 has an invalid length.
[  271.817631][T13361] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.3130'.
[  271.860291][T13387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.051051][T13404] netlink: 'syz.5.3148': attribute type 21 has an invalid length.
[  272.118016][   T54] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  273.802363][T13442] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3163'.
[  273.909416][T13454] netlink: 'syz.5.3169': attribute type 9 has an invalid length.
[  273.912584][T13454] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.3169'.
[  274.417495][ T5719] tipc: Subscription rejected, illegal request
[  274.511773][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3188'.
[  274.784896][   T54] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7
[  274.788981][T13516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3197'.
[  275.021652][T13547] netlink: 'syz.3.3211': attribute type 1 has an invalid length.
[  275.137554][T13554] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3214'.
[  275.243607][T13560] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3217'.
[  276.039030][T13578] netlink: 'syz.4.3224': attribute type 4 has an invalid length.
[  276.270604][T13589] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3229'.
[  276.550635][   T54] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  276.581478][T13606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3235'.
[  276.591326][T13606] tc_dump_action: action bad kind
[  276.641067][T13610] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3236'.
[  276.836173][T13616] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3240'.
[  276.926134][T13620] netlink: 'syz.3.3242': attribute type 2 has an invalid length.
[  276.928893][T13620] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3242'.
[  277.041018][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'.
[  277.149474][T13651] netlink: 'syz.5.3257': attribute type 1 has an invalid length.
[  280.329038][T13665] netlink: 'syz.5.3263': attribute type 29 has an invalid length.
[  280.332519][T13665] netlink: 'syz.5.3263': attribute type 29 has an invalid length.
[  280.336384][T13665] netlink: 'syz.5.3263': attribute type 29 has an invalid length.
[  280.339502][T13665] netlink: 'syz.5.3263': attribute type 29 has an invalid length.
[  280.524161][T13674] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  280.527485][T13674] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  280.552539][T13677] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3268'.
[  280.562616][T13679] netlink: 'syz.5.3269': attribute type 16 has an invalid length.
[  280.566004][T13679] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3269'.
[  283.428859][T13712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3283'.
[  283.432656][T13712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3283'.
[  283.500947][T13718] netlink: 'syz.3.3286': attribute type 10 has an invalid length.
[  283.523088][T13716] : entered promiscuous mode
[  283.692065][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'.
[  283.697549][T13735] openvswitch: netlink: Unknown nsh attribute 0
[  283.700363][T13735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.790829][T13745] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3296'.
[  283.808059][T13745] bond_slave_0: entered promiscuous mode
[  283.810512][T13745] bond_slave_1: entered promiscuous mode
[  283.820363][T13745] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.3296'.
[  283.918742][T13749] netlink: 'syz.4.3300': attribute type 13 has an invalid length.
[  283.921591][T13749] netlink: 'syz.4.3300': attribute type 58 has an invalid length.
[  283.925973][T13749] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3300'.
[  284.122277][T13759] netlink: 'syz.4.3305': attribute type 13 has an invalid length.
[  284.287676][T13759] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.411377][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.424452][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.607205][ T5719] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.610502][ T5719] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.621207][ T5719] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  284.625859][ T5719] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.349798][T13817] netlink: 'syz.3.3330': attribute type 21 has an invalid length.
[  285.364098][T13817] netlink: 'syz.3.3330': attribute type 6 has an invalid length.
[  285.373402][T13817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3330'.
[  285.790178][T13837] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3342'.
[  285.800145][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3342'.
[  286.019808][T13852] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3349'.
[  286.814126][T13882] syzkaller0: entered promiscuous mode
[  286.816647][T13882] syzkaller0: entered allmulticast mode
[  286.939336][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3365'.
[  286.943135][T13895] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3365'.
[  288.168789][T13915] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3370'.
[  288.683319][T13936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3381'.
[  288.688061][T13936] openvswitch: netlink: Missing key (keys=40, expected=100)
[  289.975839][T13989] : entered promiscuous mode
[  290.277254][T14005] netlink: 'syz.5.3404': attribute type 39 has an invalid length.
[  290.661024][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3409'.
[  290.755245][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'.
[  290.780190][T14016] netlink: 'syz.4.3409': attribute type 10 has an invalid length.
