last executing test programs:

3m55.893975323s ago: executing program 32 (id=118):
socket$kcm(0x10, 0x4, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, 0x0, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff00"})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x100004, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000, 0xfffffffe}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETVNETBE(r4, 0x400454de, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYBLOB], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006000000800000000000000022000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r7})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="00e10000d3a8"})

3m55.649930274s ago: executing program 33 (id=120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20)

2m58.155508495s ago: executing program 34 (id=859):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a0000080018"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)

2m31.662954873s ago: executing program 3 (id=1194):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fcffffff000000007d00000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f88200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001400000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m31.604258685s ago: executing program 3 (id=1196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x87, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="77b72cb1e5"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040)

2m31.603436625s ago: executing program 3 (id=1198):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "2a8e27e2fa"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)

2m31.507146772s ago: executing program 3 (id=1202):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0xdca469efe2a571f9)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000740)=""/190, 0xbe}, {&(0x7f0000000480)=""/295, 0x127}, {&(0x7f00000012c0)=""/4144, 0x1030}], 0x4}, 0x40002022)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x24000040)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, &(0x7f0000000d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10)
sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000bc0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x50}, 0x4000081)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161)
mkdir(0x0, 0x44)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000)

2m31.346710429s ago: executing program 2 (id=1203):
socket$inet(0x2, 0x2, 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x500, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000)

2m31.232915179s ago: executing program 2 (id=1205):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x1}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ca}, 0x401a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

2m31.012316759s ago: executing program 2 (id=1208):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@migrate={0x118, 0x21, 0x1, 0x3, 0x25dfdbfe, {{@in=@remote, @in=@private=0xa010100, 0x4e24, 0x9, 0x4e21, 0x0, 0x2, 0x20, 0x80, 0x33}, 0x0, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, @in=@remote, 0x32, 0x3, 0x0, 0x3505, 0xa, 0x2}, {@in=@loopback, @in=@multicast2, @in6=@mcast1, @in6=@mcast1, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private2, @in=@broadcast, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044004}, 0x20000040)

2m30.963644968s ago: executing program 2 (id=1211):
r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xa}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)

2m30.899354189s ago: executing program 2 (id=1212):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB="0500"/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f9ff00000000"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x90)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

2m30.723754421s ago: executing program 2 (id=1213):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0)

2m30.605461765s ago: executing program 35 (id=1213):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0)

2m30.56314074s ago: executing program 3 (id=1215):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x2b}, 0x20)

2m30.152644403s ago: executing program 3 (id=1216):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r4, 0x84, 0x14, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x7, 0x3, 0xfd, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75, 0x2, @perf_config_ext={0x8, 0x80}, 0x80, 0x7, 0x100, 0x0, 0xe, 0x7, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x10, 0xffff, 0x8, 0x18040, 0xffffffffffffffff, 0x9, '\x00', 0x0, r8, 0x3, 0x0, 0x5, 0x0, @value=r8, @void, @value=r7}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xa3, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x7, 0x9, 0x2288, r9, 0xffffffff, '\x00', r10, r8, 0x4, 0x2, 0x2, 0x5}, 0x50)

2m30.152407133s ago: executing program 36 (id=1216):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r4 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r4, 0x84, 0x14, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000001580)={0x5, 0x80, 0x7, 0x3, 0xfd, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75, 0x2, @perf_config_ext={0x8, 0x80}, 0x80, 0x7, 0x100, 0x0, 0xe, 0x7, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x10, 0xffff, 0x8, 0x18040, 0xffffffffffffffff, 0x9, '\x00', 0x0, r8, 0x3, 0x0, 0x5, 0x0, @value=r8, @void, @value=r7}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xa3, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x7, 0x9, 0x2288, r9, 0xffffffff, '\x00', r10, r8, 0x4, 0x2, 0x2, 0x5}, 0x50)

2m23.28703295s ago: executing program 5 (id=1246):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m23.08046569s ago: executing program 5 (id=1247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

2m22.901578718s ago: executing program 5 (id=1248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc)

2m22.681431824s ago: executing program 5 (id=1252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r0, &(0x7f00000006c0)}, 0x20)

2m22.600724845s ago: executing program 5 (id=1253):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]})

2m22.460921683s ago: executing program 5 (id=1254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2m7.461650345s ago: executing program 37 (id=1254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1m34.458814941s ago: executing program 7 (id=1907):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x4000000e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80, 0x0}, 0x1)

1m34.278280607s ago: executing program 7 (id=1912):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000), 0x8)

1m34.198616362s ago: executing program 7 (id=1916):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

1m34.118073576s ago: executing program 7 (id=1919):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x56, 0x3, 0x0, 0x0, 0x0, 0x2110, 0xa0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xfffffffffffffffd}, 0x1410d, 0x32, 0xfffffbff, 0x2, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)

1m34.036806992s ago: executing program 7 (id=1925):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xc, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)

1m33.836045985s ago: executing program 7 (id=1930):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb836d5cecbe03301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13b, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x2, 0x7, 0x4, 0x2, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4931, 0xa0840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x2, 0xfffffffffffffffe, 0xfffffffe, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0011800a0001006c696d69740000002c0002800c000140fffffffffffffffc0c000240000000010000000008000440000000010800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x5, 0x830d}, 0x1184, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

1m18.736918943s ago: executing program 38 (id=1930):
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb836d5cecbe03301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13b, 0x0, @perf_bp={0x0, 0x8}, 0x390, 0x0, 0x2, 0x7, 0x4, 0x2, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x8)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="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", 0x101}], 0x1}, 0x20008010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="54020000160005"], 0x254}}, 0x40808)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4931, 0xa0840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x2, 0xfffffffffffffffe, 0xfffffffe, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0011800a0001006c696d69740000002c0002800c000140fffffffffffffffc0c000240000000010000000008000440000000010800034000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc1, 0x4, @perf_config_ext={0x5, 0x830d}, 0x1184, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

45.747457416s ago: executing program 8 (id=2644):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)

42.661401889s ago: executing program 8 (id=2649):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x23, 0x0}, 0x0)

42.540788856s ago: executing program 8 (id=2652):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

42.431895164s ago: executing program 8 (id=2654):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000a00)='syz0\x00', 0x1ff)

42.342519438s ago: executing program 8 (id=2656):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a}, 0x28)

42.276354386s ago: executing program 8 (id=2658):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @random="010000201000"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socketpair(0x29, 0x1, 0x6, &(0x7f0000000500))

33.662958469s ago: executing program 9 (id=2764):
socket$kcm(0x2, 0x3, 0x84)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)

33.612693514s ago: executing program 9 (id=2766):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000001f00)=""/4078, 0xfee}, {&(0x7f00000013c0)=""/12, 0xc}, {&(0x7f0000000000)=""/103, 0x67}], 0x5}, 0x0)

33.562960405s ago: executing program 9 (id=2769):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800)

33.483407692s ago: executing program 9 (id=2771):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8970, &(0x7f0000000080))

33.481108724s ago: executing program 9 (id=2773):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004"], 0x50)

33.402454866s ago: executing program 9 (id=2775):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x88)
write$cgroup_subtree(r0, 0x0, 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

27.277956458s ago: executing program 39 (id=2658):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @random="010000201000"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
socketpair(0x29, 0x1, 0x6, &(0x7f0000000500))

23.839606586s ago: executing program 6 (id=2829):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4)

23.772225677s ago: executing program 6 (id=2830):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)

23.681065251s ago: executing program 6 (id=2832):
socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008840)
recvmsg(0xffffffffffffffff, 0x0, 0x10140)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0})
close(r1)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

23.425960342s ago: executing program 6 (id=2836):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7fffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0)

23.179310447s ago: executing program 6 (id=2838):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x448c0}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002ef7872db3b3c59bf132a78ef2fde0f86b9949abefb87c951ff4a1902ec9729a9247eae14cd64506065efc97931d4a681bdb232004c1b900b74dc560a7523a000de5b9e4e51ad6ef8abba6cf187ee55ddeead741c5d56aef8ecdfe97a1fb425ab04dca5c9d7d48d2d306a90769e58f4cfa9d394975af8fefc2ea8cc3f6bb34fd10bff8c260f9301ba5181fa6fa25f31fd71605e9621aa64d066bdd5951f6fea4e3a953c28717fb3b1decc0b0737c23c292cda692c0a941984ad361e01952197ab6c1397084bdc8502d7b05011546e215d759188944fbdc03069cba7efa581f09c20ce1a4626fcfb3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r8)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

22.818049882s ago: executing program 6 (id=2841):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
syz_clone(0x25200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5}, 0x94)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000}, 0x10}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'})

18.14842347s ago: executing program 40 (id=2775):
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000000)
socket$kcm(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x88)
write$cgroup_subtree(r0, 0x0, 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

7.306243761s ago: executing program 41 (id=2841):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
syz_clone(0x25200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, 0x0)
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904", 0x10}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5}, 0x94)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000}, 0x10}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'})

1.879533245s ago: executing program 1 (id=2885):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)='%+9llu \x00'}, 0x20)

1.62654812s ago: executing program 1 (id=2888):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000000)="b9ff0300600d698cff9e14f008004de7f9c7646b0b06e3e1360000003200135437f6e31e17128c4407ca814f7bb551fe5f4607b819670c56c81411ac051c387f00c8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.550248047s ago: executing program 1 (id=2890):
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x2980, 0x6, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0)
close(r1)

1.365516423s ago: executing program 1 (id=2891):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0)

1.365333027s ago: executing program 0 (id=2892):
bpf$MAP_CREATE(0x1800, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

1.297307918s ago: executing program 1 (id=2893):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x99)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.296638302s ago: executing program 0 (id=2895):
socket(0x2b, 0x1, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2b, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000)

1.163589771s ago: executing program 0 (id=2897):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)

1.098327896s ago: executing program 4 (id=2898):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, <r2=>0x0})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127)

1.097616301s ago: executing program 1 (id=2899):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0})
r1 = socket$kcm(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}}}}], 0x58}, 0x8000)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r4 = socket$kcm(0x2c, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20)
close(r4)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)}], 0x1}, 0x48800)
r8 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="2d58a6eb38", 0x5}], 0x1}, 0x4044)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="1854000009000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a00f4e7a8500000006000000850000001b00000018230000", @ANYRES32=r6, @ANYBLOB="000000000200000018690000020000000000000009000000181a0000", @ANYRES32=r3, @ANYBLOB="00000000000000001805000020646c24ff00000000000000001af8ff00000000bfa100000000851407010000f8ffffffb702000008000000b70300000700000085e58777be0000008520000005000000"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000740)=""/157, 0x41000, 0x12, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x8, 0x39}, 0x10, 0xbc8d, r8, 0x2, &(0x7f00000003c0)=[r6, r3, r6, r3], &(0x7f0000000400)=[{0x2, 0x3, 0xe, 0x2}, {0x5, 0x4, 0x1, 0xf}], 0x10, 0x81}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r9, 0x0, 0xbe, 0xe6, &(0x7f0000000a40)="ba5c9e52822f2eec327ab991501bc9c931148b6a290d410f24d2d09238adda820a2cfb3820ea092d49c93cbfd6f78a4b9bdd63ef6973c8ac351e31bc9a142187c867d3f708971d9372eca64510d1c44a3f21072c69400bc88dab2f422ea1071165660c693006f5dde05544bf99391690188c56ec39aef2104be08802ccdb0f908a92abece9b8d9c8f11a56955b3c550cfa936b4ea809b05c43ecf19d2db2fb5e43bf2f75d97479013b8fe70fc241ce6beb1159cbdf9b0baa36ad306b070e", &(0x7f0000000b00)=""/230, 0x8, 0x0, 0xc3, 0x7c, &(0x7f0000000c00)="22c97280dc7ff0150c21ed5470b1725cf36353cfd4de3a6a1511642ea368d43ae1cb4c0bd284c38f1264a07cdae09a49533d2dd3be5ee680eb3346013542e31738f15ce7a721fd107885fd0e5408a134f689b96303c9846185039dcaaa762edd4d2d26b244fea873e4666fcad01146efb68695474ac3ef20f83aa4a9a9cdfddeacd069aba7ff9c4505dc8c7208e54d8ba1bd382ada40412d1e9b3d271da869184e58c14cbba716d59b396f59fd81df8850e8b8602a0272d7762cdd7a9305351dcbaa52", &(0x7f0000000680)="437d432f5cb33b872941dca4c0a7c2cda1bb567102a0399eb7d39de5f6bac79cf59b4df2119ca8b7bba23694d74f9af8ac7e358abe5535b3ebf637b7c5c7b0002adb6d8fc4ecc5f54c778ad7d28f32a8b1f512cf5fb41b83b259525d4dc8ec35af4e31bbb613dc9aaeb6d04b40a21de08198267cbaa38c86a7417f30", 0x0, 0x0, 0x6}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x4000002)