[  290.789351][T14016] bond0: (slave 5@): Releasing backup interface
[  290.947231][T14023] openvswitch: netlink: Duplicate or invalid key (type 0).
[  290.950202][T14023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.603289][T14061] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3427'.
[  291.676015][T14065] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3429'.
[  292.469254][T14090] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3440'.
[  292.472747][T14090] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3440'.
[  292.540950][T14094] netlink: 'syz.3.3442': attribute type 21 has an invalid length.
[  292.545028][T14094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3442'.
[  292.576572][T14096] tap0: tun_chr_ioctl cmd 1074025680
[  292.942339][T14109] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3448'.
[  293.428072][T14122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3455'.
[  293.519858][T14126] ref_ctr_offset mismatch. inode: 0xf7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  294.008099][T14158] netlink: 'syz.5.3472': attribute type 29 has an invalid length.
[  294.072009][T14163] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3474'.
[  294.082057][T14163] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3474'.
[  294.410626][T14178] netlink: 'syz.5.3480': attribute type 16 has an invalid length.
[  294.413866][T14178] netlink: 'syz.5.3480': attribute type 3 has an invalid length.
[  294.417419][T14178] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3480'.
[  295.469354][T14204] netlink: 'syz.3.3493': attribute type 23 has an invalid length.
[  295.598621][T14213] netlink: 'syz.5.3496': attribute type 39 has an invalid length.
[  298.344663][ T5850] Bluetooth: hci3: command 0x0406 tx timeout
[  299.127323][T14223] C: renamed from team_slave_0
[  299.170517][T14223] netlink: 'syz.3.3503': attribute type 3 has an invalid length.
[  299.185249][T14223] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  299.325121][T14230] __nla_validate_parse: 2 callbacks suppressed
[  299.325135][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3506'.
[  299.838886][T14248] netlink: 'syz.5.3513': attribute type 3 has an invalid length.
[  299.842171][T14248] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3513'.
[  299.992254][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3517'.
[  300.333138][T14270] netlink: 'syz.5.3524': attribute type 2 has an invalid length.
[  300.678597][T14275] netlink: 'syz.5.3526': attribute type 6 has an invalid length.
[  300.681833][T14275] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3526'.
[  301.303089][T14291] netlink: 'syz.3.3533': attribute type 2 has an invalid length.
[  301.309044][T14291] netlink: 'syz.3.3533': attribute type 3 has an invalid length.
[  301.313201][T14291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3533'.
[  301.760216][T14294] netlink: zone id is out of range
[  301.775119][T14294] netlink: zone id is out of range
[  301.785765][T14294] netlink: zone id is out of range
[  301.882994][T14306] netlink: 'syz.3.3539': attribute type 3 has an invalid length.
[  301.886873][T14306] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3539'.
[  301.932847][T14294] netlink: set zone limit has 4 unknown bytes
[  301.962489][T14308] netlink: 'syz.3.3540': attribute type 10 has an invalid length.
[  301.965935][T14308] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3540'.
[  301.989687][T14308] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  302.011315][T14308] batman_adv: batadv0: Removing interface: virt_wifi0
[  302.088897][T14312] netlink: 209840 bytes leftover after parsing attributes in process `syz.5.3542'.
[  302.386318][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3549'.
[  302.395686][T14328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3550'.
[  302.401572][T14328] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.420828][T14328] bridge_slave_0 (unregistering): left allmulticast mode
[  302.423378][T14328] bridge_slave_0 (unregistering): left promiscuous mode
[  302.433591][T14328] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.617724][T14355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.746636][T14366] netlink: 'syz.3.3567': attribute type 13 has an invalid length.
[  304.280615][T14384] netlink: 'syz.5.3575': attribute type 39 has an invalid length.
[  304.834723][T14404] netlink: 'syz.3.3584': attribute type 4 has an invalid length.
[  304.897100][   T54] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8
[  306.043294][T14435] netlink: 'syz.5.3599': attribute type 11 has an invalid length.
[  306.053741][T14435] netlink: 'syz.5.3599': attribute type 11 has an invalid length.
[  306.056955][T14435] __nla_validate_parse: 5 callbacks suppressed
[  306.056963][T14435] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.3599'.
[  306.867707][T14447] netlink: 'syz.3.3604': attribute type 10 has an invalid length.
[  307.629077][   T54] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  309.288149][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3624'.
[  309.297875][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3624'.
[  309.302129][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3624'.
[  309.843910][   T54] Bluetooth: hci1: command tx timeout
[  309.848027][T14497] bridge_slave_1: left allmulticast mode
[  309.861639][T14497] bridge_slave_1: left promiscuous mode
[  309.873249][T14497] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.572758][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.576908][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.580467][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.585467][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.588996][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.835770][T14531] chnl_net:caif_netlink_parms(): no params data found
[  311.996637][T14531] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.999739][T14531] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.005775][T14531] bridge_slave_0: entered allmulticast mode
[  312.009728][T14531] bridge_slave_0: entered promiscuous mode
[  312.016419][T14531] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.019455][T14531] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.022557][T14531] bridge_slave_1: entered allmulticast mode
[  312.028613][T14531] bridge_slave_1: entered promiscuous mode
[  312.088944][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.096953][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.136519][T14531] team0: Port device team_slave_0 added
[  312.142000][T14531] team0: Port device team_slave_1 added
[  312.171042][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.174243][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.182607][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.187667][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.189934][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.198943][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.230677][T14531] hsr_slave_0: entered promiscuous mode
[  312.233193][T14531] hsr_slave_1: entered promiscuous mode
[  312.340018][T14531] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  312.347329][T14531] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  312.352353][T14531] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  312.357188][T14531] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  312.391361][T14531] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.393925][T14531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.396450][T14531] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.398975][T14531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.449998][T14531] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.462524][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.466590][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.477870][T14531] 8021q: adding VLAN 0 to HW filter on device team0
[  312.487176][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.489628][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.497029][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.499373][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.631431][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.761972][T14531] veth0_vlan: entered promiscuous mode
[  312.770092][T14531] veth1_vlan: entered promiscuous mode
[  312.787232][T14531] veth0_macvtap: entered promiscuous mode
[  312.791021][T14531] veth1_macvtap: entered promiscuous mode
[  312.800521][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.823226][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.836787][ T5864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.844290][ T5864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.847528][ T5864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.851772][ T5864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.922250][ T4635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.928358][ T4635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.947934][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.951425][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.016738][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3665'.
[  313.624106][ T5850] Bluetooth: hci2: command tx timeout
[  314.102560][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3678'.
[  314.407327][T14643] netlink: 'syz.6.3681': attribute type 1 has an invalid length.
[  314.412414][T14643] netlink: 'syz.6.3681': attribute type 2 has an invalid length.
[  314.416113][T14643] netlink: 'syz.6.3681': attribute type 3 has an invalid length.
[  314.418644][T14643] netlink: 'syz.6.3681': attribute type 5 has an invalid length.
[  314.421401][T14643] netlink: 'syz.6.3681': attribute type 6 has an invalid length.
[  314.430409][T14643] netlink: 'syz.6.3681': attribute type 7 has an invalid length.
[  314.433386][T14643] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3681'.
[  314.470351][T14643] netlink: 130080 bytes leftover after parsing attributes in process `syz.6.3681'.
[  314.522495][T14643] netlink: 'syz.6.3681': attribute type 1 has an invalid length.
[  314.528842][T14643] netlink: 'syz.6.3681': attribute type 2 has an invalid length.
[  314.532068][T14643] netlink: 'syz.6.3681': attribute type 3 has an invalid length.
[  314.535857][T14643] netlink: 'syz.6.3681': attribute type 5 has an invalid length.
[  314.539037][T14643] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3681'.
[  314.551257][T14646] netlink: 37 bytes leftover after parsing attributes in process `syz.5.3684'.
[  314.555416][T14646] netlink: 130076 bytes leftover after parsing attributes in process `syz.5.3684'.
[  314.650774][T14654] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.3688'.
[  314.700609][T14657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3689'.
[  314.706391][T14657] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3689'.