1.030495909s ago: executing program 4 (id=2900):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x29)

1.030325766s ago: executing program 0 (id=2901):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040000)

1.029810809s ago: executing program 4 (id=2902):
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001"], 0x30}}, 0x20004084)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

776.40645ms ago: executing program 0 (id=2903):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000001540), 0x20)

566.351591ms ago: executing program 0 (id=2904):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x2, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={<r5=>0x0, 0x0})
close(r5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401"], 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44004)

106.234081ms ago: executing program 4 (id=2905):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001b00)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x1010000, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x84}}, 0x0)

392.705µs ago: executing program 4 (id=2906):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x4000, [{0x2000007, 0x4, 0x5}]}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x5f, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000600)=""/217, 0x3a, 0xd9, 0x1, 0x7}, 0x28)

0s ago: executing program 4 (id=2907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0xfdfdffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
socket$kcm(0x23, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x22, 0x2, 0x21)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

kernel console output (not intermixed with test programs):

   67.748253][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   67.769223][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.772299][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.790638][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.793574][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.853736][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.863760][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.899233][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   67.917307][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.928135][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   67.939675][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.942783][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.958316][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.961686][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.997726][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.000966][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.010214][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.013397][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.203256][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.273638][ T5854] veth0_vlan: entered promiscuous mode
[   68.295852][ T5854] veth1_vlan: entered promiscuous mode
[   68.326090][ T5854] veth0_macvtap: entered promiscuous mode
[   68.332563][ T5854] veth1_macvtap: entered promiscuous mode
[   68.372105][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.382340][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.395060][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.409307][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.416472][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.422877][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.432133][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.438012][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.499577][ T5859] veth0_vlan: entered promiscuous mode
[   68.531192][ T5859] veth1_vlan: entered promiscuous mode
[   68.573358][ T5858] veth0_vlan: entered promiscuous mode
[   68.617943][ T5858] veth1_vlan: entered promiscuous mode
[   68.626629][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.630183][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.656627][ T5859] veth0_macvtap: entered promiscuous mode
[   68.664100][ T5859] veth1_macvtap: entered promiscuous mode
[   68.706402][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.709539][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.713697][ T5858] veth0_macvtap: entered promiscuous mode
[   68.724888][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.732457][ T5858] veth1_macvtap: entered promiscuous mode
[   68.747824][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.762127][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.768322][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.784067][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.788663][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.793552][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.801315][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.805864][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.836483][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.850663][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.860396][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.886434][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.918044][   T33] audit: type=1107 audit(1758387188.212:2): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   68.958061][  T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.964066][  T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.000442][  T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.002873][  T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.041103][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.046352][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.081431][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.088416][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.383289][ T5930] warning: `syz.1.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.541045][ T5939] =======================================================
[   69.541045][ T5939] WARNING: The mand mount option has been deprecated and
[   69.541045][ T5939]          and is ignored by this kernel. Remove the mand
[   69.541045][ T5939]          option from the mount to silence this warning.
[   69.541045][ T5939] =======================================================
[   69.580292][ T5937] tun0: tun_chr_ioctl cmd 1074812117
[   69.674832][   T55] Bluetooth: hci0: command tx timeout
[   69.734977][   T55] Bluetooth: hci2: command tx timeout
[   69.735237][ T5857] Bluetooth: hci1: command tx timeout
[   69.926544][ T5960] C: renamed from team_slave_0 (while UP)
[   69.932236][ T5960] netlink: 'syz.2.18': attribute type 3 has an invalid length.
[   69.948490][ T5960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   70.156694][ T5857] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[   70.594009][ T5994] netlink: 'syz.0.32': attribute type 21 has an invalid length.
[   70.610719][ T5994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.32'.
[   70.648987][    C0] hrtimer: interrupt took 28404 ns
[   70.820680][ T5994] netlink: 'syz.0.32': attribute type 5 has an invalid length.
[   71.420315][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.427306][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.583118][   T24] cfg80211: failed to load regulatory.db
[   71.737848][   T55] Bluetooth: hci0: command tx timeout
[   71.815399][   T55] Bluetooth: hci1: command tx timeout
[   71.815745][ T5857] Bluetooth: hci2: command tx timeout
[   72.333704][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.50'.
[   72.347921][ T6033] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   72.351433][ T6033] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.50'.
[   73.810877][ T6053] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET)
[   73.816093][ T5857] Bluetooth: hci0: command tx timeout
[   73.895523][ T5857] Bluetooth: hci2: command tx timeout
[   73.896061][   T55] Bluetooth: hci1: command tx timeout
[   74.058546][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.61'.
[   74.075078][ T6059] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   74.105317][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   74.109424][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'.
[   74.456261][ T6086] netlink: 104 bytes leftover after parsing attributes in process `syz.1.74'.
[   74.602583][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   74.738878][ T6103] syzkaller1: tun_chr_ioctl cmd 1074025677
[   74.742694][ T6103] syzkaller1: linktype set to 776
[   74.927432][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'.
[   74.948024][ T6115] C: renamed from team_slave_0 (while UP)
[   74.954324][ T6115] netlink: 'syz.1.88': attribute type 3 has an invalid length.
[   75.002030][ T6117] Zero length message leads to an empty skb
[   75.024033][ T6117] netlink: 'syz.2.89': attribute type 39 has an invalid length.
[   75.031828][ T6117] veth0_macvtap: left promiscuous mode
[   75.182567][ T6126] netlink: 'syz.2.93': attribute type 1 has an invalid length.
[   75.187464][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'.
[   75.230821][ T6124] netlink: 'syz.1.92': attribute type 29 has an invalid length.
[   75.273156][ T6131] netlink: 'syz.1.92': attribute type 29 has an invalid length.
[   75.283915][ T6124] netlink: 'syz.1.92': attribute type 29 has an invalid length.
[   75.346876][ T6124] netlink: 'syz.1.92': attribute type 29 has an invalid length.
[   75.778115][ T6152] __nla_validate_parse: 1 callbacks suppressed
[   75.778126][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'.
[   76.875977][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'.
[   77.528686][ T5894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.602647][ T5894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.662645][ T5894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.745716][ T5894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.919954][ T5894] bridge_slave_1: left allmulticast mode
[   77.923409][ T5894] bridge_slave_1: left promiscuous mode
[   77.926895][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.984984][ T5894] bridge_slave_0: left allmulticast mode
[   77.987396][ T5894] bridge_slave_0: left promiscuous mode
[   77.989989][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.027525][ T6204] netlink: 'syz.2.122': attribute type 3 has an invalid length.
[   78.032567][ T6204] netlink: 'syz.2.122': attribute type 2 has an invalid length.
[   78.053282][ T6204] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.122'.
[   78.249141][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.256331][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.260584][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.271313][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.278958][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.318398][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.331277][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.337307][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.340241][   T33] audit: type=1107 audit(1758387197.632:3): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[   78.347646][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.350339][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.448489][ T6212] netlink: 'syz.2.124': attribute type 2 has an invalid length.
[   78.451261][ T6212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.124'.
[   78.457098][ T5894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.461876][ T5894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.468711][ T5894] bond0 (unregistering): Released all slaves
[   78.668128][   T55] Bluetooth: hci2: Unable to find connection for big 0x00
[   78.917264][ T5894] hsr_slave_0: left promiscuous mode
[   78.920470][ T5894] hsr_slave_1: left promiscuous mode
[   78.923361][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.928080][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.932064][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.936960][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.959862][ T5894] veth1_macvtap: left promiscuous mode
[   78.965099][ T5894] veth0_macvtap: left promiscuous mode
[   78.968007][ T5894] veth1_vlan: left promiscuous mode
[   78.970342][ T5894] veth0_vlan: left promiscuous mode
[   79.431418][ T5894] team0 (unregistering): Port device team_slave_1 removed
[   79.466504][ T5894] team0 (unregistering): Port device team_slave_0 removed
[   79.919172][ T6209] chnl_net:caif_netlink_parms(): no params data found
[   79.971194][ T6207] chnl_net:caif_netlink_parms(): no params data found
[   80.262229][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.267877][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.271026][ T6209] bridge_slave_0: entered allmulticast mode
[   80.293381][ T6209] bridge_slave_0: entered promiscuous mode
[   80.329557][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.332604][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.337116][ T6209] bridge_slave_1: entered allmulticast mode
[   80.341313][ T6209] bridge_slave_1: entered promiscuous mode
[   80.374794][ T5857] Bluetooth: hci1: command tx timeout
[   80.377539][   T55] Bluetooth: hci0: command tx timeout
[   80.402735][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.406244][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.409440][ T6207] bridge_slave_0: entered allmulticast mode
[   80.413263][ T6207] bridge_slave_0: entered promiscuous mode
[   80.419473][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.422315][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.426401][ T6207] bridge_slave_1: entered allmulticast mode
[   80.433813][ T6207] bridge_slave_1: entered promiscuous mode
[   80.440042][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.466478][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.559750][ T6209] team0: Port device team_slave_0 added
[   80.572390][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.582199][ T6209] team0: Port device team_slave_1 added
[   80.643249][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.673384][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.693504][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.710556][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.819235][ T6207] team0: Port device team_slave_0 added
[   80.838363][ T6207] team0: Port device team_slave_1 added
[   80.841695][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.850239][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.865788][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.895590][ T5894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.970506][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.973528][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.989297][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.021877][ T5894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.091147][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.093959][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.113600][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.138999][ T5894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.204208][ T6209] hsr_slave_0: entered promiscuous mode
[   81.211689][ T6209] hsr_slave_1: entered promiscuous mode
[   81.216076][ T6209] debugfs: 'hsr0' already exists in 'hsr'
[   81.218333][ T6209] Cannot create hsr debugfs directory
[   81.242939][ T5894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.305247][ T6207] hsr_slave_0: entered promiscuous mode
[   81.308324][ T6207] hsr_slave_1: entered promiscuous mode
[   81.311200][ T6207] debugfs: 'hsr0' already exists in 'hsr'
[   81.315481][ T6207] Cannot create hsr debugfs directory
[   81.905979][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'.
[   81.932474][ T5894] bridge_slave_1: left allmulticast mode
[   81.938211][ T5894] bridge_slave_1: left promiscuous mode
[   81.940822][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.951184][ T5894] bridge_slave_0: left allmulticast mode
[   81.953500][ T5894] bridge_slave_0: left promiscuous mode
[   81.963471][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.153468][   T33] audit: type=1107 audit(1758387201.442:4): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=','
[   82.381756][ T5894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.394094][ T5894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.400112][ T5894] bond0 (unregistering): Released all slaves
[   82.450504][ T6209] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.454655][ T5857] Bluetooth: hci1: command tx timeout
[   82.454927][   T55] Bluetooth: hci0: command tx timeout
[   82.477732][ T6209] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.499980][ T6209] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.551965][ T6209] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.723885][ T6207] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.750063][ T5894] hsr_slave_0: left promiscuous mode
[   82.753042][ T5894] hsr_slave_1: left promiscuous mode
[   82.758884][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.761953][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.775145][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.778203][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.797754][ T5894] veth1_macvtap: left promiscuous mode
[   82.800031][ T5894] veth0_macvtap: left promiscuous mode
[   82.802370][ T5894] veth1_vlan: left promiscuous mode
[   82.805137][ T5894] veth0_vlan: left promiscuous mode
[   83.196118][ T5894] team0 (unregistering): Port device team_slave_1 removed
[   83.231902][ T5894] team0 (unregistering): Port device C removed
[   83.533563][ T6207] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.560730][ T6207] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.569916][ T6207] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.781049][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.833037][ T6209] 8021q: adding VLAN 0 to HW filter on device team0
[   83.850815][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.853834][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.885529][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.899747][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.903378][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.966883][ T6207] 8021q: adding VLAN 0 to HW filter on device team0
[   83.977264][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.979867][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.996480][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.999518][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.127445][ T6335] bridge_slave_1: left allmulticast mode
[   84.129868][ T6335] bridge_slave_1: left promiscuous mode
[   84.132445][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.536533][   T55] Bluetooth: hci1: command tx timeout
[   84.594731][   T55] Bluetooth: hci0: command tx timeout
[   84.639414][ T6335] bridge_slave_0: left allmulticast mode
[   84.641988][ T6335] bridge_slave_0: left promiscuous mode
[   84.647854][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.724114][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   84.730121][ T6336] netlink: 52 bytes leftover after parsing attributes in process `syz.2.141'.
[   84.768867][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.863584][ T6207] veth0_vlan: entered promiscuous mode
[   84.883710][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.911844][ T6207] veth1_vlan: entered promiscuous mode
[   84.990031][ T6207] veth0_macvtap: entered promiscuous mode
[   85.015110][ T6207] veth1_macvtap: entered promiscuous mode
[   85.056069][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.089263][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.119586][ T6304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.133288][ T6304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.141380][ T6304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.179729][ T6304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.251906][ T6209] veth0_vlan: entered promiscuous mode
[   85.339654][ T6209] veth1_vlan: entered promiscuous mode
[   85.368827][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.371965][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.429632][ T6209] veth0_macvtap: entered promiscuous mode
[   85.438346][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.441341][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.454088][ T6209] veth1_macvtap: entered promiscuous mode
[   85.475318][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.480326][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.543378][ T5894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.552918][ T5894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.556495][ T5894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.567627][ T5894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.664739][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.667354][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.690763][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.693429][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.591228][ T6414] netlink: 56 bytes leftover after parsing attributes in process `syz.3.160'.
[   86.629025][ T5857] Bluetooth: hci1: command tx timeout
[   86.631277][   T55] Bluetooth: hci0: command tx timeout
[   86.918905][ T6425] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.165'.
[   86.944149][ T6428] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.999489][ T6430] netlink: 13 bytes leftover after parsing attributes in process `syz.3.167'.
[   87.098718][ T6433] validate_nla: 1 callbacks suppressed
[   87.098749][ T6433] netlink: 'syz.4.169': attribute type 3 has an invalid length.
[   87.103702][ T6433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'.
[   88.295654][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   88.300294][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   89.159501][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'.
[   90.031767][ T6530] netlink: 'syz.3.208': attribute type 3 has an invalid length.
[   90.040224][ T6530] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.208'.
[   90.051384][ T6530] netlink: 'syz.3.208': attribute type 3 has an invalid length.
[   90.116814][ T6530] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.208'.
[   90.426088][ T6551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.213'.
[   90.430777][ T6551] unsupported nlmsg_type 40
[   90.525650][ T6554] netlink: 'syz.3.214': attribute type 10 has an invalid length.
[   90.531062][ T6554] netlink: 2 bytes leftover after parsing attributes in process `syz.3.214'.
[   90.545408][ T6549] netlink: 'syz.2.212': attribute type 3 has an invalid length.
[   90.548148][ T6549] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   90.551892][ T6554] team0: entered promiscuous mode
[   90.553689][ T6554] team_slave_0: entered promiscuous mode
[   90.565352][ T6554] team_slave_1: entered promiscuous mode
[   90.575595][ T6554] bridge0: port 3(team0) entered blocking state
[   90.579307][ T6554] bridge0: port 3(team0) entered disabled state
[   90.592244][ T6554] team0: entered allmulticast mode
[   90.594077][ T6554] team_slave_0: entered allmulticast mode
[   90.602239][ T6554] team_slave_1: entered allmulticast mode
[   90.609875][ T6554] bridge0: port 3(team0) entered blocking state
[   90.612319][ T6554] bridge0: port 3(team0) entered forwarding state
[   91.350314][ T6565] netlink: 'syz.3.219': attribute type 10 has an invalid length.
[   91.365716][ T6565] bridge0: port 3(team0) entered disabled state
[   91.368764][ T6565] team0: left allmulticast mode
[   91.370875][ T6565] team_slave_0: left allmulticast mode
[   91.373082][ T6565] team_slave_1: left allmulticast mode
[   91.379101][ T6565] team0: left promiscuous mode
[   91.381997][ T6565] team_slave_0: left promiscuous mode
[   91.385098][ T6565] team_slave_1: left promiscuous mode
[   91.387745][ T6565] bridge0: port 3(team0) entered disabled state
[   91.653158][ T6565] batman_adv: batadv0: Adding interface: team0
[   91.660526][ T6565] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.671938][ T6565] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   92.035441][ T6581] netlink: 'syz.2.225': attribute type 15 has an invalid length.
[   92.157487][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.160995][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.199640][ T6596] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   93.510416][ T6637] netlink: 'syz.3.249': attribute type 11 has an invalid length.
[   93.534648][ T6637] __nla_validate_parse: 1 callbacks suppressed
[   93.534665][ T6637] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.249'.
[   93.549418][ T6635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.572227][ T6643] netlink: 7 bytes leftover after parsing attributes in process `syz.2.252'.
[   93.585017][ T6643] netlink: 76 bytes leftover after parsing attributes in process `syz.2.252'.
[   93.682534][ T6652] netlink: 'syz.4.255': attribute type 7 has an invalid length.
[   95.428913][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'.
[   95.431933][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'.
[   97.227241][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[   97.468719][ T6732] netlink: 'syz.4.288': attribute type 2 has an invalid length.
[   97.471981][ T6732] netlink: 116 bytes leftover after parsing attributes in process `syz.4.288'.
[   97.559834][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.4.291'.
[   98.316299][ T6788] netlink: 'syz.4.305': attribute type 10 has an invalid length.
[   98.572259][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.602045][ T6788] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   99.273514][ T6858] lo speed is unknown, defaulting to 1000
[   99.281666][ T6858] lo speed is unknown, defaulting to 1000
[   99.288705][ T6858] lo speed is unknown, defaulting to 1000
[   99.505699][ T6461] lo speed is unknown, defaulting to 1000
[   99.509509][ T6858] infiniband syz2: set active
[   99.511386][ T6858] infiniband syz2: added lo
[   99.570072][ T6858] RDS/IB: syz2: added
[   99.581755][ T6858] smc: adding ib device syz2 with port count 1
[   99.587823][ T6858] smc:    ib device syz2 port 1 has pnetid 
[   99.592298][ T6461] lo speed is unknown, defaulting to 1000
[   99.598658][ T6858] lo speed is unknown, defaulting to 1000
[   99.798529][ T6858] lo speed is unknown, defaulting to 1000
[   99.817352][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'.
[   99.820254][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'.
[   99.929073][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.086273][ T6858] lo speed is unknown, defaulting to 1000
[  100.417297][ T6907] netlink: 177 bytes leftover after parsing attributes in process `syz.3.346'.
[  100.859868][ T6929] netlink: 'syz.3.355': attribute type 6 has an invalid length.
[  100.863793][ T6929] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.355'.
[  100.945510][ T6931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.356'.
[  101.214367][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'.
[  101.218645][ T6948] netlink: 2408 bytes leftover after parsing attributes in process `syz.2.360'.
[  101.229421][ T6948] netlink: 6052 bytes leftover after parsing attributes in process `syz.2.360'.
[  101.432469][ T6956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.497819][ T6959] netlink: 'syz.3.367': attribute type 1 has an invalid length.
[  101.501311][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'.
[  101.509824][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.367'.
[  101.742861][ T6965] lo speed is unknown, defaulting to 1000
[  102.202564][ T6970] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.216007][ T6970] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  102.438354][ T6988] tmpfs: Bad value for 'mode'
[  102.580732][ T6995] netlink: 'syz.3.378': attribute type 13 has an invalid length.
[  102.967748][ T7008] netlink: zone id is out of range
[  102.969938][ T7008] netlink: zone id is out of range
[  102.971782][ T7008] netlink: get zone limit has 8 unknown bytes
[  103.173093][ T7022] netlink: 'syz.4.391': attribute type 13 has an invalid length.
[  103.360834][ T7027] Illegal XDP return value 4294967274 on prog  (id 151) dev N/A, expect packet loss!
[  103.669450][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.691755][ T7022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.909560][ T5907] syz0: Port: 1 Link DOWN
[  103.915499][ T6304] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.949033][ T6304] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.952704][ T7039] netlink: 'syz.3.398': attribute type 13 has an invalid length.
[  103.972193][ T6304] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.977268][ T6304] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.969696][ T7094] netlink: 'syz.3.422': attribute type 58 has an invalid length.
[  104.973042][ T7094] __nla_validate_parse: 7 callbacks suppressed
[  104.973057][ T7094] netlink: 144 bytes leftover after parsing attributes in process `syz.3.422'.
[  105.663101][   T55] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  105.957389][ T7147] netlink: 'syz.3.446': attribute type 3 has an invalid length.
[  106.087421][ T7159] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.452'.
[  106.891009][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'.
[  107.110556][ T7194] netlink: 'syz.2.468': attribute type 19 has an invalid length.
[  107.519067][ T7202] netlink: 143 bytes leftover after parsing attributes in process `syz.4.472'.
[  107.523968][ T7202] netlink: 512 bytes leftover after parsing attributes in process `syz.4.472'.
[  107.546472][ T7198] netlink: 'syz.2.470': attribute type 3 has an invalid length.
[  107.549602][ T7198] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.470'.
[  107.609023][ T7206] netlink: 'syz.4.474': attribute type 1 has an invalid length.
[  107.623946][ T7206] netlink: 376 bytes leftover after parsing attributes in process `syz.4.474'.
[  107.774884][ T5857] Bluetooth: hci0: command tx timeout
[  108.229025][ T7233] netlink: 164 bytes leftover after parsing attributes in process `syz.2.486'.
[  108.372146][ T7237] netlink: 'syz.3.488': attribute type 21 has an invalid length.
[  108.382987][ T7237] netlink: 128 bytes leftover after parsing attributes in process `syz.3.488'.
[  108.403652][ T7237] netlink: 'syz.3.488': attribute type 4 has an invalid length.
[  108.420440][ T7237] netlink: 3 bytes leftover after parsing attributes in process `syz.3.488'.
[  108.847091][ T7260] netlink: 'syz.2.498': attribute type 21 has an invalid length.
[  108.922027][ T7266] netlink: 'syz.3.502': attribute type 9 has an invalid length.
[  109.279398][ T7283] netlink: 'syz.4.507': attribute type 10 has an invalid length.
[  109.936135][ T7275] delete_channel: no stack
[  110.009579][ T7283] syz.4.507 (7283) used greatest stack depth: 19768 bytes left
[  110.485897][ T7315] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  111.337445][ T7355] __nla_validate_parse: 3 callbacks suppressed
[  111.337458][ T7355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.539'.
[  111.343377][ T7355] netlink: 46 bytes leftover after parsing attributes in process `syz.4.539'.
[  111.352189][ T7355] netlink: 46 bytes leftover after parsing attributes in process `syz.4.539'.
[  112.137553][ T7384] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.549'.
[  112.141942][ T7383] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.549'.
[  112.157120][ T7384] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.549'.
[  115.346414][ T7426] netlink: 830 bytes leftover after parsing attributes in process `syz.3.567'.
[  115.350572][ T7426] bond_slave_0: entered promiscuous mode
[  115.353550][ T7426] bond_slave_1: entered promiscuous mode
[  115.468984][ T7426] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.567'.
[  116.079998][ T7459] netlink: 'syz.4.583': attribute type 3 has an invalid length.
[  116.082459][ T7459] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.583'.
[  116.598984][ T7490] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  116.656120][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.601'.
[  116.831735][ T7510] netlink: 22 bytes leftover after parsing attributes in process `syz.3.608'.
[  116.864276][ T7512] netlink: 'syz.4.609': attribute type 1 has an invalid length.
[  117.039528][ T7524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.613'.
[  117.076466][ T7527] netlink: 'syz.2.616': attribute type 11 has an invalid length.