[  315.703573][ T5850] Bluetooth: hci2: command tx timeout
[  316.122632][T14670] infiniband syz!: set active
[  316.126069][T14670] infiniband syz!: added team_slave_0
[  316.130077][T14670] syz!: rxe_create_cq: returned err = -12
[  316.132073][T14670] infiniband syz!: Couldn't create ib_mad CQ
[  316.136714][T14670] infiniband syz!: Couldn't open port 1
[  316.150782][T14670] RDS/IB: syz!: added
[  316.152702][T14670] smc: adding ib device syz! with port count 1
[  316.154773][T14714] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  316.160842][T14670] smc:    ib device syz! port 1 has pnetid 
[  316.268545][T14718] : renamed from vlan0 (while UP)
[  316.666100][T14730] batman_adv: batadv0: Adding interface: hsr_slave_1
[  316.677902][T14730] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.701457][T14730] batman_adv: batadv0: Interface activated: hsr_slave_1
[  316.748365][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.751101][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  317.789104][ T5850] Bluetooth: hci2: command tx timeout
[  318.395175][ T5850] Bluetooth: hci2: Malformed Event: 0x2f
[  318.481745][T14797] __nla_validate_parse: 7 callbacks suppressed
[  318.481760][T14797] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.3745'.
[  318.656769][T14809] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3750'.
[  318.746712][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3752'.
[  318.902551][T14816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3753'.
[  318.978186][T14827] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3757'.
[  318.984259][T14827] unsupported nlmsg_type 40
[  319.860921][T14883] validate_nla: 15 callbacks suppressed
[  319.860932][T14883] netlink: 'syz.3.3782': attribute type 1 has an invalid length.
[  319.868290][ T5850] Bluetooth: hci2: command tx timeout
[  320.670766][T14912] tmpfs: Bad value for 'mode'
[  321.200985][T14929] netlink: 'syz.5.3803': attribute type 21 has an invalid length.
[  321.489298][T14936] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  321.589377][T14936] blkio.reset_stats is deprecated
[  321.823392][T14951] netlink: 'syz.5.3813': attribute type 2 has an invalid length.
[  321.826806][T14951] netlink: 12374 bytes leftover after parsing attributes in process `syz.5.3813'.
[  322.165790][T14966] netlink: 'syz.6.3820': attribute type 10 has an invalid length.
[  322.177884][T14966] macvlan0: entered promiscuous mode
[  322.212077][T14966] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  322.810532][T14988] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  322.854916][T14990] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.857903][T14990] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.861817][T14990] bridge0: entered allmulticast mode
[  322.967756][T14990] bridge_slave_1: left allmulticast mode
[  322.971547][T14990] bridge_slave_1: left promiscuous mode
[  322.988559][T14990] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.082759][T14990] bridge_slave_0: left allmulticast mode
[  323.087789][T14990] bridge_slave_0: left promiscuous mode
[  323.095884][T14990] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.600321][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3837'.
[  323.606451][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3837'.
[  323.856270][T15020] netlink: 'syz.5.3844': attribute type 10 has an invalid length.
[  323.861512][T15020] veth1_macvtap: left promiscuous mode
[  324.064976][T15026] netlink: 'syz.6.3847': attribute type 16 has an invalid length.
[  324.067775][T15026] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3847'.
[  324.070968][T15026] bridge_slave_0: entered allmulticast mode
[  324.216686][T15030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  324.220417][T15030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  324.541017][T15053] netlink: 'syz.3.3859': attribute type 21 has an invalid length.
[  324.875661][T15066] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3865'.
[  325.495860][T15086] netlink: 'syz.3.3873': attribute type 23 has an invalid length.
[  325.531084][T15084] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3872'.
[  325.609250][T15092] C: renamed from team_slave_0 (while UP)
[  325.612636][T15092] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3876'.
[  325.690919][T15098] netlink: 202232 bytes leftover after parsing attributes in process `syz.3.3880'.
[  325.694560][T15098] netlink: zone id is out of range
[  325.696279][T15098] netlink: zone id is out of range
[  325.697509][T15100] netlink: 492 bytes leftover after parsing attributes in process `syz.6.3879'.
[  326.787804][T15162] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3908'.
[  327.317402][T15178] netlink: 'syz.6.3914': attribute type 1 has an invalid length.
[  328.516007][T15199] netlink: 'syz.5.3923': attribute type 21 has an invalid length.
[  328.523725][T15199] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3923'.
[  328.835212][T15210] netlink: 'syz.5.3928': attribute type 29 has an invalid length.
[  328.851245][T15210] netlink: 'syz.5.3928': attribute type 10 has an invalid length.
[  328.877407][T15210] bond_slave_0: left promiscuous mode
[  328.882343][T15210] bond_slave_1: left promiscuous mode
[  329.078190][T15231] netlink: 'syz.6.3936': attribute type 10 has an invalid length.