[  117.090894][ T7527] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.616'.
[  117.959645][ T6304] tipc: Subscription rejected, illegal request
[  118.054274][ T7584] can: request_module (can-proto-5) failed.
[  118.119842][ T7584] can: request_module (can-proto-3) failed.
[  119.293715][ T7616] netlink: 'syz.3.654': attribute type 21 has an invalid length.
[  119.297500][ T7616] netlink: 128 bytes leftover after parsing attributes in process `syz.3.654'.
[  119.301296][ T7616] netlink: 'syz.3.654': attribute type 5 has an invalid length.
[  119.304381][ T7616] netlink: 'syz.3.654': attribute type 6 has an invalid length.
[  119.312570][ T7616] netlink: 3 bytes leftover after parsing attributes in process `syz.3.654'.
[  119.459259][ T7626] netlink: 'syz.3.660': attribute type 1 has an invalid length.
[  119.462424][ T7626] netlink: 'syz.3.660': attribute type 2 has an invalid length.
[  119.470613][ T7626] netlink: 'syz.3.660': attribute type 3 has an invalid length.
[  119.473843][ T7626] netlink: 'syz.3.660': attribute type 5 has an invalid length.
[  119.478520][ T7626] netlink: 9 bytes leftover after parsing attributes in process `syz.3.660'.
[  119.482125][ T7626] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.660'.
[  119.490008][ T7626] netlink: 9 bytes leftover after parsing attributes in process `syz.3.660'.
[  119.539444][ T7628] netlink: 198328 bytes leftover after parsing attributes in process `syz.3.662'.
[  120.394112][ T7640] bond0: (slave bond_slave_0): Releasing backup interface
[  120.700197][ T7660] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  120.703584][ T7660] openvswitch: netlink: Message has 6324 unknown bytes.
[  121.822508][ T7682] __nla_validate_parse: 4 callbacks suppressed
[  121.822528][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.684'.
[  121.854623][ T7682] netlink: 32 bytes leftover after parsing attributes in process `syz.3.684'.
[  123.030245][ T7699] validate_nla: 11 callbacks suppressed
[  123.030264][ T7699] netlink: 'syz.4.692': attribute type 10 has an invalid length.
[  123.050349][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.692'.
[  123.054182][ T7699] dummy0: entered promiscuous mode
[  123.074725][ T7699] dummy0: entered allmulticast mode
[  123.088068][ T7699] bridge0: port 3(dummy0) entered blocking state
[  123.091394][ T7699] bridge0: port 3(dummy0) entered disabled state
[  123.356569][ T7706] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.695'.
[  123.419873][ T7707] netlink: 'syz.4.695': attribute type 4 has an invalid length.
[  123.663747][ T7715] netlink: 'syz.3.699': attribute type 10 has an invalid length.
[  123.727191][ T7715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.737404][ T7715] batadv0: entered promiscuous mode
[  123.743902][ T7715] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  123.754336][ T7715] syz.3.699 (7715) used greatest stack depth: 19128 bytes left
[  125.354390][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'.
[  125.360626][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'.
[  125.478639][ T7750] netlink: 64 bytes leftover after parsing attributes in process `syz.2.715'.
[  125.588179][ T7761] netlink: 144 bytes leftover after parsing attributes in process `syz.3.720'.
[  126.425977][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[  126.818109][ T7788] netlink: 830 bytes leftover after parsing attributes in process `syz.2.729'.
[  126.949079][ T7801] netlink: 208 bytes leftover after parsing attributes in process `syz.4.737'.
[  127.343721][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'.
[  127.718248][ T7847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.759'.
[  127.721590][ T7847] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  128.055832][ T7853] netlink: 'syz.2.761': attribute type 3 has an invalid length.
[  128.841415][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'.
[  129.088854][ T7910] netlink: 'syz.2.780': attribute type 10 has an invalid length.
[  129.091212][ T7910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.780'.
[  129.094198][ T7910] ipvlan1: entered promiscuous mode
[  129.097023][ T7910] ipvlan1: entered allmulticast mode
[  129.098684][ T7910] veth0_vlan: entered allmulticast mode
[  129.111026][ T7910] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  129.137945][ T7913] netlink: 104 bytes leftover after parsing attributes in process `syz.4.784'.
[  130.367332][ T7946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.647093][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'.
[  130.968062][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.800'.
[  130.970962][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.800'.
[  131.356414][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  131.839830][ T7984] netlink: 'syz.2.808': attribute type 40 has an invalid length.
[  132.311750][ T8004] sctp: [Deprecated]: syz.4.818 (pid 8004) Use of int in maxseg socket option.
[  132.311750][ T8004] Use struct sctp_assoc_value instead
[  132.440872][ T8010] __nla_validate_parse: 1 callbacks suppressed
[  132.440888][ T8010] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.821'.
[  132.447862][ T8010] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.821'.
[  132.453931][ T8007] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.821'.
[  132.578324][ T8016] netlink: 'syz.3.823': attribute type 2 has an invalid length.
[  132.581917][ T8016] netlink: 'syz.3.823': attribute type 8 has an invalid length.
[  132.586303][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.823'.
[  132.699504][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.702109][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.018024][ T8029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.829'.
[  133.286771][ T8042] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.835'.
[  133.290647][ T8042] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.835'.
[  133.592229][ T8052] netlink: 'syz.3.840': attribute type 10 has an invalid length.
[  133.597789][ T8052] netlink: 168 bytes leftover after parsing attributes in process `syz.3.840'.
[  133.729438][ T8056] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.734188][ T8056] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.838495][ T8088] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.853'.
[  134.851049][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'.
[  135.601011][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  135.606071][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  135.610826][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  135.616382][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  135.619946][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.151229][ T8100] lo speed is unknown, defaulting to 1000
[  136.339766][ T5874] bridge0: port 3(dummy0) entered disabled state
[  136.349496][ T5874] bridge_slave_1: left allmulticast mode
[  136.351902][ T5874] bridge_slave_1: left promiscuous mode
[  136.356588][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.385505][ T5874] bridge_slave_0: left allmulticast mode
[  136.387826][ T5874] bridge_slave_0: left promiscuous mode
[  136.390261][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.408315][ T8115] netlink: 'syz.3.866': attribute type 9 has an invalid length.
[  136.699346][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.704296][ T5874] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  136.708692][ T5874] bond0 (unregistering): Released all slaves
[  137.176850][ T8100] chnl_net:caif_netlink_parms(): no params data found
[  137.535927][ T5874] hsr_slave_0: left promiscuous mode
[  137.542218][ T5874] hsr_slave_1: left promiscuous mode
[  137.553648][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.578640][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.667185][   T55] Bluetooth: hci1: command tx timeout
[  137.902795][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  137.949838][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  138.277729][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.280824][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.284082][ T8100] bridge_slave_0: entered allmulticast mode
[  138.288737][ T8100] bridge_slave_0: entered promiscuous mode
[  138.302126][ T8157] lo speed is unknown, defaulting to 1000
[  138.303324][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.308912][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.312419][ T8100] bridge_slave_1: entered allmulticast mode
[  138.328292][ T8100] bridge_slave_1: entered promiscuous mode
[  138.445876][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.456462][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.524637][ T8178] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  138.527683][ T8178] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  138.529222][ T8100] team0: Port device team_slave_0 added
[  138.553911][ T8100] team0: Port device team_slave_1 added
[  138.644061][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.648408][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.660864][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.671833][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.676643][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.690302][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.810831][ T8100] hsr_slave_0: entered promiscuous mode
[  138.814426][ T8100] hsr_slave_1: entered promiscuous mode
[  139.122364][ T8100] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  139.130848][ T8100] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  139.140508][ T8100] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  139.148951][ T8100] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  139.312986][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.397566][ T8100] 8021q: adding VLAN 0 to HW filter on device team0
[  139.429462][  T619] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.432378][  T619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.462759][  T619] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.465973][  T619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.641223][ T8211] wg2: entered promiscuous mode
[  139.643283][ T8211] wg2: entered allmulticast mode
[  139.657610][ T8217] lo: entered allmulticast mode
[  139.664000][    T9] lo speed is unknown, defaulting to 1000
[  139.669046][    T9] syz2: Port: 1 Link DOWN
[  139.671312][    T9] lo speed is unknown, defaulting to 1000
[  139.683726][ T8217] lo: entered promiscuous mode
[  139.687977][ T8217] lo: left allmulticast mode
[  139.697320][ T5907] lo speed is unknown, defaulting to 1000
[  139.699781][ T5907] syz2: Port: 1 Link ACTIVE
[  139.705370][ T5907] lo speed is unknown, defaulting to 1000
[  139.735248][   T55] Bluetooth: hci1: command tx timeout
[  139.810018][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.006382][ T8240] netlink: 'syz.2.900': attribute type 21 has an invalid length.
[  140.117046][ T8100] veth0_vlan: entered promiscuous mode
[  140.138342][ T8100] veth1_vlan: entered promiscuous mode
[  140.183927][ T8100] veth0_macvtap: entered promiscuous mode
[  140.193189][ T8100] veth1_macvtap: entered promiscuous mode
[  140.219126][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.237073][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.256941][ T6304] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.260245][ T6304] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.263631][ T6304] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.269658][ T6304] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.287573][ T8257] __nla_validate_parse: 2 callbacks suppressed
[  140.287590][ T8257] netlink: 4200 bytes leftover after parsing attributes in process `syz.2.906'.
[  140.403636][  T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.409708][  T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.451694][  T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.460787][  T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.054909][ T8282] openvswitch: netlink: IP tunnel dst address not specified
[  141.528519][ T8300] netlink: 68 bytes leftover after parsing attributes in process `syz.5.923'.
[  141.814766][   T55] Bluetooth: hci1: command tx timeout
[  141.847383][ T8316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.929'.
[  141.851359][ T8315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.929'.
[  141.856591][ T8316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.929'.
[  142.418489][ T8343] openvswitch: netlink: Flow actions attr not present in new flow.
[  142.769049][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'.
[  142.966076][ T8373] netlink: 'syz.5.956': attribute type 21 has an invalid length.
[  142.969369][ T8373] netlink: 'syz.5.956': attribute type 20 has an invalid length.
[  143.897957][   T55] Bluetooth: hci1: command tx timeout
[  145.361251][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'.
[  145.423031][ T8475] netlink: 830 bytes leftover after parsing attributes in process `syz.2.999'.
[  146.199282][ T8492] sctp: [Deprecated]: syz.5.1005 (pid 8492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  146.199282][ T8492] Use struct sctp_sack_info instead
[  146.639819][ T8504] netlink: 'syz.3.1011': attribute type 23 has an invalid length.
[  146.806490][ T8511] netlink: 'syz.3.1014': attribute type 317 has an invalid length.
[  146.991149][ T8527] netlink: 495 bytes leftover after parsing attributes in process `syz.3.1021'.
[  147.144550][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'.
[  147.221705][   T55] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7
[  148.226099][ T8560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1038'.
[  148.248850][ T8560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1038'.
[  148.253049][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'.
[  148.759312][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1045'.
[  148.764267][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1045'.
[  148.770684][ T8577] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1045'.
[  149.158356][ T8602] netlink: 'syz.3.1055': attribute type 2 has an invalid length.
[  149.312286][ T8612] netlink: 'syz.5.1059': attribute type 39 has an invalid length.
[  149.569945][ T8630] netlink: 'syz.5.1064': attribute type 5 has an invalid length.
[  150.729303][   T12] syzkaller0: tun_net_xmit 76
[  150.732030][   T12] syzkaller0: tun_net_xmit 48
[  150.756657][   T95] syzkaller0: tun_net_xmit 76
[  150.834887][   T10] syzkaller0: tun_net_xmit 76
[  151.878333][ T8716] netlink: 'syz.2.1094': attribute type 21 has an invalid length.
[  151.880882][ T8716] netlink: 'syz.2.1094': attribute type 11 has an invalid length.
[  151.939816][ T8717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  151.942753][ T8717] IPv6: NLM_F_CREATE should be set when creating new route
[  151.945204][ T8717] IPv6: NLM_F_CREATE should be set when creating new route
[  154.024239][ T8744] netlink: 'syz.5.1107': attribute type 1 has an invalid length.
[  156.029925][ T8756] __nla_validate_parse: 1 callbacks suppressed
[  156.029941][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'.
[  156.348784][ T8781] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1123'.
[  157.706211][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'.
[  157.709161][ T8812] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  157.909968][ T8816] netlink: 'syz.5.1138': attribute type 10 has an invalid length.
[  157.917901][ T8816] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1138'.
[  159.112387][ T8838] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.1149'.
[  159.297480][ T8843] netlink: 'syz.2.1150': attribute type 39 has an invalid length.
[  160.550958][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'.
[  160.572295][ T8866] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1161'.
[  160.739608][ T8876] netlink: 'syz.3.1166': attribute type 2 has an invalid length.
[  160.750097][ T8876] k*: entered promiscuous mode
[  160.789596][ T8879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.959447][ T8884] IPv6: Can't replace route, no match found
[  161.257166][ T8890] netlink: 'syz.5.1172': attribute type 10 has an invalid length.
[  161.259847][ T8890] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1172'.
[  161.283013][ T8890] batman_adv: batadv0: Adding interface: hsr_slave_1
[  161.303107][ T8890] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.315848][ T8890] batman_adv: batadv0: Interface activated: hsr_slave_1
[  161.562567][ T8908] netlink: 824 bytes leftover after parsing attributes in process `syz.5.1181'.
[  161.859715][ T8938] netlink: 'syz.3.1196': attribute type 2 has an invalid length.
[  162.252026][ T8960] netlink: 'syz.5.1204': attribute type 10 has an invalid length.
[  162.257530][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1204'.
[  164.118052][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  164.122606][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  164.127863][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  164.131987][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  164.137994][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  164.160948][ T9000] lo speed is unknown, defaulting to 1000
[  164.364077][ T9000] chnl_net:caif_netlink_parms(): no params data found
[  164.436155][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.439170][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.442081][ T9000] bridge_slave_0: entered allmulticast mode
[  164.446539][ T9000] bridge_slave_0: entered promiscuous mode
[  164.452527][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.456149][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.459114][ T9000] bridge_slave_1: entered allmulticast mode
[  164.463301][ T9000] bridge_slave_1: entered promiscuous mode
[  164.491919][ T9000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.497566][ T9000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.526973][ T9000] team0: Port device team_slave_0 added
[  164.531840][ T9000] team0: Port device team_slave_1 added
[  164.557249][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.559345][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.568071][ T9000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.573368][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.576751][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.586158][ T9000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.624897][ T9000] hsr_slave_0: entered promiscuous mode
[  164.627372][ T9000] hsr_slave_1: entered promiscuous mode
[  164.630247][ T9000] debugfs: 'hsr0' already exists in 'hsr'
[  164.632394][ T9000] Cannot create hsr debugfs directory
[  164.756778][ T9000] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  164.761445][ T9000] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  164.766679][ T9000] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  164.773146][ T9000] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  164.835863][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.850113][ T9000] 8021q: adding VLAN 0 to HW filter on device team0
[  164.859650][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.862464][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.872506][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.875415][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.052730][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.067566][ T9022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.349554][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.354047][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.358960][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.362954][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.367906][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.482953][ T9039] netlink: 'syz.5.1224': attribute type 10 has an invalid length.
[  166.004254][ T5874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.023551][ T9039] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.028674][ T9039] team0: Port device bond0 added
[  166.078574][ T5874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.087887][ T9000] veth0_vlan: entered promiscuous mode
[  166.100653][ T9035] lo speed is unknown, defaulting to 1000
[  166.105502][ T9000] veth1_vlan: entered promiscuous mode
[  166.131390][ T9000] veth0_macvtap: entered promiscuous mode
[  166.169980][ T5874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.198941][ T9000] veth1_macvtap: entered promiscuous mode
[  166.224819][ T5857] Bluetooth: hci0: command tx timeout
[  166.234978][ T9000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.246001][ T9000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.276175][ T5874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.319766][ T5894] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.323639][ T5894] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.328329][ T5894] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.332146][ T5894] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.439707][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.445320][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.502119][  T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.509086][ T5874] bridge_slave_1: left allmulticast mode
[  166.511275][ T5874] bridge_slave_1: left promiscuous mode
[  166.513336][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.517328][  T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.520731][  T619] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  166.523277][ T5874] bridge_slave_0: left allmulticast mode
[  166.530945][ T5874] bridge_slave_0: left promiscuous mode
[  166.533087][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.573712][ T5874] bond_slave_0: left promiscuous mode
[  166.576786][ T5874] bond_slave_1: left promiscuous mode
[  166.579309][ T5874] batadv0: left promiscuous mode
[  167.419877][ T5857] Bluetooth: hci2: command tx timeout
[  168.294754][ T5857] Bluetooth: hci0: command tx timeout
[  168.340847][ T9047] delete_channel: no stack
[  168.342795][ T9047] delete_channel: no stack
[  169.088613][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.096250][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.102465][ T5874] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  169.249060][ T5874] bond0 (unregistering): Released all slaves
[  169.351992][ T5874] k*: left promiscuous mode
[  169.425210][ T9035] chnl_net:caif_netlink_parms(): no params data found
[  169.495174][ T5857] Bluetooth: hci2: command tx timeout
[  169.719625][ T9075] netlink: 'syz.7.1237': attribute type 3 has an invalid length.
[  169.727689][ T9075] netlink: 'syz.7.1237': attribute type 1 has an invalid length.
[  169.731586][ T9075] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.1237'.
[  169.776683][ T9083] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1238'.
[  169.822895][ T9035] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.829807][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.832768][ T9035] bridge_slave_0: entered allmulticast mode
[  169.842353][ T9035] bridge_slave_0: entered promiscuous mode
[  169.855165][ T9035] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.858589][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.861595][ T9035] bridge_slave_1: entered allmulticast mode
[  169.872485][ T9035] bridge_slave_1: entered promiscuous mode
[  169.971034][ T5857] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  169.992751][ T9035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.004216][ T9035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.329510][ T9035] team0: Port device team_slave_0 added
[  170.334294][ T9035] team0: Port device team_slave_1 added
[  170.374988][ T5857] Bluetooth: hci0: command tx timeout
[  170.569726][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.577090][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.602024][ T9035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.618055][ T9035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.621007][ T9035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.636743][ T9035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.892167][ T9129] sysfs: Unknown parameter 'subj_type'
[  170.906676][ T9035] hsr_slave_0: entered promiscuous mode
[  170.909278][ T9035] hsr_slave_1: entered promiscuous mode
[  170.938935][ T9035] debugfs: 'hsr0' already exists in 'hsr'
[  170.941130][ T9035] Cannot create hsr debugfs directory
[  170.989984][ T5874] hsr_slave_0: left promiscuous mode
[  170.992978][ T5874] hsr_slave_1: left promiscuous mode
[  171.004945][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.015594][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.032720][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.036575][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.073539][ T5874] batman_adv: batadv0: Removing interface: team0
[  171.122338][ T5874] veth1_macvtap: left promiscuous mode
[  171.125943][ T5874] veth0_macvtap: left promiscuous mode
[  171.129391][ T5874] veth1_vlan: left promiscuous mode
[  171.131605][ T5874] veth0_vlan: left promiscuous mode
[  171.526821][ T9145] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1259'.
[  171.575914][ T5857] Bluetooth: hci2: command tx timeout
[  172.112589][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  172.181309][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  172.465228][ T5857] Bluetooth: hci0: command tx timeout
[  172.814018][   T28] smc: removing ib device syz2
[  172.877438][ T6461] lo speed is unknown, defaulting to 1000
[  172.879691][ T6461] syz2: Port: 1 Link DOWN
[  172.883782][ T9145] hsr_slave_0: left promiscuous mode
[  172.895485][ T9145] hsr_slave_1: left promiscuous mode
[  173.544908][ T9035] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  173.561109][ T9035] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  173.572016][ T9035] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  173.598572][ T9035] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  173.664684][ T5857] Bluetooth: hci2: command tx timeout
[  173.896028][ T9035] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.937322][ T9035] 8021q: adding VLAN 0 to HW filter on device team0
[  173.963102][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.966173][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.996307][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.999321][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.215162][ T9035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.556598][ T9035] veth0_vlan: entered promiscuous mode
[  174.567804][ T9035] veth1_vlan: entered promiscuous mode
[  174.593081][ T9035] veth0_macvtap: entered promiscuous mode
[  174.613546][ T9035] veth1_macvtap: entered promiscuous mode
[  174.633731][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.645452][ T9035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.653982][ T5873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.660232][ T5873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.663247][ T5873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.674955][ T5873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.748803][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1272'.
[  174.767467][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1272'.
[  174.792441][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1272'.
[  174.801732][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.805458][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.842779][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.855512][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.996660][ T9206] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1214'.
[  175.001102][ T9205] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1214'.
[  175.013219][ T9206] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1214'.
[  175.131791][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1275'.
[  177.617603][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1297'.
[  178.912233][ T9295] netlink: 'syz.7.1313': attribute type 237 has an invalid length.
[  179.197138][ T9308] netlink: 'syz.7.1319': attribute type 29 has an invalid length.
[  179.226484][ T9308] netlink: 'syz.7.1319': attribute type 29 has an invalid length.
[  179.905255][ T9329] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1328'.
[  180.762717][ T9345] netlink: 64691 bytes leftover after parsing attributes in process `syz.6.1335'.
[  181.463426][ T9366] netlink: 'syz.6.1344': attribute type 10 has an invalid length.
[  181.472886][ T9366] team0: Port device dummy0 added
[  182.316483][ T9392] netlink: 'syz.6.1355': attribute type 10 has an invalid length.
[  182.319953][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1355'.
[  182.323822][ T9392] ipvlan1: entered promiscuous mode
[  182.330411][ T9392] ipvlan1: entered allmulticast mode
[  182.332545][ T9392] veth0_vlan: entered allmulticast mode
[  182.341439][ T9392] bridge0: port 3(ipvlan1) entered blocking state
[  182.344167][ T9392] bridge0: port 3(ipvlan1) entered disabled state
[  182.350386][ T9392] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  184.518618][ T9465] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1385'.
[  185.578279][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1395'.
[  185.594850][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1395'.
[  185.981693][ T9519] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  186.370606][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.385055][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.397131][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.402305][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.409379][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.459287][ T9537] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  186.692864][ T9532] chnl_net:caif_netlink_parms(): no params data found
[  186.838876][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.841768][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.849018][ T9532] bridge_slave_0: entered allmulticast mode
[  186.853150][ T9532] bridge_slave_0: entered promiscuous mode
[  186.863169][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.875658][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.878508][ T9532] bridge_slave_1: entered allmulticast mode
[  186.884437][ T9532] bridge_slave_1: entered promiscuous mode
[  186.902436][   T55] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  186.992863][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.003882][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.021681][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'.
[  187.055576][ T9532] team0: Port device team_slave_0 added
[  187.062324][ T9532] team0: Port device team_slave_1 added
[  187.106025][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.108885][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.124082][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.137467][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.140018][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.164054][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.272426][ T9532] hsr_slave_0: entered promiscuous mode
[  187.277123][ T9532] hsr_slave_1: entered promiscuous mode
[  187.280017][ T9532] debugfs: 'hsr0' already exists in 'hsr'
[  187.282252][ T9532] Cannot create hsr debugfs directory
[  187.394900][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1429'.
[  187.679535][ T9532] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  187.685845][ T9532] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  187.700356][ T9532] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  187.719868][ T9532] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  187.881260][ T9603] netlink: 64707 bytes leftover after parsing attributes in process `syz.6.1435'.
[  187.887411][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.913826][ T9532] 8021q: adding VLAN 0 to HW filter on device team0
[  187.931793][  T619] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.934683][  T619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.944118][  T619] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.947232][  T619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.239902][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.334118][ T9620] netlink: 'syz.7.1442': attribute type 5 has an invalid length.
[  188.362068][ T9620] : entered promiscuous mode
[  188.455017][   T55] Bluetooth: hci1: command tx timeout