[  329.118895][T15231] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  329.270967][T15237] syzkaller0: entered promiscuous mode
[  329.647745][T15240] netlink: 'syz.5.3940': attribute type 21 has an invalid length.
[  329.653939][T15240] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3940'.
[  330.599244][T15240] netlink: 'syz.5.3940': attribute type 4 has an invalid length.
[  330.801322][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3960'.
[  330.862067][T15295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3964'.
[  331.423344][T15324] syzkaller0: entered promiscuous mode
[  331.425376][T15324] syzkaller0: entered allmulticast mode
[  331.946633][T15334] xt_l2tp: invalid flags combination: 8
[  333.033137][T15328] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3980'.
[  333.064940][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3991'.
[  333.150429][T15360] netlink: 'syz.5.3993': attribute type 1 has an invalid length.
[  333.157550][T15363] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.3995'.
[  333.173582][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3993'.
[  333.288382][T15364] netlink: 'syz.3.3996': attribute type 21 has an invalid length.
[  333.291457][T15364] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3996'.
[  333.518739][ T5850] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3
[  333.776915][T15402] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4013'.
[  333.830621][T15404] netlink: 'syz.3.4014': attribute type 28 has an invalid length.
[  333.881819][T15406] tmpfs: Bad value for 'uid'
[  333.885734][T15406] tmpfs: Bad value for 'uid'
[  339.038771][T15489] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24
[  339.296812][T15493] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  340.945304][T15513] netlink: 'syz.5.4061': attribute type 39 has an invalid length.
[  341.037751][T15520] netlink: 'syz.5.4065': attribute type 1 has an invalid length.
[  341.040701][T15520] netlink: 'syz.5.4065': attribute type 1 has an invalid length.
[  341.536753][T15541] xt_l2tp: v2 sid > 0xffff: 131072
[  341.592696][T15547] netlink: 516 bytes leftover after parsing attributes in process `syz.6.4077'.
[  341.727038][T15559] delete_channel: no stack
[  341.785597][T15566] netlink: 'syz.5.4085': attribute type 29 has an invalid length.
[  341.789202][T15566] netlink: 'syz.5.4085': attribute type 29 has an invalid length.
[  342.207418][T15590] netlink: 'syz.5.4094': attribute type 21 has an invalid length.
[  342.386375][T15591] C: renamed from team_slave_0
[  342.437554][T15592] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4094'.
[  342.443116][T15591] netlink: 'syz.5.4094': attribute type 4 has an invalid length.
[  342.447448][T15591] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4094'.
[  342.469238][T15591] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  343.375629][T15613] bpf: Bad value for 'gid'
[  343.680851][T15627] netlink: 'syz.3.4108': attribute type 19 has an invalid length.
[  344.277087][T15658] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4123'.
[  345.404778][T15690] netlink: 'syz.5.4136': attribute type 10 has an invalid length.
[  345.457395][T15691] netlink: 'syz.5.4136': attribute type 11 has an invalid length.
[  345.460304][T15691] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4136'.
[  345.715710][T15698] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4139'.
[  345.741580][T15700] netlink: 'syz.3.4140': attribute type 21 has an invalid length.
[  345.744988][T15700] netlink: 15202 bytes leftover after parsing attributes in process `syz.3.4140'.
[  345.780173][T15702] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  346.100780][T15687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.431894][T15736] validate_nla: 1 callbacks suppressed
[  346.431908][T15736] netlink: 'syz.6.4157': attribute type 3 has an invalid length.
[  346.439529][T15736] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.4157'.
[  346.474733][T15740] netlink: 'syz.6.4159': attribute type 27 has an invalid length.
[  346.478100][T15740] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4159'.
[  346.505252][T15742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4161'.
[  346.693323][T15754] netlink: 'syz.3.4166': attribute type 29 has an invalid length.
[  346.706321][T15754] netlink: 'syz.3.4166': attribute type 29 has an invalid length.
[  347.871245][T15754] netlink: 'syz.3.4166': attribute type 29 has an invalid length.
[  348.311435][T15806] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4188'.
[  348.319497][T15806] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4188'.
[  348.455854][T15814] netlink: 'syz.6.4192': attribute type 30 has an invalid length.