[  188.558198][ T9532] veth0_vlan: entered promiscuous mode
[  188.568072][ T9532] veth1_vlan: entered promiscuous mode
[  188.619566][ T9532] veth0_macvtap: entered promiscuous mode
[  188.629509][ T9532] veth1_macvtap: entered promiscuous mode
[  188.668916][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.683866][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.700496][ T5873] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.713103][ T5873] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.720851][ T5873] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.731820][ T5873] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.747038][ T9635] netlink: 532 bytes leftover after parsing attributes in process `syz.7.1448'.
[  188.852878][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.867156][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.912878][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.917273][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.136938][ T9647] -1: renamed from syzkaller0
[  189.718637][ T9664] netlink: 'syz.7.1460': attribute type 10 has an invalid length.
[  189.762655][ T9664] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  189.919367][ T9675] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.1465'.
[  190.396122][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1478'.
[  190.534730][   T55] Bluetooth: hci1: command tx timeout
[  190.799893][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1488'.
[  190.823215][ T9730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.944880][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  190.947855][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[  190.950972][   T55] Bluetooth: hci0: hardware error 0x00
[  191.107268][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1494'.
[  192.088341][ T9748] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1494'.
[  192.140043][ T9763] netlink: 'syz.7.1502': attribute type 1 has an invalid length.
[  192.144372][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1502'.
[  192.284287][ T9775] netlink: 731 bytes leftover after parsing attributes in process `syz.6.1509'.
[  192.540886][ T9792] netlink: 'syz.7.1515': attribute type 4 has an invalid length.
[  192.543325][ T9792] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1515'.
[  192.550950][ T9792] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  192.614943][ T5857] Bluetooth: hci1: command tx timeout
[  192.812584][ T9803] netlink: 'syz.7.1521': attribute type 1 has an invalid length.
[  192.819001][ T9803] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1521'.
[  193.028902][ T5857] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  193.103331][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.107977][ T9818] netlink: 'syz.8.1528': attribute type 2 has an invalid length.
[  193.111523][ T9818] netlink: 51 bytes leftover after parsing attributes in process `syz.8.1528'.
[  193.469129][ T9823] netlink: 'syz.6.1531': attribute type 10 has an invalid length.
[  193.473558][ T9823] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1531'.
[  193.482823][ T9823] batadv0: entered promiscuous mode
[  193.486672][ T9823] batadv0: entered allmulticast mode
[  193.602054][ T9823] bridge0: port 3(batadv0) entered blocking state
[  193.609640][ T9823] bridge0: port 3(batadv0) entered disabled state
[  193.663015][ T9832] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1534'.
[  193.761081][ T9834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.033702][ T9823] bridge0: port 3(batadv0) entered blocking state
[  194.041859][ T9823] bridge0: port 3(batadv0) entered forwarding state
[  194.120399][ T5894] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  194.125220][ T5894] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  194.152043][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.158231][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.448704][ T9858] netlink: 'syz.8.1544': attribute type 10 has an invalid length.
[  194.455846][ T9858] vlan0: entered allmulticast mode
[  194.461930][ T9858] veth0_vlan: entered allmulticast mode
[  194.478053][ T9858] team0: Port device vlan0 added
[  194.657243][ T9868] netlink: 'syz.6.1551': attribute type 3 has an invalid length.
[  194.695047][   T55] Bluetooth: hci1: command tx timeout
[  196.238209][ T9934] netlink: 'syz.6.1577': attribute type 10 has an invalid length.
[  196.242063][ T9934] veth1_vlan: entered allmulticast mode
[  196.249994][ T9934] team0: Device veth1_vlan failed to register rx_handler
[  196.305251][ T9936] netlink: 'syz.6.1578': attribute type 10 has an invalid length.
[  196.329692][ T9936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  197.139910][   T55] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17
[  197.290795][ T9954] __nla_validate_parse: 3 callbacks suppressed
[  197.290807][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1585'.
[  197.585150][ T9964] netdevsim netdevsim8 : renamed from netdevsim0 (while UP)
[  198.132971][ T9996] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.1604'.
[  198.174373][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1605'.
[  199.393947][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1637'.
[  199.431543][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1636'.
[  199.897647][T10086] netlink: 'syz.8.1643': attribute type 3 has an invalid length.
[  199.900568][T10086] netlink: 'syz.8.1643': attribute type 1 has an invalid length.
[  199.903348][T10086] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.1643'.
[  200.658163][T10121] syzkaller0: entered promiscuous mode
[  200.660395][T10121] syzkaller0: entered allmulticast mode
[  200.911828][T10127] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1664'.
[  200.924808][T10127] openvswitch: netlink: Message has 4 unknown bytes.
[  200.981793][T10131] netlink: 'syz.6.1666': attribute type 10 has an invalid length.
[  200.997315][T10127] netlink: 'syz.7.1664': attribute type 39 has an invalid length.
[  202.453702][T10127] veth0_macvtap: left promiscuous mode
[  202.488649][T10131] bond0: (slave wlan1): Releasing backup interface
[  202.718423][T10141] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1669'.
[  202.851331][T10153] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1675'.
[  203.008757][T10153] netlink: 'syz.6.1675': attribute type 10 has an invalid length.
[  203.012926][T10153] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1675'.
[  203.158113][T10172] netlink: 'syz.8.1683': attribute type 4 has an invalid length.
[  203.167992][T10172] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1683'.
[  203.516363][T10193] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1694'.
[  203.524817][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1694'.
[  204.344119][T10207] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1698'.
[  204.351299][T10207] netlink: 6324 bytes leftover after parsing attributes in process `syz.6.1698'.
[  204.354140][T10207] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1698'.
[  205.142385][T10217] syzkaller0: entered promiscuous mode
[  205.144164][T10217] syzkaller0: entered allmulticast mode
[  205.171104][T10225] netlink: 'syz.7.1704': attribute type 1 has an invalid length.
[  205.453888][T10235] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1709'.
[  205.482132][T10243] netlink: 'syz.7.1713': attribute type 29 has an invalid length.
[  205.850983][T10249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.853970][T10249] IPv6: NLM_F_CREATE should be set when creating new route
[  205.856597][T10249] IPv6: NLM_F_CREATE should be set when creating new route
[  205.968586][   T55] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  206.660784][T10281] netlink: 'syz.8.1730': attribute type 1 has an invalid length.
[  206.817177][T10288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.847638][T10309] openvswitch: netlink: IP tunnel dst address not specified
[  207.946297][T10315] __nla_validate_parse: 1 callbacks suppressed
[  207.946310][T10315] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1744'.
[  208.621465][T10358] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1764'.
[  208.624747][T10358] netlink: zone id is out of range
[  208.626455][T10358] netlink: zone id is out of range
[  208.628310][T10358] netlink: zone id is out of range
[  208.630497][T10358] netlink: zone id is out of range
[  208.632278][T10358] netlink: zone id is out of range
[  208.633980][T10358] netlink: zone id is out of range
[  208.645588][T10358] netlink: zone id is out of range
[  208.648604][T10358] netlink: zone id is out of range
[  208.706989][T10360] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1765'.
[  209.890693][T10391] netlink: 'syz.8.1778': attribute type 4 has an invalid length.
[  210.226169][T10410] netlink: 'syz.7.1787': attribute type 21 has an invalid length.
[  210.346156][T10414] netlink: 'syz.6.1785': attribute type 10 has an invalid length.
[  211.284310][T10440] netlink: 'syz.8.1799': attribute type 2 has an invalid length.
[  211.289463][T10440] netlink: 'syz.8.1799': attribute type 8 has an invalid length.
[  211.292610][T10440] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1799'.
[  211.569530][T10457] netlink: 'syz.6.1808': attribute type 2 has an invalid length.
[  211.573208][T10457] netlink: 'syz.6.1808': attribute type 8 has an invalid length.
[  211.580436][T10457] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1808'.
[  211.932655][T10462] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1810'.
[  212.231983][T10470] netlink: 'syz.8.1814': attribute type 14 has an invalid length.
[  212.428824][T10487] C: renamed from team_slave_0 (while UP)
[  212.432298][T10487] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1820'.
[  213.593175][T10512] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1833'.
[  213.599257][T10512] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1833'.
[  213.937034][T10538] netlink: 'syz.7.1844': attribute type 14 has an invalid length.
[  215.281525][T10577] netlink: 'syz.7.1861': attribute type 1 has an invalid length.
[  215.284402][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1861'.
[  217.265783][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1884'.
[  219.325662][T10706] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.1920'.
[  219.384393][T10710] netlink: 10 bytes leftover after parsing attributes in process `syz.8.1922'.
[  219.469806][T10718] netlink: 'syz.6.1924': attribute type 1 has an invalid length.
[  219.752991][T10733] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1930'.
[  219.787883][T10728] siw: device registration error -23
[  219.901223][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1939'.
[  219.905651][T10747] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1939'.
[  221.454104][T10782] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.476851][T10782] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.961512][T10784] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1955'.
[  221.965642][T10784] bond_slave_0: entered promiscuous mode
[  221.968036][T10784] bond_slave_1: entered promiscuous mode
[  222.003303][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1956'.
[  223.157462][T10799] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1961'.
[  223.160458][T10799] net_ratelimit: 76 callbacks suppressed
[  223.160479][T10799] netlink: zone id is out of range
[  223.163948][T10799] netlink: zone id is out of range
[  223.166575][T10799] netlink: zone id is out of range
[  223.168171][T10799] netlink: zone id is out of range
[  223.169841][T10799] netlink: zone id is out of range
[  223.171458][T10799] netlink: zone id is out of range
[  223.173043][T10799] netlink: zone id is out of range
[  223.174995][T10799] netlink: zone id is out of range
[  223.176866][T10799] netlink: zone id is out of range
[  223.178695][T10799] netlink: zone id is out of range
[  223.208715][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1962'.
[  223.828761][T10815] netlink: 'syz.6.1968': attribute type 39 has an invalid length.
[  224.299013][T10841] netlink: 'syz.6.1980': attribute type 13 has an invalid length.
[  224.301982][T10841] netlink: 'syz.6.1980': attribute type 17 has an invalid length.
[  224.666473][T10866] netlink: 'syz.8.1990': attribute type 10 has an invalid length.
[  225.447654][T10899] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2005'.
[  225.862792][T10927] netlink: 200 bytes leftover after parsing attributes in process `syz.8.2018'.
[  225.933353][T10932] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.2022'.
[  226.219524][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2026'.
[  226.230726][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2026'.
[  226.439280][T10948] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2028'.
[  227.881292][T10978] delete_channel: no stack
[  228.079201][T11010] netlink: 'syz.6.2055': attribute type 3 has an invalid length.
[  228.082894][T11010] netlink: 'syz.6.2055': attribute type 1 has an invalid length.
[  228.088873][T11010] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.2055'.
[  228.725412][T11045] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2066'.
[  228.728976][T11045] net_ratelimit: 76 callbacks suppressed
[  228.728990][T11045] netlink: zone id is out of range
[  228.733440][T11045] netlink: zone id is out of range
[  228.739462][T11045] netlink: get zone limit has 8 unknown bytes
[  229.450604][T11061] netlink: 26 bytes leftover after parsing attributes in process `syz.6.2073'.
[  230.530439][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2076'.
[  230.722295][T11078] netlink: 'syz.8.2081': attribute type 4 has an invalid length.
[  232.636483][T11125] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.662267][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2105'.
[  232.967975][T11156] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.2116'.
[  235.015894][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.023608][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.029175][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.033300][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.055712][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.079273][T11203] netlink: 'syz.6.2136': attribute type 21 has an invalid length.
[  235.084751][T11203] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2136'.
[  235.090993][T11204] netlink: 'syz.8.2135': attribute type 2 has an invalid length.
[  235.305520][T11196] chnl_net:caif_netlink_parms(): no params data found
[  235.469026][T11196] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.472027][T11196] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.482954][T11196] bridge_slave_0: entered allmulticast mode
[  235.491778][T11196] bridge_slave_0: entered promiscuous mode
[  235.506607][T11196] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.509718][T11196] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.512687][T11196] bridge_slave_1: entered allmulticast mode
[  235.526431][T11196] bridge_slave_1: entered promiscuous mode
[  235.549047][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2147'.
[  235.552381][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2147'.
[  235.599394][T11196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.607138][T11196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.655180][T11196] team0: Port device team_slave_0 added
[  235.660231][T11196] team0: Port device team_slave_1 added
[  235.703429][T11196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.711012][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.722046][T11196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.755962][T11196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.758918][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.780165][T11196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.840778][T11196] hsr_slave_0: entered promiscuous mode
[  235.845166][T11196] hsr_slave_1: entered promiscuous mode
[  235.848469][T11196] debugfs: 'hsr0' already exists in 'hsr'
[  235.850879][T11196] Cannot create hsr debugfs directory
[  235.970395][T11250] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2154'.
[  236.076863][T11254] sit0: entered allmulticast mode
[  236.129230][T11196] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  236.167644][T11196] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  236.186069][T11196] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  236.198388][T11196] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  236.257115][T11196] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.259387][T11196] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.262209][T11196] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.264887][T11196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.338475][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.342189][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.600797][T11196] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.623157][T11196] 8021q: adding VLAN 0 to HW filter on device team0
[  236.638056][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.641162][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.660422][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.663409][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.011220][T11196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.095287][   T55] Bluetooth: hci3: command tx timeout
[  237.334309][T11196] veth0_vlan: entered promiscuous mode
[  237.349545][T11196] veth1_vlan: entered promiscuous mode
[  237.390165][T11196] veth0_macvtap: entered promiscuous mode
[  237.400708][T11196] veth1_macvtap: entered promiscuous mode
[  237.433108][T11196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.454128][T11196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.482139][ T5873] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.486127][ T5873] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.489733][ T5873] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.508856][ T5873] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.175741][   T55] Bluetooth: hci3: command tx timeout
[  240.611101][T11319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.619384][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.633592][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.685555][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.688860][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.820512][   T33] audit: type=1107 audit(1758387360.112:5): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  241.264865][   T55] Bluetooth: hci3: command tx timeout
[  242.103142][T11363] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2196'.
[  242.339496][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2199'.
[  242.343179][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2199'.
[  243.341201][   T55] Bluetooth: hci3: command tx timeout
[  243.408290][T11406] netlink: 'syz.9.2216': attribute type 4 has an invalid length.
[  243.411095][T11406] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.2216'.
[  243.543013][T11418] netlink: 'syz.8.2222': attribute type 210 has an invalid length.
[  243.978889][T11434] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2224'.
[  245.742898][T11460] netlink: 'syz.9.2240': attribute type 2 has an invalid length.
[  245.819255][T11466] netlink: 'syz.9.2243': attribute type 5 has an invalid length.
[  245.936960][T11473] netlink: 'syz.8.2245': attribute type 10 has an invalid length.
[  245.939759][T11473] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2245'.
[  246.091532][T11489] netlink: 'syz.6.2251': attribute type 1 has an invalid length.
[  246.120717][T11473] team0: Port device vlan0 removed
[  246.143950][T11493] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2254'.
[  246.333441][T11505] netlink: 'syz.6.2260': attribute type 1 has an invalid length.
[  246.337525][T11505] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.2260'.
[  246.454143][T11515] netlink: 'syz.6.2265': attribute type 9 has an invalid length.
[  246.460170][T11515] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.2265'.
[  246.553607][T11523] netlink: 'syz.8.2269': attribute type 33 has an invalid length.
[  246.557887][T11523] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2269'.
[  247.192626][T11569] __nla_validate_parse: 3 callbacks suppressed
[  247.192641][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2291'.
[  247.732503][T11595] netlink: 'syz.9.2303': attribute type 1 has an invalid length.
[  248.200116][T11581] bond0: (slave bond_slave_0): Releasing backup interface
[  249.143197][T11639] validate_nla: 3 callbacks suppressed
[  249.143218][T11639] netlink: 'syz.8.2322': attribute type 1 has an invalid length.
[  249.153425][T11639] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.2322'.
[  249.190990][T11632] netlink: 'syz.9.2319': attribute type 10 has an invalid length.
[  249.193975][T11632] netlink: 55 bytes leftover after parsing attributes in process `syz.9.2319'.
[  249.573556][T11652] netlink: 'syz.8.2327': attribute type 1 has an invalid length.
[  250.118357][T11666] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2334'.
[  250.603221][T11694] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2348'.
[  250.921840][T11694] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2348'.
[  250.962607][T11706] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2353'.
[  251.115660][T11694] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2348'.
[  251.162172][T11714] netlink: 'syz.9.2355': attribute type 2 has an invalid length.
[  251.168494][T11714] netlink: 'syz.9.2355': attribute type 1 has an invalid length.
[  251.643513][T11729] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2363'.
[  252.254723][T11760] netlink: 'syz.8.2376': attribute type 16 has an invalid length.
[  252.257910][T11760] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2376'.
[  252.274573][T11760] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.710728][T11779] netlink: 'syz.6.2384': attribute type 1 has an invalid length.
[  252.848019][T11781] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2383'.
[  252.863315][T11785] netlink: 'syz.6.2386': attribute type 10 has an invalid length.
[  252.869378][T11785] lo: entered promiscuous mode
[  252.892790][T11785] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  254.417413][T11836] netlink: 'syz.9.2407': attribute type 4 has an invalid length.
[  254.774341][T11853] netlink: 'syz.8.2415': attribute type 8 has an invalid length.
[  254.793976][T11853] netlink: 'syz.8.2415': attribute type 3 has an invalid length.
[  254.818337][T11853] netlink: 153952 bytes leftover after parsing attributes in process `syz.8.2415'.
[  255.216012][T11882] netlink: 'syz.8.2426': attribute type 2 has an invalid length.
[  255.219369][T11882] netlink: 51 bytes leftover after parsing attributes in process `syz.8.2426'.
[  255.438159][T11886] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2429'.
[  255.441320][T11886] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2429'.
[  255.479472][T11891] netlink: 'syz.8.2431': attribute type 3 has an invalid length.
[  255.482415][T11891] netlink: 'syz.8.2431': attribute type 1 has an invalid length.
[  255.490853][T11891] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.2431'.
[  255.577832][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.580697][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.103395][T11927] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2447'.
[  256.253567][T11934] netlink: 'syz.8.2447': attribute type 11 has an invalid length.
[  256.281884][T11934] netlink: 149476 bytes leftover after parsing attributes in process `syz.8.2447'.
[  256.362427][T11927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.631426][T12012] netlink: 'syz.9.2484': attribute type 17 has an invalid length.
[  257.636323][T12012] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2484'.
[  257.723016][T12020] netlink: 'syz.8.2488': attribute type 10 has an invalid length.
[  259.067823][T12060] netlink: 'syz.6.2506': attribute type 21 has an invalid length.
[  259.071279][T12060] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2506'.
[  259.133144][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2507'.
[  259.169132][T12062] netlink: 'syz.6.2507': attribute type 1 has an invalid length.
[  259.172392][T12062] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2507'.
[  259.247353][T12064] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2508'.
[  259.989107][T12089] validate_nla: 1 callbacks suppressed
[  259.989122][T12089] netlink: 'syz.8.2517': attribute type 16 has an invalid length.
[  259.993684][T12089] netlink: 'syz.8.2517': attribute type 3 has an invalid length.
[  259.996902][T12089] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2517'.
[  260.187716][T12095] delete_channel: no stack
[  260.192795][T12095] delete_channel: no stack
[  260.650953][T12107] netlink: 'syz.9.2526': attribute type 9 has an invalid length.
[  260.653979][T12107] netlink: 211924 bytes leftover after parsing attributes in process `syz.9.2526'.
[  261.838120][T12145] netlink: 'syz.8.2540': attribute type 22 has an invalid length.
[  261.956623][T12151] netlink: 'syz.6.2543': attribute type 21 has an invalid length.
[  262.234127][T12161] netlink: 'syz.6.2547': attribute type 10 has an invalid length.
[  262.239399][T12161] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2547'.
[  262.337109][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2550'.
[  262.521779][T12173] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  263.365013][T12185] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2556'.
[  263.368884][T12180] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2556'.
[  263.448530][T12193] netlink: 'syz.6.2562': attribute type 10 has an invalid length.
[  263.451533][T12193] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2562'.
[  263.483807][T12195] raw_sendmsg: syz.9.2563 forgot to set AF_INET. Fix it!
[  263.691490][T12208] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2569'.
[  263.762287][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2570'.
[  263.768610][T12210] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2570'.
[  263.772532][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2570'.
[  263.910995][T12210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  264.062511][T12238] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2584'.
[  264.062713][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2583'.
[  264.067021][T12238] tc_dump_action: action bad kind
[  264.484322][T12243] syz.6.2585 (12243) used greatest stack depth: 18920 bytes left
[  264.765369][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'.
[  266.177930][T12321] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  267.082425][T12333] netlink: 'syz.9.2616': attribute type 3 has an invalid length.
[  267.093494][T12333] netlink: 'syz.9.2616': attribute type 2 has an invalid length.
[  267.133065][T12339] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  267.208155][T12347] netlink: 'syz.8.2623': attribute type 39 has an invalid length.
[  267.329514][T12358] openvswitch: netlink: Missing key (keys=2000040, expected=2000)
[  267.671369][T12387] syzkaller0: entered promiscuous mode
[  267.673338][T12387] syzkaller0: entered allmulticast mode
[  270.932966][   T55] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3
[  271.548426][T12437] __nla_validate_parse: 3 callbacks suppressed
[  271.548523][T12437] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.2666'.
[  274.092212][T12501] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  274.100782][T12501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.757275][T12513] netlink: 'syz.6.2698': attribute type 1 has an invalid length.
[  274.760395][T12513] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2698'.
[  274.968232][T12517] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2700'.
[  274.973366][T12517] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2700'.
[  274.979215][T12517] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2700'.
[  275.019339][T12519] netlink: 'syz.6.2701': attribute type 2 has an invalid length.
[  275.532446][T12541] netlink: 'syz.9.2712': attribute type 5 has an invalid length.
[  275.540720][T12541] netlink: 713 bytes leftover after parsing attributes in process `syz.9.2712'.
[  275.544341][T12541] netlink: 130080 bytes leftover after parsing attributes in process `syz.9.2712'.
[  275.553764][T12541] netlink: 'syz.9.2712': attribute type 5 has an invalid length.
[  275.557346][T12541] netlink: 713 bytes leftover after parsing attributes in process `syz.9.2712'.
[  275.790176][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2721'.
[  275.807439][T12561] netlink: 809 bytes leftover after parsing attributes in process `syz.6.2722'.
[  275.815428][T12559] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  275.818612][T12559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.850442][T12563] sit0: entered promiscuous mode
[  276.270000][T12568] netlink: 'syz.9.2725': attribute type 2 has an invalid length.
[  276.273113][T12568] netlink: 'syz.9.2725': attribute type 1 has an invalid length.
[  277.069086][T12582] netlink: 'syz.6.2730': attribute type 21 has an invalid length.
[  277.541165][T12606] netlink: 'syz.6.2740': attribute type 1 has an invalid length.
[  278.492739][T12635] netlink: 'syz.9.2754': attribute type 10 has an invalid length.
[  278.497479][T12635] netlink: 'syz.9.2754': attribute type 19 has an invalid length.
[  278.500234][T12635] __nla_validate_parse: 3 callbacks suppressed
[  278.500246][T12635] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2754'.
[  278.633132][T12639] netlink: 14601 bytes leftover after parsing attributes in process `syz.9.2755'.
[  278.703093][T12641] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2756'.
[  278.904349][T12644] openvswitch: netlink: Message has 16 unknown bytes.
[  278.912005][T12644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.054094][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2758'.
[  279.149146][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2758'.
[  279.157273][T12647] dummy0: entered promiscuous mode
[  279.230517][T12647] team0: Port device dummy0 removed
[  279.237826][T12647] bridge0: port 4(dummy0) entered blocking state
[  279.242483][T12647] bridge0: port 4(dummy0) entered disabled state
[  279.249108][T12647] dummy0: entered allmulticast mode
[  280.430509][T12691] validate_nla: 2 callbacks suppressed
[  280.430528][T12691] netlink: 'syz.6.2778': attribute type 21 has an invalid length.
[  280.556981][T12693] syzkaller0: entered promiscuous mode
[  280.560198][T12693] syzkaller0: entered allmulticast mode
[  282.381256][T12701] netlink: 9896 bytes leftover after parsing attributes in process `syz.6.2781'.
[  282.789686][T12714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.978216][T12722] syzkaller0: entered promiscuous mode
[  282.980473][T12722] syzkaller0: entered allmulticast mode
[  286.133595][T12743] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2801'.
[  286.139563][T12743] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2801'.
[  286.144026][T12743] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2801'.
[  286.476532][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  286.481551][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  286.487361][   T33] audit: type=1107 audit(1758387405.782:6): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  286.493440][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  286.506964][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  286.511256][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  286.715845][T12751] chnl_net:caif_netlink_parms(): no params data found
[  286.816327][T12751] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.818828][T12751] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.821501][T12751] bridge_slave_0: entered allmulticast mode
[  286.825182][T12751] bridge_slave_0: entered promiscuous mode
[  286.828901][T12751] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.834658][T12751] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.837471][T12751] bridge_slave_1: entered allmulticast mode
[  286.841232][T12751] bridge_slave_1: entered promiscuous mode
[  286.881694][T12751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.888258][T12751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.920467][T12751] team0: Port device team_slave_0 added