[  348.512285][T15811] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4191'.
[  348.860677][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4199'.
[  349.011246][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4202'.
[  349.149634][T15846] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4207'.
[  349.152709][T15846] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4207'.
[  349.516673][T15859] netlink: 'syz.5.4212': attribute type 10 has an invalid length.
[  349.519411][T15859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4212'.
[  349.528216][T15859] ipvlan1: entered promiscuous mode
[  349.530934][T15859] ipvlan1: entered allmulticast mode
[  349.534775][T15859] veth0_vlan: entered allmulticast mode
[  349.809681][T15859] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  350.081884][T15876] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4216'.
[  350.276590][T15893] netlink: 'syz.3.4226': attribute type 3 has an invalid length.
[  350.280848][T15893] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4226'.
[  352.487809][T15987] netlink: 'syz.5.4265': attribute type 10 has an invalid length.
[  352.499126][T15987] geneve0: entered promiscuous mode
[  352.560443][T15987] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  353.447824][T16009] __nla_validate_parse: 4 callbacks suppressed
[  353.447840][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4276'.
[  353.459748][T16009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.610053][T16023] netlink: 'syz.5.4282': attribute type 21 has an invalid length.
[  353.613811][T16023] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4282'.
[  355.739381][T16084] netlink: 'syz.3.4311': attribute type 1 has an invalid length.
[  356.241677][ T5850] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  358.301293][T16138] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4336'.
[  358.905295][T16149] netlink: 'syz.3.4341': attribute type 29 has an invalid length.
[  358.910054][T16149] netlink: 'syz.3.4341': attribute type 29 has an invalid length.
[  358.915176][T16149] netlink: 'syz.3.4341': attribute type 29 has an invalid length.
[  358.979901][T16151] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4343'.
[  358.990057][T16155] xt_HMARK: spi-set and port-set can't be combined
[  359.524376][T16173] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4351'.
[  359.783642][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  361.518665][T16220] netlink: 'syz.6.4371': attribute type 21 has an invalid length.
[  361.757925][T16223] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4372'.
[  361.870708][T16233] netlink: 'syz.6.4377': attribute type 2 has an invalid length.
[  361.874768][T16233] netlink: 'syz.6.4377': attribute type 1 has an invalid length.
[  361.967584][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4380'.
[  362.885947][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4388'.
[  363.008328][T16263] netlink: 'syz.3.4391': attribute type 7 has an invalid length.
[  364.129477][T16285] netlink: 'syz.6.4401': attribute type 29 has an invalid length.
[  364.134588][T16285] netlink: 'syz.6.4401': attribute type 29 has an invalid length.
[  364.138737][T16285] netlink: 'syz.6.4401': attribute type 29 has an invalid length.
[  364.142745][T16285] netlink: 'syz.6.4401': attribute type 29 has an invalid length.
[  364.538802][T16291] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4404'.
[  365.208025][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4412'.
[  366.270974][T16345] netlink: 'syz.6.4429': attribute type 29 has an invalid length.
[  366.277325][T16345] netlink: 'syz.6.4429': attribute type 29 has an invalid length.
[  366.281563][T16345] netlink: 'syz.6.4429': attribute type 29 has an invalid length.
[  366.288511][T16345] netlink: 'syz.6.4429': attribute type 29 has an invalid length.
[  366.317681][T16347] netlink: 'syz.3.4430': attribute type 29 has an invalid length.
[  366.326835][T16347] netlink: 'syz.3.4430': attribute type 29 has an invalid length.
[  369.034917][T16412] netlink: 26 bytes leftover after parsing attributes in process `syz.6.4461'.
[  369.040517][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4463'.
[  369.043278][T16416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.209793][T16420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.263892][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.267334][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.271144][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.278059][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.281991][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.967366][T16446] validate_nla: 3 callbacks suppressed
[  370.967380][T16446] netlink: 'syz.3.4475': attribute type 12 has an invalid length.
[  370.978560][T16425] chnl_net:caif_netlink_parms(): no params data found
[  370.985630][T16446] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.4475'.
[  371.039655][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4476'.
[  371.048101][T16451] delete_channel: no stack
[  371.129414][T16425] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.132858][T16425] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.140075][T16425] bridge_slave_0: entered allmulticast mode
[  371.148082][T16425] bridge_slave_0: entered promiscuous mode
[  371.150842][T16461] netlink: 'syz.3.4481': attribute type 28 has an invalid length.