[  286.926422][T12751] team0: Port device team_slave_1 added
[  286.965911][T12751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.968737][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.983545][T12751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.992317][T12751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.998217][T12751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.008308][T12751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.054698][T12751] hsr_slave_0: entered promiscuous mode
[  287.058404][T12751] hsr_slave_1: entered promiscuous mode
[  287.061281][T12751] debugfs: 'hsr0' already exists in 'hsr'
[  287.063432][T12751] Cannot create hsr debugfs directory
[  287.401886][T12785] netlink: 'syz.6.2814': attribute type 11 has an invalid length.
[  287.405876][T12785] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.2814'.
[  287.472466][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  287.664165][T12751] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  287.674852][T12751] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  287.687031][T12751] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  287.699222][T12751] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  287.852554][T12751] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.886498][T12751] 8021q: adding VLAN 0 to HW filter on device team0
[  287.906849][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.909630][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.926984][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.929570][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.937897][T12815] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2819'.
[  288.110658][T12823] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2821'.
[  288.115033][T12823] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2821'.
[  288.253880][T12751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.341276][T12751] veth0_vlan: entered promiscuous mode
[  288.366177][T12751] veth1_vlan: entered promiscuous mode
[  288.376343][ T5861] Bluetooth: hci2: command 0x0406 tx timeout
[  288.412881][T12751] veth0_macvtap: entered promiscuous mode
[  288.429901][T12751] veth1_macvtap: entered promiscuous mode
[  288.453817][T12751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.472364][T12751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.512262][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.543350][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.544883][   T55] Bluetooth: hci4: command tx timeout
[  288.567425][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.571609][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.677310][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.680470][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.733569][  T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.740261][  T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.149161][T12892] netlink: 'syz.6.2836': attribute type 13 has an invalid length.
[  290.152567][T12892] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2836'.
[  290.197031][T12892] erspan0: refused to change device tx_queue_len
[  290.199308][T12892] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  290.505383][T12902] rdma_rxe: rxe_newlink: failed to add erspan0
[  290.614942][   T55] Bluetooth: hci4: command tx timeout
[  290.623700][T12912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  290.628674][T12912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  291.423733][T12914] netlink: 'syz.6.2841': attribute type 39 has an invalid length.
[  292.700321][   T55] Bluetooth: hci4: command tx timeout
[  294.533295][    C0] clocksource: Long readout interval, skipping watchdog check: cs_nsec: 1338670957 wd_nsec: 1338670878
[  294.774899][   T55] Bluetooth: hci4: command tx timeout
[  295.653401][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  295.657554][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  295.658417][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  295.673953][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  295.674633][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  295.959383][T12932] chnl_net:caif_netlink_parms(): no params data found
[  297.734841][   T55] Bluetooth: hci5: command tx timeout
[  299.814871][   T55] Bluetooth: hci5: command tx timeout
[  301.894801][   T55] Bluetooth: hci5: command tx timeout
[  303.974758][   T55] Bluetooth: hci5: command tx timeout
[  306.216511][T12932] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.219117][T12932] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.221389][T12932] bridge_slave_0: entered allmulticast mode
[  306.224086][T12932] bridge_slave_0: entered promiscuous mode
[  306.234267][T12932] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.236851][T12932] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.239267][T12932] bridge_slave_1: entered allmulticast mode
[  306.242574][T12932] bridge_slave_1: entered promiscuous mode
[  306.290223][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.301741][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.399753][T12932] team0: Port device team_slave_0 added
[  306.403343][T12932] team0: Port device team_slave_1 added
[  306.465344][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.467537][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.493625][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.554256][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.558120][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.563536][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.567341][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.571056][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.573957][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.577873][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.588798][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.632652][T12932] hsr_slave_0: entered promiscuous mode
[  306.636888][T12932] hsr_slave_1: entered promiscuous mode
[  306.640005][T12932] debugfs: 'hsr0' already exists in 'hsr'
[  306.641889][T12932] Cannot create hsr debugfs directory
[  306.692581][T12957] netlink: 'syz.0.2851': attribute type 3 has an invalid length.
[  307.102328][T12952] chnl_net:caif_netlink_parms(): no params data found
[  307.267640][T12952] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.270611][T12952] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.273667][T12952] bridge_slave_0: entered allmulticast mode
[  307.306588][T12952] bridge_slave_0: entered promiscuous mode
[  307.323287][T12952] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.334641][T12952] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.338014][T12952] bridge_slave_1: entered allmulticast mode
[  307.342183][T12952] bridge_slave_1: entered promiscuous mode
[  307.364392][T12982] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2855'.
[  307.422126][T12952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.432633][T12952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.573392][T12952] team0: Port device team_slave_0 added
[  307.583241][T12952] team0: Port device team_slave_1 added
[  307.669213][T12952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.672015][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.682021][T12952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.687350][T12992] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2858'.
[  307.692074][T12932] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  307.713165][T12952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.719955][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.741310][T12952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.772720][T12932] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  307.784909][T12932] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  307.803032][T12932] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  307.886578][T12952] hsr_slave_0: entered promiscuous mode
[  307.889427][T12952] hsr_slave_1: entered promiscuous mode
[  307.892074][T12952] debugfs: 'hsr0' already exists in 'hsr'
[  307.896538][T12952] Cannot create hsr debugfs directory
[  307.921078][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2862'.
[  308.043522][T13016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2864'.
[  308.299389][T13028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.337196][T12932] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.381170][T12932] 8021q: adding VLAN 0 to HW filter on device team0
[  308.449661][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.452671][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.473244][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.476181][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.615147][   T55] Bluetooth: hci2: command tx timeout
[  308.850478][T13053] netlink: 'syz.0.2873': attribute type 1 has an invalid length.
[  308.856925][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  308.932961][T12952] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  308.951890][T12952] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  308.972458][T12952] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  308.992243][T12952] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  309.003218][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.189340][T12932] veth0_vlan: entered promiscuous mode
[  309.220381][T12932] veth1_vlan: entered promiscuous mode
[  309.307931][T12952] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.362447][T12952] 8021q: adding VLAN 0 to HW filter on device team0
[  309.388482][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.391527][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.451188][T12932] veth0_macvtap: entered promiscuous mode
[  309.502154][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.505284][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.527434][T12932] veth1_macvtap: entered promiscuous mode
[  309.632037][T12932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.661246][T12932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.689439][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.701757][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.760896][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.763604][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.874261][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.877459][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.983677][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.996429][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.068907][T12952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  310.471999][T12952] veth0_vlan: entered promiscuous mode
[  310.498985][T12952] veth1_vlan: entered promiscuous mode
[  310.599169][T12952] veth0_macvtap: entered promiscuous mode
[  310.603746][T12952] veth1_macvtap: entered promiscuous mode
[  310.728407][T12952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.736181][ T5861] Bluetooth: hci2: command tx timeout
[  310.806387][T12952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.855013][ T6304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.858515][ T6304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.923021][ T6304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.938866][ T6304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.150789][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.153786][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.244355][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.249324][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.366275][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'.
[  311.509551][T13135] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2882'.
[  312.186069][T13172] netlink: 'syz.4.2894': attribute type 28 has an invalid length.
[  312.214590][T13172] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2894'.
[  312.775646][ T5861] Bluetooth: hci2: command tx timeout
[  313.340112][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'.
[  313.506987][ T5874] unregister_netdevice: waiting for lo to become free. Usage count = 7
[  313.510389][ T5874] ref_tracker: netdev@ffff888030b58610 has 1/1 users at
[  313.510389][ T5874]      ib_device_set_netdev+0x31f/0x6d0
[  313.510389][ T5874]      rxe_register_device+0x1c7/0x310
[  313.510389][ T5874]      rxe_net_add+0x81/0x110
[  313.510389][ T5874]      rxe_newlink+0xdd/0x190
[  313.510389][ T5874]      nldev_newlink+0x4a5/0x5a0
[  313.510389][ T5874]      rdma_nl_rcv+0x6ae/0x980
[  313.510389][ T5874]      netlink_unicast+0x82f/0x9e0
[  313.510389][ T5874]      netlink_sendmsg+0x805/0xb30
[  313.510389][ T5874]      __sock_sendmsg+0x21c/0x270
[  313.510389][ T5874]      ____sys_sendmsg+0x505/0x830
[  313.510389][ T5874]      ___sys_sendmsg+0x21f/0x2a0
[  313.510389][ T5874]      __x64_sys_sendmsg+0x19b/0x260
[  313.510389][ T5874]      do_syscall_64+0xfa/0x3b0
[  313.510389][ T5874]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.510389][ T5874] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  314.672085][T13216] delete_channel: no stack
[  317.038802][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.041348][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  323.415292][   T34] INFO: task kworker/u9:1:28 blocked for more than 144 seconds.
[  323.422837][   T34]       Not tainted syzkaller #0
[  323.429877][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.433321][   T34] task:kworker/u9:1    state:D stack:22608 pid:28    tgid:28    ppid:2      task_flags:0x4208060 flags:0x00004000
[  323.437838][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  323.440179][   T34] Call Trace:
[  323.441240][   T34]  <TASK>
[  323.442190][   T34]  __schedule+0x1798/0x4cc0
[  323.443947][   T34]  ? stack_depot_save_flags+0x41b/0x860
[  323.450867][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.452972][   T34]  ? __pfx___schedule+0x10/0x10
[  323.455131][   T34]  ? schedule+0x91/0x360
[  323.456919][   T34]  schedule+0x165/0x360
[  323.458599][   T34]  schedule_timeout+0x9a/0x270
[  323.460481][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  323.462631][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.469432][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.471613][   T34]  ? wait_for_completion+0x267/0x5d0
[  323.473791][   T34]  wait_for_completion+0x2bf/0x5d0
[  323.476006][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  323.478333][   T34]  ? remove_client_context+0x19c/0x1e0
[  323.480524][   T34]  disable_device+0x1c6/0x320
[  323.482445][   T34]  ? __pfx_disable_device+0x10/0x10
[  323.487441][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  323.494941][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.497138][   T34]  ib_unregister_work+0x19/0x30
[  323.499139][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  323.501450][   T34]  process_scheduled_works+0xae1/0x17b0
[  323.503761][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  323.510909][   T34]  worker_thread+0x8a0/0xda0

VM DIAGNOSIS:
16:57:12  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff934e43d8 RBX=0000000000000000 RCX=0000000000000601 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888021a81cc0 RBP=0000000000000601 RSP=ffffc900047dfbe8
R8 =0000000000000000 R9 =ffffffff82397368 R10=dffffc0000000000 R11=fffffbfff1f47527
R12=0000000000018000 R13=0000000000000000 R14=ffff888021a82800 R15=ffff888021a827b0
RIP=ffffffff819d76bb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555867f8500 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555868135c8 CR3=00000001214b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4fd4e12e53
XMM06=0000000000000000 00007f4fd4e12e4d XMM07=0000000000000000 00007f4fd4e12e61
XMM08=0000000000000000 00007f4fd4e12ee7 XMM09=0000000000000000 00007f4fd4e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000401eeb0
R8 =ffff888108530237 R9 =1ffff110210a6046 R10=dffffc0000000000 R11=ffffffff854fa300
R12=dffffc0000000000 R13=ffffffff99b02914 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854fa37c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fd214e5000 CR3=0000000126ba8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