[  371.156437][T16425] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.159660][T16425] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.162886][T16425] bridge_slave_1: entered allmulticast mode
[  371.170371][T16425] bridge_slave_1: entered promiscuous mode
[  371.211923][T16425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.231877][T16425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.262473][T16425] team0: Port device team_slave_0 added
[  371.264328][T16469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.268041][T16425] team0: Port device team_slave_1 added
[  371.294646][T16471] netlink: 'syz.3.4486': attribute type 2 has an invalid length.
[  371.297504][T16471] netlink: 'syz.3.4486': attribute type 1 has an invalid length.
[  371.311452][T16425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.313807][   T54] Bluetooth: hci1: command tx timeout
[  371.316173][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.327346][T16425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.332500][T16425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.336020][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.346936][T16425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.407902][T16425] hsr_slave_0: entered promiscuous mode
[  371.410948][T16425] hsr_slave_1: entered promiscuous mode
[  371.413316][T16425] debugfs: 'hsr0' already exists in 'hsr'
[  371.420346][T16425] Cannot create hsr debugfs directory
[  371.598235][T16478] netlink: 'syz.6.4488': attribute type 11 has an invalid length.
[  371.744885][T16425] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  371.835015][T16484] netlink: 'syz.3.4491': attribute type 2 has an invalid length.
[  371.984198][T16425] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  371.999040][T16425] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  372.007008][T16425] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  372.102938][T16425] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.126568][T16425] 8021q: adding VLAN 0 to HW filter on device team0
[  372.139913][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.142974][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.157656][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.160939][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.656558][T16425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.867388][T16425] veth0_vlan: entered promiscuous mode
[  372.879044][T16425] veth1_vlan: entered promiscuous mode
[  372.914570][T16425] veth0_macvtap: entered promiscuous mode
[  372.921086][T16425] veth1_macvtap: entered promiscuous mode
[  372.942101][T16425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.952069][T16425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.961298][ T5864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.967107][ T5864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.972934][ T5864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.978821][ T5864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.031795][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.038839][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.051143][T16522] netlink: 'syz.6.4500': attribute type 10 has an invalid length.
[  373.054457][T16522] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.4500'.
[  373.061777][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.066448][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.306908][T16541] netlink: 'syz.6.4506': attribute type 13 has an invalid length.
[  373.319106][T16543] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4509'.
[  373.394609][   T54] Bluetooth: hci1: command tx timeout
[  373.757497][T16555] netlink: zone id is out of range
[  373.759797][T16555] netlink: zone id is out of range
[  373.762614][T16555] netlink: zone id is out of range
[  373.766851][T16555] netlink: zone id is out of range
[  373.768994][T16555] netlink: zone id is out of range
[  373.771117][T16555] netlink: zone id is out of range
[  373.773324][T16555] netlink: zone id is out of range
[  373.937688][T16560] cgroup: Unknown subsys name 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  374.008732][T16565] netlink: 'syz.7.4518': attribute type 25 has an invalid length.
[  374.051113][T16565] netlink: 2418 bytes leftover after parsing attributes in process `syz.7.4518'.
[  374.059995][T16567] netlink: 'syz.3.4520': attribute type 21 has an invalid length.
[  374.063153][T16567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4520'.
[  374.281840][ T5719] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.464666][   T54] Bluetooth: hci1: command tx timeout
[  376.062792][T16627] validate_nla: 1 callbacks suppressed
[  376.062809][T16627] netlink: 'syz.7.4545': attribute type 4 has an invalid length.
[  376.089892][T16627] netlink: 'syz.7.4545': attribute type 4 has an invalid length.
[  376.096806][T16627] netlink: 199756 bytes leftover after parsing attributes in process `syz.7.4545'.
[  376.112485][T16624] netlink: 'syz.3.4544': attribute type 29 has an invalid length.
[  376.117889][T16628] netlink: 'syz.3.4544': attribute type 29 has an invalid length.
[  376.130890][T16624] netlink: 'syz.3.4544': attribute type 29 has an invalid length.
[  376.137327][T16624] netlink: 'syz.3.4544': attribute type 29 has an invalid length.
[  376.201126][T16633] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4547'.
[  376.208510][T16628] netlink: 'syz.3.4544': attribute type 2 has an invalid length.
[  376.234943][T16628] netlink: 'syz.3.4544': attribute type 9 has an invalid length.
[  376.238248][T16628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4544'.
[  376.387049][T16646] netlink: 'syz.7.4553': attribute type 6 has an invalid length.
[  376.390504][T16646] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4553'.
[  377.549154][T16684] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4571'.
[  377.597933][T16687] netlink: 'syz.3.4572': attribute type 23 has an invalid length.
[  377.601252][T16687] IPv6: NLM_F_CREATE should be specified when creating new route
[  377.723765][   T54] Bluetooth: hci1: command tx timeout
[  378.193649][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.196310][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.283577][T16709] net_ratelimit: 11 callbacks suppressed
[  378.283588][T16709] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  378.367747][T16713] netlink: 198328 bytes leftover after parsing attributes in process `syz.7.4583'.
[  378.950098][T16744] netlink: 208 bytes leftover after parsing attributes in process `syz.6.4596'.
[  379.000651][T16749] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  379.005995][T16749] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  379.853332][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4608'.
[  379.863756][T16771] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  379.962670][T16776] netlink: 176 bytes leftover after parsing attributes in process `syz.6.4610'.
[  380.203826][   T12] unregister_netdevice: waiting for Y4`Ҙ to become free. Usage count = 3
[  380.208304][   T12] ref_tracker: netdev@ffff888109b4a610 has 1/1 users at
[  380.208304][   T12]      ib_device_set_netdev+0x31f/0x6d0
[  380.208304][   T12]      siw_newlink+0x40c/0xd70
[  380.208304][   T12]      nldev_newlink+0x4a5/0x5a0
[  380.208304][   T12]      rdma_nl_rcv+0x6ae/0x980
[  380.208304][   T12]      netlink_unicast+0x82f/0x9e0
[  380.208304][   T12]      netlink_sendmsg+0x805/0xb30
[  380.208304][   T12]      __sock_sendmsg+0x21c/0x270
[  380.208304][   T12]      ____sys_sendmsg+0x505/0x830
[  380.208304][   T12]      ___sys_sendmsg+0x21f/0x2a0
[  380.208304][   T12]      __x64_sys_sendmsg+0x19b/0x260
[  380.208304][   T12]      do_syscall_64+0xfa/0x3b0
[  380.208304][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.208304][   T12] 

VM DIAGNOSIS:
00:38:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f6eb0
R8 =ffff888106910237 R9 =1ffff11020d22046 R10=dffffc0000000000 R11=ffffffff855016c0
R12=dffffc0000000000 R13=ffffffff99b038e3 R14=ffffffff99df8420 R15=0000000000000000
RIP=ffffffff8550173c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f60331056c0 CR3=0000000111348000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7941a12e7b
XMM06=0000000000000000 00007f7941a12e75 XMM07=0000000000000000 00007f7941a12e89
XMM08=0000000000000000 00007f7941a12f0f XMM09=0000000000000000 00007f7941a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff93a8b758 RBX=0000000000072f1c RCX=0000000000040000 RDX=0000000000000001
RSI=ffff8880239fa850 RDI=ffff8880239f9cc0 RBP=0000000000000001 RSP=ffffc900001dfcf8
R8 =0000000000000000 R9 =ffffffff81ae170e R10=ffffc900001dfd60 R11=ffffffff81ae16d0
R12=0000000000000001 R13=ffff8880239fa7b0 R14=ffff8880239fa850 R15=35590c0ea7cde75a
RIP=ffffffff819db6a4 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f79427546c0 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558ae9e588 CR3=0000000110a3c000 CR4=000006f0
DR0=0000200000000300 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=a0cd000000fc2403 f900060200000095
XMM02=a182258f4dcc156e 09778145145d9d03 XMM03=f1b98443b2df1c7d def392d998cca5be
XMM04=9bf66bafa596c80e 97dc41c4875c610f XMM05=1c8a13bc44a2509b f66bafa596c80e97
XMM06=dc41c4875c610ff1 b98443b2df1c7dde XMM07=f392d998cca5bea1 82258f4dcc156e09
XMM08=778145145d9d0310 1f81e1fd6fee4314 XMM09=0000000000000000 00007f557d412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
